Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/HgzDmPqeZBdX21PHNQn3j0-FDSk.roa
File: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (raw, json)
Hash identifier: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=
Subject key identifier: 1E:0C:C3:98:FA:9E:64:17:57:DB:53:C7:35:09:F7:8F:4F:85:0D:29
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0194228DBF6942A6D76D4C0585CC2CAEFC51
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/HgzDmPqeZBdX21PHNQn3j0-FDSk.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6786
IP address blocks: 62.169.4.0/24 maxlen: 24
62.169.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bf:69:42:a6:d7:6d:4c:05:85:cc:2c:ae:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0cc398fa9e641757db53c73509f78f4f850d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:33:f1:0e:c6:85:10:7c:98:ea:9c:79:7d:
32:66:bf:76:d8:7e:84:ce:df:d9:56:55:c4:e5:2b:
4e:62:c5:94:b3:25:31:a6:87:98:ae:58:54:f6:3a:
1d:19:35:fc:dd:01:0a:f6:6f:83:d1:9b:d4:91:c0:
09:32:7e:74:d8:e5:45:3e:a8:fb:20:22:5c:d5:45:
98:fd:06:07:36:58:e1:80:fd:81:c6:da:6b:a5:80:
7f:9b:a9:8a:e8:ee:12:8e:70:60:48:c7:ca:69:e8:
bd:73:79:4b:bd:62:7e:68:06:26:3e:66:a4:c5:ca:
ca:9d:47:65:a9:5d:5f:19:f2:20:b7:8b:4c:0e:6a:
a7:c6:1a:f4:64:f9:b9:3f:ab:c8:d8:58:ad:f0:b5:
68:74:fc:40:21:28:f3:1e:d5:60:11:41:d5:ef:e1:
67:a0:79:1e:2f:c4:d0:ce:9d:13:ec:ab:dd:b3:f7:
a0:be:e9:81:23:3c:cb:8d:a2:d6:0d:ef:1c:68:92:
b5:4f:f3:9c:d9:b7:df:9a:a1:37:30:6c:be:5a:c6:
a4:38:4f:fd:fa:04:3a:87:45:eb:13:fd:eb:fa:b1:
93:49:5c:cf:c1:46:65:2e:b7:e2:e1:77:35:01:09:
0e:f5:61:ab:1d:73:d8:8c:91:f7:03:29:94:83:82:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:C3:98:FA:9E:64:17:57:DB:53:C7:35:09:F7:8F:4F:85:0D:29
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/HgzDmPqeZBdX21PHNQn3j0-FDSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.4.0/24
62.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b6:b0:e8:46:07:4c:a5:5b:2f:aa:3d:c9:ee:e7:79:39:44:
ed:e3:b2:df:92:92:e4:a8:8d:ad:47:c6:22:d6:ec:73:73:34:
e0:02:26:70:21:00:f9:35:90:b4:f8:31:ce:62:53:8e:e6:8e:
69:e2:eb:a7:b0:df:05:15:63:ce:94:3d:33:6c:48:45:22:ca:
e3:d1:6a:1f:8d:da:14:43:1d:45:d1:58:d6:c7:a2:5e:64:75:
e9:5e:0e:2a:67:54:e6:15:ca:05:c1:a3:49:b3:d6:ec:c5:60:
6d:e1:b9:90:fb:fa:cd:ca:ec:22:82:e9:78:6f:5d:4b:e9:5b:
1b:a2:84:64:96:6e:bc:9f:89:a9:cb:31:4f:bd:60:32:cc:50:
3f:20:aa:fe:56:d2:e2:3f:9b:b5:c7:5c:40:35:63:84:76:63:
21:ff:b0:90:32:4f:e5:00:e0:13:a9:f6:19:ce:f7:0d:aa:e3:
cf:41:fd:be:20:a9:78:59:26:95:9c:91:de:d1:ef:72:d0:3d:
b3:28:31:7e:78:44:3a:ef:2e:df:6b:70:db:16:9f:8a:33:11:
e5:21:24:86:9c:36:8b:1d:1f:bc:05:9c:6d:ee:5c:a5:86:71:
9b:f3:69:f7:5d:19:cb:5b:01:60:35:8e:ae:dd:65:02:97:80:
51:28:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:26 2025 by rpki-client