Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hbNoPdH-PnziVSgjRUblGvQJWCQ.roa
File: hbNoPdH-PnziVSgjRUblGvQJWCQ.roa (raw, json)
Hash identifier: s/72wNKbvQCTKwi2LT2XOLxwtREDLsIeU6w2+nNpo7A=
Subject key identifier: 85:B3:68:3D:D1:FE:3E:7C:E2:55:28:23:45:46:E5:1A:F4:09:58:24
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01953901C64E34605098D1416FAAD2CB8C90
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hbNoPdH-PnziVSgjRUblGvQJWCQ.roa
Signing time: Mon 24 Feb 2025 17:29:32 +0000
ROA not before: Mon 24 Feb 2025 17:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 194.31.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:01:c6:4e:34:60:50:98:d1:41:6f:aa:d2:cb:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Feb 24 17:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85b3683dd1fe3e7ce25528234546e51af4095824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:3b:a6:e4:ab:a5:f9:a7:07:15:2a:15:33:
50:7b:2f:c7:81:ed:83:df:66:b4:4e:80:29:96:57:
03:43:6c:aa:bd:92:17:7c:4e:c4:31:19:45:3a:79:
24:2a:cf:64:51:ef:de:6b:06:ad:9b:d6:74:2d:fb:
67:72:bd:93:82:aa:96:0d:37:7d:89:6a:fc:7e:30:
3e:c4:a0:c7:ed:7e:0a:c7:94:73:fa:51:4b:ac:a6:
67:cb:00:33:42:07:ec:af:fc:03:a2:9b:c7:04:5b:
ab:71:3b:9d:1c:81:b2:c2:77:da:0f:69:8f:38:64:
1f:69:59:a5:ff:f1:b5:61:bc:53:26:f3:04:5a:0a:
1f:cb:f4:a9:6c:ac:56:b6:8e:3d:9a:53:b6:d3:97:
60:2b:1e:ad:51:15:0e:c1:ef:91:96:01:12:65:1c:
86:71:9f:15:61:ee:6a:00:57:46:4c:92:bb:61:fe:
4f:c8:22:a2:9b:d1:b9:be:6f:58:82:24:01:34:b1:
1a:5c:d8:e8:78:d0:cd:ed:98:52:65:38:b2:1f:2c:
98:4d:20:4a:27:a0:52:f0:95:54:c2:f6:6a:09:5c:
f7:67:b6:37:7c:06:dd:9f:d1:cb:bd:98:ce:65:74:
81:68:15:32:09:23:13:2b:95:a6:38:c4:20:de:ec:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:68:3D:D1:FE:3E:7C:E2:55:28:23:45:46:E5:1A:F4:09:58:24
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/hbNoPdH-PnziVSgjRUblGvQJWCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:e7:4a:dc:55:b7:05:fd:b6:e7:fe:e0:c1:4d:68:67:b0:
cb:ac:d4:f7:64:c1:93:ac:48:4a:ae:ac:93:21:2e:f9:b9:b8:
f4:51:72:8d:ec:12:af:d6:d0:43:8e:d7:3a:89:01:39:77:f8:
fb:34:a5:7e:3f:27:19:b6:d4:e1:88:0a:ca:09:3d:d3:61:c1:
56:8c:9a:39:cd:f9:9d:47:44:54:17:ac:bd:e9:9b:88:5d:ce:
bb:80:74:33:3e:e9:22:07:d4:42:23:83:f9:76:c4:73:3b:1e:
91:26:9e:0e:e5:f2:af:14:69:c1:13:db:3a:37:17:5b:49:a5:
2c:b7:0a:0e:93:86:bd:44:a4:e6:12:dc:4b:42:58:f6:15:59:
ad:5a:3c:78:ba:c9:db:a1:4b:c9:81:40:9c:60:27:01:b3:34:
a4:d3:56:39:5d:a0:fb:e3:74:89:a0:39:cd:dc:98:c7:52:cb:
8f:03:ee:b1:8a:68:e6:22:34:34:ec:86:55:5e:0b:51:a7:5a:
eb:16:00:47:ca:82:d4:8c:11:ff:81:15:83:d2:6c:6c:6b:57:
3a:fa:e9:d5:f9:7c:5e:b1:f4:6d:be:b9:28:d5:7d:b0:e2:cc:
99:b3:27:e0:f0:00:95:a6:2f:44:9d:dc:41:56:93:d2:60:7f:
de:05:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:42:30 2025 by rpki-client