Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/hhs5pZ8noCChwhBRx2O4gm1_jxo.roa
File: hhs5pZ8noCChwhBRx2O4gm1_jxo.roa (raw, json)
Hash identifier: 2W5dUvt5ICy+WaeVBCBVi4YnD74/lCq/Aq5rtDeNfZw=
Subject key identifier: 86:1B:39:A5:9F:27:A0:20:A1:C2:10:51:C7:63:B8:82:6D:7F:8F:1A
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 0721D5
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/hhs5pZ8noCChwhBRx2O4gm1_jxo.roa
Signing time: Thu 27 Jan 2022 21:27:15 +0000
ROA not before: Thu 27 Jan 2022 21:27:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57316
IP address blocks: 85.204.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467413 (0x721d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 27 21:27:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861b39a59f27a020a1c21051c763b8826d7f8f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:aa:39:06:4f:f2:f8:64:f1:84:b3:37:80:
aa:2a:f4:fd:3f:db:b7:73:27:34:3d:4c:93:6f:26:
1d:36:93:91:0c:57:d6:f3:fb:42:6a:fe:7f:60:40:
77:c2:b8:46:dc:c1:38:ef:db:1e:71:e1:d7:c3:f4:
4f:c8:dd:87:bc:a1:56:17:71:f3:17:7f:fc:13:09:
ad:bd:d2:08:5d:e8:0b:c8:35:31:6a:a5:08:4f:d7:
7d:09:34:ae:4c:c5:e0:03:1b:0a:dd:8f:8d:c3:b1:
b7:45:b2:0d:40:32:1c:cd:39:77:98:81:5e:9f:bc:
0a:9d:b4:41:a3:43:c3:fd:4f:a2:12:7e:c4:66:30:
d8:35:6c:30:d3:0f:1b:6c:76:31:eb:f9:cf:a0:b1:
a4:c4:7e:bf:ab:ef:be:d0:70:7b:2d:8a:3b:aa:27:
49:3c:df:66:68:4f:8e:82:ea:04:90:15:e4:04:b5:
0f:fb:05:e4:cf:db:f5:05:ae:55:ce:1e:b2:e1:b0:
97:24:bb:29:5f:c0:be:52:f2:8a:20:db:32:34:86:
6a:c7:e8:c0:5e:8d:6e:00:88:5c:f2:5c:19:90:65:
38:6f:3b:9b:38:00:26:3f:9b:8d:62:17:57:98:cd:
19:aa:74:da:55:23:35:d4:6c:f1:a4:0b:3b:48:b8:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:39:A5:9F:27:A0:20:A1:C2:10:51:C7:63:B8:82:6D:7F:8F:1A
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/hhs5pZ8noCChwhBRx2O4gm1_jxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:01:1b:cc:99:01:82:7d:48:c5:f2:c4:03:3f:34:63:d8:6d:
5f:38:40:77:ba:f7:ab:bd:f8:40:ba:0a:5a:f9:14:83:c7:cd:
b8:ce:3f:90:7b:96:86:86:03:50:b3:8e:dd:1c:c7:0c:5a:53:
48:d2:85:9e:93:14:0b:86:3d:fc:81:a8:ed:d3:fc:2a:a7:be:
a8:66:de:c1:f9:b3:39:5d:50:e7:ac:f6:9f:13:d8:89:63:c4:
c7:0a:7d:bd:aa:f7:0b:aa:b3:58:d8:fb:d7:06:78:6b:14:89:
6a:78:f7:97:32:03:da:b9:db:65:e1:8a:0a:45:d2:1b:e0:6a:
7c:3f:64:a5:73:28:01:8d:45:64:2f:73:f3:0e:0c:de:d6:4b:
08:f7:1d:de:95:60:53:76:79:74:d9:c6:a9:7c:c0:6b:9d:6f:
0f:8e:2c:43:98:90:0e:8f:96:bc:67:b6:20:d2:fa:c6:d0:7f:
f3:c1:fa:04:03:7b:0b:5e:77:3d:ed:5c:ce:1d:0f:83:77:80:
9a:d9:c6:72:f0:72:2d:ce:0f:86:56:2c:1e:f8:50:22:f0:f6:
96:04:7f:ee:58:da:13:a4:3c:cd:d5:6d:ff:a8:64:36:ea:16:
0e:8b:c9:8b:91:52:c6:3a:4b:f1:cf:de:8a:21:fe:ef:92:c5:
43:4f:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:16:56 2025 by rpki-client