Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/HRwZymnXLOUIoxoUINYn4to6JUk.roa
File: HRwZymnXLOUIoxoUINYn4to6JUk.roa (raw, json)
Hash identifier: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=
Subject key identifier: 1D:1C:19:CA:69:D7:2C:E5:08:A3:1A:14:20:D6:27:E2:DA:3A:25:49
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01946A1B99FF60D492B09EC95E6E1BD5D71E
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/HRwZymnXLOUIoxoUINYn4to6JUk.roa
Signing time: Wed 15 Jan 2025 13:16:21 +0000
ROA not before: Wed 15 Jan 2025 13:16:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60742
IP address blocks: 86.54.4.0/24 maxlen: 24
2a14:6780:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:1b:99:ff:60:d4:92:b0:9e:c9:5e:6e:1b:d5:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 15 13:16:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d1c19ca69d72ce508a31a1420d627e2da3a2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:e4:01:af:ea:26:c1:e6:38:3d:0a:8e:85:
eb:d2:16:6d:ff:f8:88:e7:2d:cb:ba:80:e9:79:ec:
2a:e2:48:78:09:a5:97:25:d1:df:3d:d4:e2:1c:3a:
ad:60:4b:ab:8a:44:bc:b0:ec:49:30:f1:06:7e:4d:
27:28:5e:18:b4:42:55:b8:fb:9e:9a:22:89:6d:ca:
79:c8:81:b4:a6:58:2d:16:53:95:8a:00:ed:2a:19:
81:86:be:aa:97:f3:d6:51:12:cc:61:31:86:c4:41:
7b:a2:79:52:06:0a:f6:30:db:7a:27:2b:50:5a:00:
95:aa:06:1f:de:67:78:4d:32:cb:0e:57:2a:e9:6c:
c6:84:5b:f6:64:b4:07:93:7f:df:0a:80:5b:39:5d:
ec:44:9d:33:51:89:ce:a2:0b:e3:26:f8:29:fa:fc:
b2:26:e1:d6:cd:6a:df:13:1d:a9:fd:cb:40:bd:67:
e1:04:c1:c6:48:2a:3f:02:50:54:fa:5b:b0:7f:62:
62:a7:f6:9a:af:65:47:6e:6a:31:35:62:b4:ef:a1:
33:56:81:4c:6d:44:3b:e5:0e:60:6f:85:87:9d:a2:
79:2e:76:51:b8:f3:cb:73:d3:7d:ca:ed:0d:6d:b6:
99:a8:26:f5:2e:ad:39:39:bc:5b:c4:74:12:9d:5d:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:19:CA:69:D7:2C:E5:08:A3:1A:14:20:D6:27:E2:DA:3A:25:49
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/HRwZymnXLOUIoxoUINYn4to6JUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.4.0/24
IPv6:
2a14:6780:d::/48
Signature Algorithm: sha256WithRSAEncryption
19:8b:b8:58:33:a1:c3:bc:27:7f:6b:bf:82:eb:3e:a5:a6:af:
ab:22:85:63:b1:5c:6c:92:e4:e5:19:47:98:bc:ad:45:fa:c8:
7c:11:72:8c:10:8f:0a:be:eb:7a:80:d3:99:10:d7:66:ae:38:
f2:46:ca:5e:79:52:6e:45:52:a3:d2:0f:24:7d:a7:15:b6:36:
ed:6a:cd:00:53:b7:f3:2c:87:7e:0b:f6:fb:d2:82:c1:ae:df:
e2:0b:29:48:1e:23:95:46:06:e8:c0:fe:0d:4d:c3:e8:7c:e4:
ab:83:ae:ba:69:b6:22:90:14:79:72:5f:6b:f2:7a:fc:55:d0:
62:89:f0:f8:a9:fd:88:e8:8a:c5:b1:b5:32:56:13:7a:1a:47:
8e:a9:1c:6a:a8:67:7f:c4:1a:d5:9a:51:51:fe:c3:a2:68:09:
8b:16:4e:08:29:76:fd:fb:a3:00:52:6c:e1:59:1a:9d:99:67:
17:ce:56:00:e5:ec:b8:3a:71:fa:13:38:21:97:a9:c8:40:0b:
29:4e:ce:b7:34:69:0f:86:93:80:b0:f8:11:09:89:af:57:97:
8d:07:54:7e:21:86:b2:ea:59:31:41:fb:74:7b:65:cc:e3:28:
c9:14:9f:23:1b:30:6e:de:50:ce:2f:34:84:34:fc:00:52:68:
71:61:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:43 2025 by rpki-client