Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/hQEUB92m80TtbOvBRID9BabLTbg.roa
File: hQEUB92m80TtbOvBRID9BabLTbg.roa (raw, json)
Hash identifier: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=
Subject key identifier: 85:01:14:07:DD:A6:F3:44:ED:6C:EB:C1:44:80:FD:05:A6:CB:4D:B8
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019426D9916F27D5A404F2B907272F368F2C
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/hQEUB92m80TtbOvBRID9BabLTbg.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34863
IP address blocks: 194.36.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:91:6f:27:d5:a4:04:f2:b9:07:27:2f:36:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85011407dda6f344ed6cebc14480fd05a6cb4db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:89:08:f2:fe:8c:19:c5:5f:78:4f:aa:bd:
8e:4a:df:94:30:d0:ce:c6:b9:91:82:be:ab:58:c6:
39:97:2f:a2:ad:74:c2:85:09:4a:aa:cc:67:1c:55:
e2:ab:4e:46:b6:39:78:44:12:c0:c2:57:11:89:a3:
fc:f8:76:e5:ea:d5:d2:38:1b:17:06:1e:f1:9a:6e:
a5:64:b2:fc:1f:0b:a2:1b:36:35:37:b8:9b:86:8f:
6d:d9:8c:44:4e:37:d2:0d:3d:1c:84:a8:d4:cf:9c:
e8:a9:ea:51:9c:f5:28:ec:43:d1:61:7e:e5:5c:b9:
73:07:41:dc:a7:3e:8c:ed:d2:73:67:be:3b:d4:f4:
a1:5b:84:a2:3c:9f:b0:62:cf:d4:b8:4d:e6:55:b2:
14:cc:17:ff:1e:68:e2:c1:53:06:6f:34:9a:32:c7:
da:c6:d5:66:2f:e5:2d:0a:6c:33:2f:5c:6c:05:b5:
c8:25:ac:de:2f:5d:22:26:89:76:c7:3f:0c:7b:80:
c1:58:ca:81:d1:c9:8c:ed:7d:17:71:ca:a2:bc:1b:
1f:8a:58:cc:8f:ad:be:35:88:ed:cd:df:43:31:d2:
7b:f6:94:f0:fc:71:a6:5d:a5:bd:66:a3:58:da:aa:
69:ac:24:fe:22:bd:17:ad:16:ed:03:50:a8:04:2d:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:14:07:DD:A6:F3:44:ED:6C:EB:C1:44:80:FD:05:A6:CB:4D:B8
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/hQEUB92m80TtbOvBRID9BabLTbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.82.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6b:19:3d:f9:f8:94:cd:85:de:53:f5:48:0e:31:95:26:29:
27:15:f6:a6:f3:42:99:cd:94:4e:fd:b0:1f:6f:04:3d:92:c4:
72:02:20:b3:a4:e5:92:f7:ba:d9:b6:9f:da:3f:9b:b4:a2:30:
32:a5:c1:60:b6:fe:14:24:a9:df:35:f2:a5:f2:46:e0:1a:17:
61:a3:16:aa:d3:ac:71:ba:19:61:f5:ea:2f:cd:c8:73:f8:1a:
2e:88:42:b5:2a:f8:96:d1:43:70:e8:f2:78:b5:3f:ae:bb:42:
84:92:c2:b7:45:f9:d9:95:9e:33:db:25:9c:2d:f3:44:15:26:
81:c3:ce:ce:d6:ba:7a:e9:ba:40:22:94:51:c6:dd:8c:fc:40:
03:7b:81:f9:fd:a9:7b:0d:5b:ba:3d:3e:0c:ae:c9:d8:37:71:
77:7f:4a:07:dd:e4:8f:0f:e9:0a:db:dc:5b:29:34:30:ad:69:
bc:0d:cd:47:6e:e9:91:76:ba:fa:a0:41:f5:1d:d8:ff:f7:16:
e5:b7:b7:6c:46:ca:f6:25:cd:f5:aa:d1:d7:ab:10:db:b3:84:
70:8e:17:b7:f5:d6:45:a5:bf:44:1f:58:53:18:b3:38:34:9a:
a1:b4:7c:81:39:4e:01:4a:20:f5:ec:ce:45:16:e3:b1:f5:71:
62:47:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:23:18 2025 by rpki-client