Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa
File: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (raw, json)
Hash identifier: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=
Subject key identifier: 1E:EA:A1:0B:AB:D8:78:8D:D4:F4:B6:CB:77:6B:CF:CE:F2:49:82:36
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019423D6F70D6A99342C14B7EC8AD7489E7F
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201709
IP address blocks: 45.153.112.0/22 maxlen: 24
2a12:c380::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f7:0d:6a:99:34:2c:14:b7:ec:8a:d7:48:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eeaa10babd8788dd4f4b6cb776bcfcef2498236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:9d:1d:b3:3c:1b:72:a9:aa:f9:95:45:f5:
1f:df:47:e7:bb:77:ce:04:96:79:3a:79:11:b5:1c:
41:fe:8a:d3:d7:82:7c:75:e4:16:e2:a3:19:6c:03:
43:00:d4:60:5a:7b:7c:e8:0b:75:c9:34:54:a1:49:
11:02:d6:2a:95:d6:44:a7:b4:4d:04:e4:2a:f9:9d:
f8:e8:a9:f2:91:50:c7:4e:b3:f2:ab:66:a6:e0:eb:
44:30:56:7b:a7:b8:35:56:5d:dd:22:24:bf:bc:36:
d9:f5:2b:8e:ec:03:b9:cc:cf:76:0a:57:78:5a:87:
64:c5:50:a7:d8:7e:27:63:7f:91:a7:6f:f9:f9:c7:
6e:8d:bf:82:7e:5b:fe:e3:08:6b:8e:6b:5b:29:c1:
4a:6d:93:fa:5e:b1:fd:50:d9:56:df:3a:be:f4:27:
76:2f:02:85:2a:ac:f2:03:1d:16:f2:bc:1a:f3:fb:
1b:df:5c:3d:34:97:d6:02:fd:7f:f9:f3:df:f1:8d:
17:ee:b8:09:99:e6:c0:ad:72:f2:91:2f:15:45:be:
74:32:81:53:f6:ec:57:0c:14:20:54:33:ec:a7:c6:
43:4e:fa:f7:9b:d8:45:31:b7:18:5e:f4:e8:6d:7e:
ee:c1:ef:4f:c2:fc:31:f8:c2:8d:31:32:de:42:10:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:A1:0B:AB:D8:78:8D:D4:F4:B6:CB:77:6B:CF:CE:F2:49:82:36
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.112.0/22
IPv6:
2a12:c380::/29
Signature Algorithm: sha256WithRSAEncryption
20:cc:5f:3a:77:47:a5:6b:10:3b:95:03:fb:43:d1:19:72:88:
80:45:0b:ed:02:11:cb:98:f2:03:4d:61:3c:23:8f:47:7f:4c:
65:65:53:a4:65:f9:bd:ff:22:84:63:02:5d:e6:98:d1:fa:19:
28:71:34:08:14:3b:27:07:78:ba:e6:2e:75:45:99:46:25:5b:
79:fe:c1:4a:91:17:3f:e5:1d:97:cd:83:00:ec:2a:a9:ad:86:
e9:4d:33:cc:28:5b:25:f6:44:39:f0:ef:bc:03:dc:7b:b0:01:
8d:4b:f3:25:d4:85:d3:88:1b:b4:59:44:fb:8e:3f:b3:ce:65:
52:dc:94:29:a0:5d:d9:b4:d5:b4:6a:f6:b5:9e:49:cd:f7:b6:
b8:c1:d5:14:34:d2:80:79:89:0d:cf:16:ca:45:72:d0:90:38:
fb:eb:95:8d:2e:26:85:92:48:21:4a:d2:65:f2:1c:0f:f7:1d:
3a:80:17:a9:30:4a:50:67:1c:7a:d9:ee:5a:80:db:aa:3e:5c:
67:d4:de:18:03:24:66:bd:46:64:98:fd:35:67:fa:3b:a9:54:
dc:9a:bb:01:f0:a8:38:d1:49:60:3e:d6:b5:f5:c2:61:7a:b3:
4f:86:c1:4a:7e:6d:37:04:ba:6f:eb:22:c8:34:0e:40:40:9d:
44:99:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:36 2025 by rpki-client