Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/hpZSx9Vng3-VI4pASgBftirEi-Q.roa
File: hpZSx9Vng3-VI4pASgBftirEi-Q.roa (raw, json)
Hash identifier: /VvB1t+SDDMK6WNZlAvjYfSfTQScDu6ltoRRkMMffNE=
Subject key identifier: 86:96:52:C7:D5:67:83:7F:95:23:8A:40:4A:00:5F:B6:2A:C4:8B:E4
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0A6394B8
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/hpZSx9Vng3-VI4pASgBftirEi-Q.roa
Signing time: Wed 01 Jun 2022 17:49:20 +0000
ROA not before: Wed 01 Jun 2022 17:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 2.58.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174298296 (0xa6394b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jun 1 17:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=869652c7d567837f95238a404a005fb62ac48be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:51:c4:5b:6c:12:2f:91:ad:31:97:a1:8e:
51:ff:8c:77:7f:61:06:54:80:94:7d:39:30:8a:83:
9a:18:e9:d4:7c:be:4a:b5:0b:98:8b:74:b2:d0:95:
65:7e:2a:d9:d9:60:16:db:0f:a3:b3:ca:c1:ca:70:
1d:87:ef:9b:9f:97:f8:42:aa:e9:c3:37:20:9b:06:
46:ec:2a:05:92:93:e7:a6:97:86:e0:0a:71:6e:47:
6e:e0:66:32:2e:93:18:b7:b9:03:f4:46:b1:7e:a4:
61:15:8c:77:57:e2:71:72:6a:7d:17:41:7e:39:68:
d9:2e:16:f6:0c:3a:ab:55:c1:69:31:95:41:58:7b:
0a:3e:53:75:cc:cb:b5:ed:6d:55:5e:c7:e4:50:4f:
c4:53:d7:d3:d8:1c:43:0f:87:88:8c:c6:1b:18:d9:
b8:a2:4b:ce:9e:58:55:cb:aa:10:62:37:fc:ea:c9:
e6:32:2b:98:9d:11:d1:ef:ff:f4:d7:df:a2:bb:71:
e4:b6:ad:cb:9e:42:98:0f:ac:37:5a:b6:29:5d:64:
a3:87:c6:2e:f2:b8:20:f1:37:ba:c9:99:30:91:2e:
1c:a5:c1:37:8f:bd:fe:b0:d0:a7:f2:c5:12:12:1c:
0a:68:19:5c:dd:d9:5f:ee:78:69:ac:fa:48:85:2e:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:52:C7:D5:67:83:7F:95:23:8A:40:4A:00:5F:B6:2A:C4:8B:E4
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/hpZSx9Vng3-VI4pASgBftirEi-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
Signature Algorithm: sha256WithRSAEncryption
71:8c:0e:e0:14:06:f6:75:83:0d:52:5e:5d:37:2e:aa:a0:14:
1a:14:44:ef:10:9d:41:7c:5d:30:d9:e0:c4:68:4c:df:7e:8a:
e7:d5:aa:da:b2:79:a5:82:27:32:1e:dc:6f:4f:2b:09:c4:28:
3e:68:1f:4a:4d:49:4a:24:04:ed:ef:78:39:9c:49:4c:bb:f7:
95:08:6a:b8:3e:72:38:cb:f2:1d:5f:a4:5b:9e:86:92:f0:4f:
20:c0:16:83:00:1b:43:a1:b6:0b:06:40:98:78:fc:8b:6f:af:
7a:1c:7c:d4:39:74:e2:43:ce:fc:9b:94:1b:10:df:05:47:82:
07:84:de:b2:51:10:39:31:8a:bc:a6:d3:33:e7:0d:e7:5d:f3:
05:9a:78:32:e8:ac:81:c5:90:cc:bb:18:bd:19:e6:b6:e8:4b:
ff:d9:dd:73:c8:a3:8e:af:5d:f3:78:67:ef:91:f0:53:08:bd:
5a:8c:a8:75:f6:ff:e2:61:96:1b:7f:b9:b4:69:7d:ce:9c:03:
3e:77:82:53:e1:aa:62:3e:03:dc:bd:86:5f:14:b9:4d:6f:91:
92:c5:65:6b:9b:dc:78:e4:80:b8:12:e7:ec:46:45:a8:46:5d:
9d:f2:06:44:0c:7b:40:fc:23:cd:32:11:84:9e:c7:c0:6b:98:
e8:e1:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:26 2025 by rpki-client