Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/HFw-x8czfBceHHrxWFsisFaU53k.roa
File: HFw-x8czfBceHHrxWFsisFaU53k.roa (raw, json)
Hash identifier: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=
Subject key identifier: 1C:5C:3E:C7:C7:33:7C:17:1E:1C:7A:F1:58:5B:22:B0:56:94:E7:79
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01942067FCBA9D376E689A2C02BB5F7D0296
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/HFw-x8czfBceHHrxWFsisFaU53k.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13097
IP address blocks: 62.100.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:ba:9d:37:6e:68:9a:2c:02:bb:5f:7d:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c5c3ec7c7337c171e1c7af1585b22b05694e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:25:6c:67:53:be:14:e9:10:a6:3d:75:0f:
79:01:c6:47:82:cc:48:b4:47:6b:c2:ca:9c:b0:7e:
3d:ff:b7:36:4e:5c:cd:2c:9a:26:80:d3:f4:15:58:
51:f7:14:5f:1a:d5:8f:bd:a4:bf:61:5e:e9:72:f5:
e5:25:e8:96:e0:a9:d3:56:f6:02:6f:29:b5:2d:19:
33:93:7a:98:52:06:ed:08:32:42:a6:26:17:43:1c:
c6:34:66:ba:b4:f8:db:2a:33:48:15:1a:9a:d5:f7:
2d:46:6e:39:73:ac:aa:12:b4:54:75:f8:56:52:08:
47:58:cb:d2:d1:5d:80:6e:50:f3:07:55:8f:a4:84:
6a:dd:9e:b3:a7:f0:60:a4:76:37:d4:04:61:63:fb:
6c:cc:38:28:20:af:91:84:ee:b8:90:e7:ad:b4:af:
00:1a:69:d9:7a:54:45:8a:fd:7a:c6:b3:f2:00:3a:
39:15:f4:1a:05:1a:9a:b4:a3:8c:47:e1:1f:91:4a:
fa:99:39:e7:49:36:ac:fd:27:47:66:1f:09:fc:05:
02:db:5f:68:b0:6d:c4:ef:e2:9b:17:a2:12:35:a2:
c0:77:70:57:1e:da:ed:0f:0d:ba:9e:16:2a:78:1a:
94:51:1f:e1:22:68:f7:e9:1a:ba:2d:7c:87:b1:5c:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:3E:C7:C7:33:7C:17:1E:1C:7A:F1:58:5B:22:B0:56:94:E7:79
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/HFw-x8czfBceHHrxWFsisFaU53k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:31:d8:1b:87:e5:77:3a:53:18:e0:6f:b0:eb:f1:97:56:5b:
4f:69:e5:12:db:9e:a1:0a:2d:27:81:a7:ef:06:68:6a:9c:2b:
3c:3c:91:4c:c9:12:7f:58:33:8d:db:d4:3c:88:ec:39:b3:20:
96:34:50:1f:18:aa:4a:74:d4:29:c8:b1:b9:cb:11:15:71:1c:
b5:ff:1b:10:11:d1:12:c3:e8:9a:8c:2e:f9:ae:48:8d:56:4a:
2b:32:c5:ad:60:11:b8:5a:95:5e:b5:f7:09:07:a7:d5:10:56:
cb:75:11:4d:33:a0:2d:c5:ad:03:68:c4:41:95:98:82:d5:6a:
59:35:75:8a:33:ef:50:ba:86:38:9b:43:a8:e1:4d:f2:af:e5:
a7:7d:8a:2f:60:db:bd:cb:e4:e7:a9:4d:da:d7:1a:28:98:3e:
76:62:45:34:78:ba:32:d9:8d:4e:d4:22:ba:93:18:a9:b5:14:
1f:36:05:96:ae:20:f1:b0:72:65:5a:8b:c0:a1:31:15:c2:49:
00:dc:25:d0:7f:25:73:f4:e8:43:71:42:36:6f:ee:0f:4c:d9:
a0:67:e4:d1:d5:2a:39:d3:71:4c:08:bf:1b:9f:e8:fb:ad:54:
88:25:ed:9e:69:e4:fa:45:15:6d:75:b2:a7:33:41:7c:a9:22:
83:ee:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:25 2025 by rpki-client