Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/HK9YTPeAPa2mm7JsqVFDcEqWktE.roa
File: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (raw, json)
Hash identifier: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=
Subject key identifier: 1C:AF:58:4C:F7:80:3D:AD:A6:9B:B2:6C:A9:51:43:70:4A:96:92:D1
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0B2A245F9B35988D5937897BAFE3
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/HK9YTPeAPa2mm7JsqVFDcEqWktE.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.158.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0b:2a:24:5f:9b:35:98:8d:59:37:89:7b:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1caf584cf7803dada69bb26ca95143704a9692d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:0b:41:a8:5d:d5:23:74:a6:50:f9:51:6d:
48:3f:2f:c9:7f:2e:cf:b0:83:0f:e4:3a:73:21:2e:
58:69:01:51:f6:80:a6:cc:3d:7e:e2:a5:db:18:11:
fa:79:8a:f8:ab:5f:e2:db:6d:b3:40:b9:b3:22:2e:
e8:09:1f:1f:1b:bf:b8:ed:95:ad:47:aa:bc:9e:72:
9d:ae:b2:81:d1:bf:53:df:44:33:bc:42:f6:0c:1b:
b8:5f:c2:7c:78:cf:99:63:c0:4b:dc:4c:6a:de:e2:
96:3c:54:fa:05:88:fe:4e:94:a1:48:c0:11:9a:5b:
bd:b6:ad:92:dd:f7:be:5a:e7:89:39:82:27:4f:d2:
5b:23:b2:d0:67:09:32:df:55:3b:03:5b:3e:f0:73:
7e:bf:a9:86:7f:7d:4d:b9:4a:ff:ba:df:78:a3:9e:
81:24:4a:37:d5:e6:e0:60:d0:1f:ac:ad:5d:92:b5:
16:c8:5e:9e:ed:84:76:f1:27:14:97:b9:8f:40:ee:
32:79:97:0b:8b:88:8e:6d:c6:8d:d8:02:de:0f:90:
3e:79:5b:1d:c6:44:71:38:70:59:29:57:cf:60:64:
62:0c:e9:62:e8:3d:9d:3e:e0:58:cb:4b:3f:6d:83:
90:1f:1a:e4:9e:e1:8a:b6:27:8e:98:79:38:74:cf:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:58:4C:F7:80:3D:AD:A6:9B:B2:6C:A9:51:43:70:4A:96:92:D1
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/HK9YTPeAPa2mm7JsqVFDcEqWktE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
11:73:40:fd:96:a8:af:1c:8e:1c:3d:43:50:ed:e0:a2:42:3e:
de:ca:42:a0:b4:bb:91:a2:73:de:d9:6e:bf:da:89:de:72:36:
c1:25:39:ef:80:97:3c:cb:7d:b6:80:5f:33:f7:a0:a7:f1:f4:
6c:75:e2:37:eb:f7:84:f8:74:e8:40:4b:16:3a:10:43:1a:a0:
69:68:7f:8f:15:f2:ef:4b:86:73:ec:75:a8:d4:aa:7a:8e:c9:
40:03:41:36:32:e4:b9:77:e1:49:c8:4d:8e:fa:35:20:0d:33:
96:e9:ec:46:1d:a1:22:6f:23:14:8a:9f:15:ba:52:98:64:78:
ed:47:fc:6b:6b:6d:cb:7c:7e:72:23:80:20:1b:3e:dc:a3:f9:
3c:af:41:c1:f4:b4:41:e5:3d:b9:9d:7d:7f:a6:27:de:6d:e6:
e3:50:b0:28:42:8d:59:20:32:a9:8b:ff:ae:82:69:86:39:65:
4c:8d:0b:b3:01:9f:f5:44:1e:6f:2b:cb:d1:b7:d2:71:b6:ce:
dc:03:e5:49:2c:49:f9:d8:f3:31:02:2e:71:8a:fa:a3:8a:d5:
4d:b8:06:21:49:ff:58:a2:e3:5b:09:5a:d2:be:6e:4a:4b:42:
8f:1d:2a:1b:3c:86:07:64:d9:c6:c5:2c:4f:ae:4e:f0:f1:e5:
a2:e0:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:44 2025 by rpki-client