Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/HPLEPNN2VMEqU4ynIfGbaixjg88.roa
File: HPLEPNN2VMEqU4ynIfGbaixjg88.roa (raw, json)
Hash identifier: E5ULe7AuyFB37xNwn3jkOLGVbko+0PN2SeVuvsqVzzY=
Subject key identifier: 1C:F2:C4:3C:D3:76:54:C1:2A:53:8C:A7:21:F1:9B:6A:2C:63:83:CF
Certificate issuer: /CN=9e090317adda08e323ebceed7d54565212742dba
Certificate serial: 01856EA6AD4FEFA398FD6FE833F787857178
Authority key identifier: 9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/HPLEPNN2VMEqU4ynIfGbaixjg88.roa
Signing time: Sun 01 Jan 2023 18:44:55 +0000
ROA not before: Sun 01 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50247
IP address blocks: 194.1.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ad:4f:ef:a3:98:fd:6f:e8:33:f7:87:85:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e090317adda08e323ebceed7d54565212742dba
Validity
Not Before: Jan 1 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf2c43cd37654c12a538ca721f19b6a2c6383cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:26:7a:3c:ab:49:78:1e:32:fd:48:85:1c:
a9:fd:c3:38:7d:d2:98:fb:30:29:8f:37:62:ce:d8:
59:9e:67:58:f2:95:02:c4:2e:53:d2:82:82:e1:b3:
4c:0f:5d:8a:19:64:c5:d7:ee:35:e9:47:12:05:69:
a3:af:e5:c1:d9:24:e1:96:ee:93:c5:23:b3:bc:27:
38:ab:cd:ab:19:a3:fc:8b:9f:9c:da:b5:70:cc:6d:
40:8e:fa:35:13:87:3a:60:9a:b5:2a:0f:5e:53:0d:
a0:6e:82:b9:2f:bf:72:ef:91:d1:c6:ef:26:36:59:
5a:74:d1:db:12:37:78:c3:fe:3d:d5:0f:93:9a:f7:
91:cb:e6:47:f8:9a:d8:56:4d:f6:d6:ee:f3:2e:62:
cb:00:a0:c6:c6:de:8b:46:0e:93:79:fc:0a:2b:3b:
8d:62:2c:75:39:ce:a1:da:b9:3c:4d:9f:60:23:51:
73:6d:d4:14:bb:95:88:61:7d:8d:d1:c6:be:a8:91:
c3:8b:8c:7a:03:4f:56:83:8d:44:2c:5a:ba:03:b0:
c2:0a:bd:fb:11:90:04:98:aa:97:4f:b1:21:b5:e6:
e8:a3:5c:06:04:2c:8a:9a:04:92:eb:66:c4:29:10:
74:bc:76:e9:16:23:9a:e8:99:1a:47:35:c1:0d:33:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:C4:3C:D3:76:54:C1:2A:53:8C:A7:21:F1:9B:6A:2C:63:83:CF
X509v3 Authority Key Identifier:
keyid:9E:09:03:17:AD:DA:08:E3:23:EB:CE:ED:7D:54:56:52:12:74:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngkDF63aCOMj687tfVRWUhJ0Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/HPLEPNN2VMEqU4ynIfGbaixjg88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/13f1e4-d7fe-424c-87c2-dbb9a25f6012/1/ngkDF63aCOMj687tfVRWUhJ0Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:be:36:a9:b3:b3:18:3a:35:80:ba:3a:32:ed:7e:24:dd:3f:
08:95:92:e6:dc:1d:aa:c5:e5:cb:75:68:7d:e1:17:30:a9:29:
dd:47:12:49:80:72:65:ec:b8:92:92:d2:a4:8f:96:37:c2:6b:
e5:84:a8:bd:30:1b:3e:f1:f2:e5:21:d8:65:8d:05:b0:eb:1c:
97:0a:96:88:0b:da:e3:b0:65:af:0a:0b:1b:58:60:4e:01:08:
f8:33:14:c0:e7:37:97:1e:05:64:97:6a:c7:97:69:62:d0:d0:
3d:08:4b:ed:ad:7a:78:63:38:b6:49:41:ce:c9:6e:eb:8c:7e:
8a:84:b5:5b:df:f9:5e:ab:d6:f2:fc:e2:22:97:f3:2b:dd:b5:
d5:58:33:a4:f7:a1:c2:62:a9:81:c2:a1:f6:2e:0e:e0:60:d8:
1f:28:cf:b6:7c:1d:0a:37:0e:72:fc:b1:3f:14:cb:5f:68:46:
78:95:80:63:eb:d3:d7:53:2e:9a:50:61:7a:77:63:80:cf:cb:
e9:10:5a:ba:e8:76:99:4b:e3:f1:3c:43:27:14:d9:e5:31:ff:
a1:f5:b9:b1:38:af:d4:55:70:43:fa:02:cf:b9:ea:24:a4:4d:
0c:b4:2d:cd:aa:c4:bb:60:14:1c:f8:1f:67:1c:6a:9c:ce:1b:
78:66:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:07 2025 by rpki-client