Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/hlbCnpGhMRluMY_1waDMmeV9vY4.roa
File: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (raw, json)
Hash identifier: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=
Subject key identifier: 86:56:C2:9E:91:A1:31:19:6E:31:8F:F5:C1:A0:CC:99:E5:7D:BD:8E
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019427B46C9B56B32959EB8EFF30C8D6713D
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/hlbCnpGhMRluMY_1waDMmeV9vY4.roa
Signing time: Thu 02 Jan 2025 15:48:43 +0000
ROA not before: Thu 02 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 193.5.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:6c:9b:56:b3:29:59:eb:8e:ff:30:c8:d6:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jan 2 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8656c29e91a131196e318ff5c1a0cc99e57dbd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:66:8c:70:94:ff:b8:95:0d:48:19:d1:24:
1b:8a:21:84:11:26:b3:7f:7d:b6:e6:6e:37:da:a6:
c9:fc:9c:00:37:df:f5:26:83:c4:15:0e:85:22:23:
6e:9b:23:71:77:56:1c:9e:ef:cd:5e:3d:06:49:4c:
16:9f:24:4b:38:08:d6:dc:9b:99:e8:f4:42:07:b6:
73:fc:4a:19:5f:e0:f5:a1:64:cc:fd:b2:05:2a:15:
89:9b:e9:30:95:b3:b4:a3:90:9e:0e:ee:2c:01:63:
94:37:bc:a5:8c:27:37:2c:dc:f3:69:a0:1b:12:b8:
d6:08:83:f1:97:64:e0:46:8a:1c:4d:c7:29:eb:80:
85:a7:1e:89:ed:40:ac:5e:31:87:42:2c:f6:43:7c:
bb:c4:2d:3a:f9:b1:28:49:c7:77:7d:75:7b:03:3c:
ff:e9:b0:7a:b6:42:ca:57:41:91:51:63:46:1e:be:
86:78:cd:d5:5a:4a:4e:78:73:8f:44:01:f4:86:67:
4f:c9:c0:b0:2a:23:89:9f:25:e1:1f:73:c6:2b:0d:
22:62:50:62:c6:cd:d3:f9:c0:e9:f2:c5:79:fb:31:
df:d0:ba:ea:73:f8:87:d1:3e:9c:5f:9a:35:b9:dc:
6e:63:fe:13:dd:26:ee:ca:8e:de:4c:94:22:d1:a1:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:C2:9E:91:A1:31:19:6E:31:8F:F5:C1:A0:CC:99:E5:7D:BD:8E
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/hlbCnpGhMRluMY_1waDMmeV9vY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0e:c3:5d:02:ca:70:b6:57:fb:76:75:4a:cf:16:09:d4:39:
43:b9:f4:7b:ef:e7:94:b8:67:de:9a:98:cf:ea:79:5e:85:8d:
bb:94:1a:f8:5b:94:fa:96:6e:27:69:23:15:03:56:3f:da:e0:
25:4a:5d:dd:26:05:6e:b0:a0:19:4c:de:db:44:6b:05:b9:12:
92:c9:b3:da:39:2e:c2:20:49:75:8c:df:1d:00:26:11:84:9d:
18:27:55:61:4c:f1:84:cc:42:f1:ed:a2:52:56:37:f0:ff:8b:
5a:90:61:03:6a:40:ab:cc:67:3b:dd:a2:81:b3:43:6d:80:b3:
87:76:80:e3:7d:97:e7:bc:8d:7f:ae:c0:92:a0:6d:d3:40:3d:
61:c0:9f:87:73:58:e7:90:1e:62:fc:42:7b:99:81:7c:2c:95:
02:e1:49:ab:60:29:6d:81:b6:ae:ca:36:e2:d9:c3:33:4f:e1:
df:56:5f:a9:f5:87:ec:c0:8f:a5:2b:8f:a7:1c:78:c9:35:5f:
a3:79:eb:60:af:dc:27:ba:8f:46:f7:23:58:52:a9:49:e2:fe:
c3:58:d0:d0:2c:c5:5a:58:05:f5:4c:42:58:d1:a1:8c:49:a2:
dd:c2:ed:ec:ca:89:7a:5f:c9:13:d0:36:9f:65:48:0a:40:d6:
75:42:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:06 2025 by rpki-client