Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/hML-Tag6b9qlpG18VlhLUkClkKg.roa
File: hML-Tag6b9qlpG18VlhLUkClkKg.roa (raw, json)
Hash identifier: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=
Subject key identifier: 84:C2:FE:4D:A8:3A:6F:DA:A5:A4:6D:7C:56:58:4B:52:40:A5:90:A8
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 0194228DAA60CA381B566509A97107C5AA9D
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/hML-Tag6b9qlpG18VlhLUkClkKg.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41008
IP address blocks: 195.14.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:aa:60:ca:38:1b:56:65:09:a9:71:07:c5:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84c2fe4da83a6fdaa5a46d7c56584b5240a590a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:06:69:b0:39:08:81:23:d1:5c:a6:9e:58:
46:cf:9f:20:d3:dd:5a:4f:ac:07:cc:bb:84:24:22:
65:ac:ac:74:14:91:09:ec:c7:12:d9:f0:61:b6:54:
99:73:c0:f0:07:b3:ef:93:50:29:2b:07:f3:6b:c2:
d2:30:fd:a7:1e:33:29:3a:32:b5:07:62:d8:f0:f4:
ca:a8:03:d6:81:7f:a8:c1:83:64:ab:0c:da:0a:1f:
d9:d8:4a:7d:1f:9f:ac:29:ba:cd:99:7b:1c:2a:d7:
6c:82:2a:56:e7:94:47:a1:9a:03:cc:7b:b8:3e:fe:
76:02:64:a6:5b:14:16:dd:10:89:86:8b:48:6a:30:
60:ea:20:96:d6:b0:17:ff:64:ef:8f:87:58:73:74:
08:c4:35:f7:61:8c:61:f8:a7:a4:49:5b:2d:9b:fb:
14:29:0b:c5:b8:68:be:1b:e1:be:69:3d:cc:8d:bc:
c7:4f:fe:bc:c5:12:74:8e:19:2f:e6:36:13:08:09:
f8:8c:42:2f:ab:c7:bd:75:ff:51:3c:6a:4e:61:14:
d7:c8:83:45:80:f4:bb:3e:55:1f:65:2e:d4:6b:a0:
b6:8c:be:b9:39:c9:9c:c3:3d:e6:90:6f:e5:be:20:
fe:de:2c:bd:4b:01:8e:64:93:9c:3a:50:92:31:1b:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:FE:4D:A8:3A:6F:DA:A5:A4:6D:7C:56:58:4B:52:40:A5:90:A8
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/hML-Tag6b9qlpG18VlhLUkClkKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.29.0/24
Signature Algorithm: sha256WithRSAEncryption
79:43:de:1e:2d:b7:e3:90:a0:05:ce:4b:eb:ca:13:8c:12:5d:
0c:45:46:f4:47:d2:d0:5e:10:1d:18:dd:df:0a:97:2b:81:05:
60:35:c1:eb:30:82:26:dd:14:81:17:7d:17:f2:86:e1:81:ef:
07:8b:74:23:e3:a4:a7:78:36:c9:45:91:a3:73:17:93:47:ee:
b5:a4:49:71:2d:98:ea:aa:0e:1f:85:5a:f1:ce:ef:04:af:98:
32:7e:45:d7:47:f9:49:c9:8e:e4:1f:a5:b5:c5:03:2c:63:74:
bf:d6:33:18:fd:30:23:ac:ab:90:cc:78:84:98:2d:f1:ae:a5:
4e:c6:39:6a:f3:60:9d:f8:13:46:2f:b4:1c:9a:05:c5:52:2c:
c2:6c:6c:33:e9:71:1d:b3:95:35:a7:b2:49:ce:d5:05:a4:26:
34:02:14:45:ae:e0:68:d3:74:39:ea:c0:dc:8f:f3:1b:8f:7e:
06:ce:f7:de:8c:45:44:c6:09:26:60:61:8d:c8:a1:ca:f5:98:
ca:87:c1:e0:57:cc:b6:b5:85:28:8b:87:93:fa:dd:dd:c2:0f:
41:7e:84:7b:ce:25:ed:63:4f:12:b4:50:14:d8:fe:60:fc:12:
2c:9a:ac:e3:b6:76:15:64:68:09:d1:41:0a:00:af:65:fa:50:
93:9d:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:02 2025 by rpki-client