Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/l-HFEGYP57VmF8aDDh7--ZbJBDw.roa
File: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (raw, json)
Hash identifier: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=
Subject key identifier: 97:E1:C5:10:66:0F:E7:B5:66:17:C6:83:0E:1E:FE:F9:96:C9:04:3C
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0194258FB579CAE593A6EAC07AB29300C2EF
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/l-HFEGYP57VmF8aDDh7--ZbJBDw.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210220
IP address blocks: 193.25.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:79:ca:e5:93:a6:ea:c0:7a:b2:93:00:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e1c510660fe7b56617c6830e1efef996c9043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:bb:b8:ce:8f:61:23:61:c0:42:7d:98:62:
bc:94:0f:72:ed:2b:ec:f7:ff:75:c7:4b:48:44:c4:
73:8d:ef:58:b9:f2:b8:3a:d6:e7:2b:78:8c:e0:ea:
20:3c:52:ad:35:c0:c8:d3:53:79:7a:b3:da:20:f6:
3a:4c:1d:d5:9b:32:12:e0:35:82:1a:01:55:56:c7:
86:22:d8:8c:8e:9a:b3:de:19:70:e7:ad:94:19:fb:
ca:30:e6:17:6e:8e:19:e2:56:a6:14:93:aa:3a:aa:
0a:0c:6c:86:d5:78:c4:57:c5:86:5d:bd:ac:93:86:
ff:1e:a1:0f:22:ac:a4:88:0b:9c:55:75:c5:ed:04:
fc:09:4d:8b:ae:2d:cb:62:49:77:64:de:9f:1b:87:
5f:96:37:85:1b:8e:72:40:de:30:1f:1a:d6:1f:b7:
df:da:03:e6:fb:34:6e:3b:cb:c2:eb:89:e0:a8:23:
9b:4d:44:a5:ee:74:e2:ca:1f:ef:44:4d:2a:c5:99:
4e:9a:7b:b9:2f:12:7a:2b:2e:3e:b5:e0:10:66:e1:
96:3c:05:c2:31:7d:b5:ad:c2:ff:04:af:a9:91:b9:
88:d8:af:43:74:42:92:da:a1:d4:0d:57:c6:92:7f:
33:03:fb:b7:0c:53:87:f1:4b:5f:c5:5e:7f:c5:f8:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:C5:10:66:0F:E7:B5:66:17:C6:83:0E:1E:FE:F9:96:C9:04:3C
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/l-HFEGYP57VmF8aDDh7--ZbJBDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.193.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2e:60:8c:d6:ff:7f:40:3f:27:c7:e3:9e:06:ea:9b:69:70:
a3:1b:f9:29:d5:8b:07:2b:c8:25:16:3a:ee:9c:e4:d2:ac:9f:
e9:0f:c9:0a:c3:a4:50:2f:4d:69:ff:f2:67:51:2f:03:1b:f7:
fb:e5:85:03:a4:67:40:4b:37:23:2d:6f:bf:d7:c7:90:bb:77:
4f:f4:96:55:25:59:66:db:16:71:b2:2a:cc:ce:0e:1d:7f:4a:
de:5e:7c:44:2b:d4:e0:40:d0:a3:05:17:97:64:59:b8:e2:5a:
10:02:bc:38:d2:31:31:ba:1e:da:32:6e:1d:cb:5f:23:a5:ae:
28:5d:62:f4:e1:97:66:62:1b:f0:d2:1f:2b:ff:e8:8d:20:5d:
d8:da:2a:5e:f4:49:37:30:8a:c7:50:89:24:99:9b:4f:f0:5a:
98:a9:c2:74:8f:71:bb:19:cd:29:68:04:8d:49:16:f5:1b:45:
69:a0:a0:1e:4c:50:35:37:d1:fe:1b:20:c7:a2:e9:f1:49:96:
ff:b9:ac:31:ac:7c:bb:37:4a:65:ea:25:e4:de:5c:30:93:8e:
01:bc:88:25:96:42:13:66:29:d5:d5:8d:56:d1:5f:1c:81:ef:
54:9a:4c:4c:64:d1:67:69:f0:8f:a6:78:5c:50:b0:e5:e1:1d:
a0:b3:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:40 2025 by rpki-client