Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/HLNUVqd7ZWuCE8I6GQc24uZBIRo.roa
File: HLNUVqd7ZWuCE8I6GQc24uZBIRo.roa (raw, json)
Hash identifier: xKAGipsPZe3kBZoA8VMkmtCBmKVLv8JzZg0vHgjSXQA=
Subject key identifier: 1C:B3:54:56:A7:7B:65:6B:82:13:C2:3A:19:07:36:E2:E6:41:21:1A
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018A75F5551D056FEA172CDB2BD16045F676
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/HLNUVqd7ZWuCE8I6GQc24uZBIRo.roa
Signing time: Fri 08 Sep 2023 18:02:06 +0000
ROA not before: Fri 08 Sep 2023 18:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 86.104.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:f5:55:1d:05:6f:ea:17:2c:db:2b:d1:60:45:f6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Sep 8 18:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb35456a77b656b8213c23a190736e2e641211a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:d8:2e:d7:09:dc:a4:76:69:78:87:c1:37:
86:06:29:87:be:a4:d3:f3:ff:76:56:12:5c:fb:80:
bb:cd:f3:30:fe:55:1e:02:35:b8:ca:fc:2f:43:c0:
7b:58:e3:2b:46:0d:4a:d6:06:51:ee:c9:1a:e4:4b:
2f:cf:07:1f:90:71:e8:1a:61:cd:05:69:26:96:7a:
b4:ee:74:88:96:a3:17:0e:a3:87:c3:62:92:af:55:
67:b4:8d:ed:73:e1:42:f2:aa:dd:7a:95:b2:e5:b4:
8a:65:a2:97:c2:57:b1:cb:40:47:eb:c8:42:25:2d:
3e:7f:69:2a:36:dd:26:b4:0c:86:e5:1b:ef:c6:75:
61:d3:14:97:1e:69:79:a1:29:cd:b5:cc:21:86:63:
f0:51:47:7c:3d:62:e1:5f:0b:d0:62:c9:b6:6f:36:
d4:05:2f:04:f4:d0:eb:ba:1b:a7:29:e9:1b:4b:09:
f3:8d:da:27:79:3e:73:ba:49:e8:36:f4:fc:93:4d:
95:0a:3a:34:5f:33:7c:5b:c6:05:8c:7c:4d:16:6a:
3b:bf:bb:29:87:f2:71:1f:51:1a:80:7a:40:e8:a3:
ec:a6:61:a0:a4:26:0b:25:bc:45:82:81:85:8e:74:
1a:ab:ae:2a:c8:38:71:86:94:4f:af:a6:d5:79:49:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:54:56:A7:7B:65:6B:82:13:C2:3A:19:07:36:E2:E6:41:21:1A
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/HLNUVqd7ZWuCE8I6GQc24uZBIRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.8.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b4:92:d0:bd:ad:e7:8e:2f:bc:21:7b:39:8e:8c:8c:94:7a:
cd:f8:7b:d1:b2:ff:1a:16:61:53:59:08:0f:79:50:de:a6:b2:
22:c0:4f:3e:e7:58:4c:ed:4e:3d:bb:20:5d:89:5c:6b:33:20:
28:ef:f4:f8:3a:4a:2e:cc:53:34:75:98:e6:b1:7d:fe:63:3e:
f4:b6:8a:9e:7e:70:b9:dd:fe:70:10:94:04:07:f6:3a:03:f4:
95:68:4b:a9:a5:9c:09:0b:a1:79:41:f1:0e:ce:51:c7:62:85:
e7:71:50:48:c4:8b:63:0c:66:83:57:e0:4f:c4:37:57:cc:5b:
1c:cd:cf:bb:18:c1:5a:8f:8b:0a:0a:5b:4d:7a:5e:73:2e:3f:
ae:f2:93:8f:2a:16:cc:15:41:37:00:f1:4d:9a:b5:91:4b:cb:
40:bb:55:30:f9:19:6c:e3:45:fc:12:b0:eb:c6:5e:10:69:44:
a5:89:ae:ac:cf:e5:46:00:46:6c:20:0b:cc:f1:f9:80:33:dd:
a2:c2:98:52:46:05:86:fc:13:fd:67:41:e2:5c:1b:54:c3:21:
9f:d3:e7:e9:bb:c0:ad:b7:0d:00:1e:49:bd:93:1d:df:40:f1:
44:05:42:9f:74:13:1b:50:f3:0e:8b:19:bc:ea:3b:f8:63:4f:
fa:a9:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:23:06 2025 by rpki-client