Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/HuQC2jA885BU0j4_LL5scjkpAao.roa
File: HuQC2jA885BU0j4_LL5scjkpAao.roa (raw, json)
Hash identifier: EvlRJMUXmvL4+uCrMnz97o0wOcJ1RwBXa983YUf2PO4=
Subject key identifier: 1E:E4:02:DA:30:3C:F3:90:54:D2:3E:3F:2C:BE:6C:72:39:29:01:AA
Certificate issuer: /CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Certificate serial: 0194266BC6C33D64EB069612842960BFD5B9
Authority key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/HuQC2jA885BU0j4_LL5scjkpAao.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200797
IP address blocks: 217.148.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:c3:3d:64:eb:06:96:12:84:29:60:bf:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee402da303cf39054d23e3f2cbe6c72392901aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:04:54:bc:81:2e:d8:d1:85:2f:c8:9b:57:
b5:04:cc:54:e6:c4:0a:81:05:2d:e1:7b:94:93:b6:
39:53:e0:26:2c:06:ae:d5:b1:47:dc:62:72:f6:a0:
ed:86:d8:86:c8:8c:b7:d2:cb:35:cc:f9:b9:17:49:
e3:0b:4f:da:e4:cf:ad:41:f8:ed:a8:6a:a2:7f:b2:
62:63:6c:7c:cb:2a:f1:cf:f1:8a:d7:09:7a:ba:71:
7a:52:fe:2f:1e:ab:be:91:7e:c5:24:09:72:11:66:
95:fd:9f:bb:95:6f:33:73:43:d9:b8:c4:1b:ae:6a:
fb:30:53:72:c4:97:47:0b:8d:bf:81:a5:be:cb:22:
38:46:a3:5c:f2:33:50:3c:ea:7a:2c:ae:07:1f:10:
a7:ce:6d:18:bd:e7:a8:0a:94:ae:92:2b:8c:d7:00:
b9:1b:ec:13:14:5f:0a:d0:f5:3a:08:75:f1:ab:48:
7d:90:ae:e6:93:cb:64:bf:9c:1d:fd:a0:dd:32:28:
9c:47:dd:d2:63:c3:4f:f5:dc:64:f7:83:c5:19:cc:
d4:cb:3a:da:4e:28:cc:ef:94:4a:6e:8b:b4:13:27:
b3:f9:92:19:bc:f5:92:5f:75:25:11:e7:c8:03:fb:
51:59:91:a8:66:2c:b7:fb:d7:74:14:e6:20:41:5d:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:02:DA:30:3C:F3:90:54:D2:3E:3F:2C:BE:6C:72:39:29:01:AA
X509v3 Authority Key Identifier:
keyid:11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/HuQC2jA885BU0j4_LL5scjkpAao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.148.128.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:ef:be:b2:81:5c:f2:69:44:d6:6b:8a:cd:27:6c:8d:06:7f:
be:25:28:46:cc:ee:28:e2:8d:95:84:d5:c4:2d:31:8e:8a:8c:
3e:10:94:6d:e2:62:12:bb:10:a8:ce:f1:e4:e9:c9:3a:d0:f7:
0b:d6:7a:db:3e:64:52:21:60:87:ad:38:d1:6b:a4:22:45:08:
0d:9c:b6:45:da:a4:79:3e:53:10:dc:a6:df:d0:c1:bd:09:c0:
fe:77:eb:18:b9:ac:55:61:85:d0:c9:ba:0a:c4:b8:cc:5d:de:
06:35:49:a8:ff:cd:9f:c7:9f:b4:1b:c9:77:d7:c9:07:63:af:
ac:68:62:0e:2b:4f:0b:77:bc:7e:79:4f:6d:db:a2:15:54:36:
04:a9:f8:37:56:72:ba:35:af:65:65:94:9a:2e:b4:da:fe:d9:
45:04:aa:67:95:13:fd:5f:9d:19:21:cc:2b:aa:9e:71:78:05:
0b:8a:71:30:29:02:de:e1:06:67:b0:fa:48:69:07:a3:ab:e5:
10:cd:15:9c:72:7b:2a:0f:36:87:79:3c:1d:5e:02:69:16:cd:
49:e6:1b:57:15:20:6d:21:89:4d:6c:42:2c:d7:4f:83:c8:e2:
ab:81:67:21:e7:fd:d6:ff:08:e9:1b:6f:67:97:11:8f:ae:3b:
12:41:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:50 2025 by rpki-client