Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa
File: HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa (raw, json)
Hash identifier: FgAisfkYOtHtqPca1uMEVAA9ecV9h1pOsVf2alGzd9o=
Subject key identifier: 1E:51:57:50:77:70:5C:62:59:04:A3:1F:A1:BE:14:28:D4:38:1D:6A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214D848F147AB2CCE0144DDA2839C5
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 92.61.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4d:84:8f:14:7a:b2:cc:e0:14:4d:da:28:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e51575077705c625904a31fa1be1428d4381d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:82:6f:ec:3e:04:a5:e0:38:a8:50:8c:93:
bd:42:eb:78:f0:50:4d:0b:b7:cd:90:f9:44:d7:25:
c9:52:9e:0a:90:52:80:5f:a3:c3:77:5f:4b:d3:6f:
59:49:c1:1a:3a:37:4a:6a:54:c1:03:67:eb:c6:78:
ab:0c:21:1d:ee:41:9f:f4:b1:4b:02:77:76:11:5b:
1b:d2:eb:c8:ac:eb:bf:28:69:27:be:2e:a3:92:17:
82:37:dc:a6:f2:b7:d1:76:53:4f:88:57:31:fc:a4:
66:5e:72:a3:ee:be:1b:5c:e0:72:6a:b9:c1:7e:f9:
7d:18:38:24:0a:ae:e7:3b:4a:fe:51:94:02:25:a1:
f2:7a:99:be:8f:c8:f0:44:c6:eb:4f:22:a6:73:01:
b9:9a:8a:73:e4:d7:d9:58:71:bb:f8:5f:a6:9c:d7:
75:af:c4:07:57:ea:42:ba:e4:89:0e:aa:22:5b:1e:
52:12:91:52:8f:bc:b6:28:a4:29:6c:38:05:e6:73:
65:d7:89:68:16:6c:92:1d:5c:eb:a5:e5:7e:24:e1:
ea:5d:2e:99:3a:da:8d:9b:14:a6:b4:48:49:72:99:
55:c3:d3:a1:89:08:37:f3:e9:ed:26:ef:a1:ca:5d:
92:04:2a:b0:ba:18:60:34:50:55:ab:4c:ee:91:44:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:57:50:77:70:5C:62:59:04:A3:1F:A1:BE:14:28:D4:38:1D:6A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a0:dc:8a:8e:29:ab:46:d0:11:0b:b6:26:4c:a8:f7:00:09:
08:9f:e3:a1:ea:41:ae:a0:49:ed:85:aa:3b:b7:1e:a1:6b:b5:
79:cc:93:06:92:4b:4d:c1:85:3f:98:65:0a:60:de:a8:45:88:
ed:ef:25:74:f2:d7:9a:b1:27:8c:08:e6:c4:da:9b:fb:2b:b4:
1b:c8:46:8f:38:a6:15:07:26:17:12:6d:0a:6a:e0:61:9d:0c:
1b:c4:63:07:02:91:75:94:5f:ad:59:04:e3:53:4f:5e:99:8e:
88:a2:29:ea:54:39:17:56:00:74:c8:a6:4c:ea:cd:39:24:34:
d2:e8:4f:e2:03:90:d3:9c:e4:a0:0c:39:11:a1:00:02:20:2c:
d6:80:c2:1a:f7:4b:ea:0e:7c:df:e0:e3:b2:7c:02:a3:04:8a:
03:6f:0a:25:e2:35:c2:11:ed:48:91:dd:21:be:d9:14:57:0f:
39:4a:ec:94:e6:ff:9a:95:91:7e:9c:fb:e5:83:93:12:20:96:
a1:b4:cd:a9:ef:50:f0:df:4d:49:7a:23:55:2f:03:23:cf:6c:
30:d8:8a:86:c8:63:fd:31:9f:a4:3f:f9:df:12:4c:9b:cf:f0:
cd:4b:2d:c2:6e:a0:8b:49:4e:47:8e:05:31:29:61:e9:00:37:
c7:cb:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:26 2025 by rpki-client