Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/hcERp-n1CdH9dpVt3PfnUZqY1zM.roa
File: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (raw, json)
Hash identifier: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=
Subject key identifier: 85:C1:11:A7:E9:F5:09:D1:FD:76:95:6D:DC:F7:E7:51:9A:98:D7:33
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 019422FB0A6142DE2E6A6804F14ADEBB40DB
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/hcERp-n1CdH9dpVt3PfnUZqY1zM.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59953
IP address blocks: 91.109.232.0/21 maxlen: 24
185.78.8.0/22 maxlen: 24
185.248.220.0/22 maxlen: 24
2a0d:f280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0a:61:42:de:2e:6a:68:04:f1:4a:de:bb:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85c111a7e9f509d1fd76956ddcf7e7519a98d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:6a:4d:6c:ee:b2:35:02:0f:27:8a:04:5d:
2a:f0:5b:31:2b:c7:01:f7:23:be:0d:5c:d6:9e:a6:
04:01:6f:ab:8a:4d:c0:6e:46:64:a3:67:36:de:f9:
e3:1c:ba:51:ce:fb:45:16:4e:7c:e4:58:67:6d:53:
ca:1b:78:93:ad:74:d4:42:4d:b8:07:31:58:bd:9a:
d4:9d:2a:2f:74:80:c1:b5:fe:d2:e0:be:36:40:0e:
01:35:85:ed:48:90:c0:24:87:0a:d3:35:d1:35:b0:
e7:93:15:b7:78:ec:db:da:54:23:80:ae:73:4e:d6:
df:a7:c2:2c:2a:23:9d:8b:76:2d:b2:42:de:58:15:
a4:c4:61:a9:06:74:dd:8c:06:ca:82:fd:45:3c:1a:
d8:67:a4:d2:62:f3:d9:08:0d:11:8d:3f:8b:6c:5b:
a5:92:53:49:60:3e:5d:08:11:47:c4:02:f5:54:b7:
04:06:dd:17:ad:69:b5:d7:7a:90:11:25:10:9e:10:
9d:44:a6:b9:4a:a6:7a:ce:93:13:9e:c7:1e:78:09:
d1:e0:70:9a:67:61:75:a4:45:ef:78:8f:7a:0f:5f:
a6:cf:52:3c:62:1d:2a:81:d4:28:ed:5d:14:e6:c3:
83:cc:5f:c0:99:3d:2c:71:1b:d5:97:4d:cf:11:00:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:11:A7:E9:F5:09:D1:FD:76:95:6D:DC:F7:E7:51:9A:98:D7:33
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/hcERp-n1CdH9dpVt3PfnUZqY1zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.232.0/21
185.78.8.0/22
185.248.220.0/22
IPv6:
2a0d:f280::/29
Signature Algorithm: sha256WithRSAEncryption
0f:34:d8:eb:65:4c:ed:ff:a3:61:8a:43:a4:8f:ee:2e:18:a2:
8a:ae:c2:67:17:fb:25:a1:c8:5d:c3:aa:1a:dd:55:f1:8d:85:
5b:e5:3d:66:ec:90:da:18:8c:cb:e9:0a:ff:a6:ba:34:9e:c0:
5f:3b:0e:fc:3e:d1:53:23:5e:7a:31:1a:f0:20:1c:79:5e:8e:
c3:0f:8d:d9:06:1a:0a:08:27:8b:e4:a0:fe:0e:b7:92:6d:08:
12:27:61:0e:24:47:62:0d:cb:ee:1c:62:e8:57:20:49:ab:69:
a0:12:3b:7f:40:85:34:46:09:7b:e8:9d:30:81:d8:02:14:7c:
05:c6:43:53:e8:8a:04:bd:f3:c2:b8:c8:e6:48:4f:b3:f8:f7:
3e:24:cf:02:f7:f6:76:f0:09:5b:10:7b:c1:10:ef:3d:36:2a:
1f:cd:b1:86:04:97:a0:b5:37:b2:2c:94:2d:fe:7b:38:8b:3a:
e3:eb:a6:45:92:36:c5:7c:6e:7c:d1:e6:93:dc:4c:a6:5e:49:
d4:a9:89:9d:66:2f:2c:81:d0:cb:08:e4:74:53:b3:5d:5a:65:
9d:a7:99:94:90:50:3a:a7:07:ff:1e:83:9a:17:56:7f:94:57:
ee:49:88:b8:67:9c:35:f8:cf:f0:86:28:77:d6:59:e7:48:b5:
8f:0e:83:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:21 2025 by rpki-client