Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/HmloYPhthfBI7_3S01XoeHMHM_0.roa
File: HmloYPhthfBI7_3S01XoeHMHM_0.roa (raw, json)
Hash identifier: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=
Subject key identifier: 1E:69:68:60:F8:6D:85:F0:48:EF:FD:D2:D3:55:E8:78:73:07:33:FD
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D8587C144A3D875B67D88661B4DB
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/HmloYPhthfBI7_3S01XoeHMHM_0.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43396
IP address blocks: 193.143.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d8:58:7c:14:4a:3d:87:5b:67:d8:86:61:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e696860f86d85f048effdd2d355e878730733fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:6d:22:42:46:b8:c4:f2:a3:9f:63:d4:04:
4e:da:9e:38:b9:89:72:04:c5:73:37:28:4a:93:86:
46:c8:27:7f:71:08:ff:33:67:05:b8:d9:3b:85:07:
4b:2c:a6:fe:b8:d2:73:61:78:80:91:df:d6:6b:8b:
88:d7:86:92:42:fd:be:4c:2f:fe:4d:dd:62:a2:c4:
b1:7b:74:f6:89:8b:9f:38:2d:52:a1:35:ca:f3:52:
31:ed:eb:0c:eb:af:51:b8:31:f4:96:77:97:28:c3:
73:d8:09:f8:cc:a1:a2:59:75:78:98:7c:63:1a:e4:
a7:7e:af:10:cc:a5:ba:81:f4:62:64:a4:e1:4b:6e:
34:93:f4:d0:17:1c:e8:ff:6c:4f:93:2b:1b:96:1e:
dd:04:0d:be:f9:6b:57:e2:ba:b4:e2:36:9e:33:57:
30:a6:f1:a5:72:ec:3e:d4:60:fd:51:0d:b1:5d:50:
81:14:01:b0:1f:4e:12:44:a5:8c:38:3f:e2:7d:23:
c5:7a:18:65:c8:c1:8c:54:01:78:19:71:89:2a:5b:
01:6a:76:b3:a0:fc:af:2b:28:a4:51:b4:3b:3f:12:
92:12:35:7f:df:86:b5:10:61:c0:2c:70:f8:4b:9d:
3f:45:38:6b:12:a3:e0:a8:12:26:04:46:2d:49:34:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:68:60:F8:6D:85:F0:48:EF:FD:D2:D3:55:E8:78:73:07:33:FD
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/HmloYPhthfBI7_3S01XoeHMHM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d3:d3:55:53:e0:7a:7e:42:57:e2:97:99:27:1c:c0:75:a1:
eb:a7:3d:bd:98:3f:c8:1b:c0:c1:3b:e9:9c:6a:42:48:99:3c:
19:c4:02:46:f8:7f:7f:0d:7e:55:1b:c2:60:72:d9:03:cc:df:
36:5e:e8:fc:3c:9b:9d:a3:46:e1:c3:2c:b4:f2:d2:73:c0:a3:
5a:b4:a9:ed:03:fb:bf:d6:ad:99:1a:27:81:d3:96:03:fb:ad:
ba:38:e1:b2:ff:93:3c:97:b5:cf:23:95:6f:fb:b7:0f:fb:1a:
2b:36:73:aa:86:e0:8b:98:61:1c:38:5a:a5:4e:ca:bb:3c:9b:
8d:0a:75:5d:ea:2d:46:25:38:06:b6:38:7e:ce:c8:3f:5a:aa:
b5:84:4e:10:ce:07:fd:e0:c6:54:fc:01:0c:91:19:41:b0:eb:
f5:57:ae:02:11:2e:7f:43:e6:f8:c8:dd:b6:a3:e2:b3:17:62:
e0:3c:ca:9f:dc:76:43:37:a1:fb:84:1a:16:f9:1b:97:d8:38:
fa:28:c0:f9:90:85:a7:1c:d3:8b:d0:78:6d:a2:fe:6d:78:8f:
56:be:05:35:07:c4:15:68:06:2a:00:61:3f:16:29:cc:ee:f9:
a4:12:fc:79:92:8d:96:af:87:1f:e5:8a:af:88:33:a5:e3:ce:
d8:d6:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:29 2025 by rpki-client