Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa
File: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (raw, json)
Hash identifier: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=
Subject key identifier: 1E:3B:75:E9:98:09:62:7B:13:65:C5:84:D1:56:B5:DD:8A:08:B7:B3
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 01941F8C7A36F4B722A451B5A2573B2C2138
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43756
IP address blocks: 194.37.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:36:f4:b7:22:a4:51:b5:a2:57:3b:2c:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e3b75e99809627b1365c584d156b5dd8a08b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:17:39:37:65:60:4e:f6:47:0d:a4:c1:cf:
36:76:fc:4d:61:1f:80:e8:59:9b:d3:5f:d2:8e:20:
d1:4f:b5:3d:80:c8:dd:a4:96:da:c2:dc:73:23:83:
8f:d6:86:a3:0d:53:bd:ff:79:a5:b8:ae:91:38:12:
00:8f:26:e3:b8:0b:a0:e7:1c:fc:67:43:29:f5:b7:
85:01:a1:0b:ea:01:2d:59:43:5c:db:fb:bf:41:d6:
cd:02:62:f9:6f:51:5b:99:51:dc:f0:e0:5c:f8:58:
5f:5e:1d:1f:6f:33:56:03:bc:95:85:a2:21:63:e5:
81:92:ca:1e:f4:87:ff:52:85:de:63:69:da:84:9e:
4f:54:95:41:7c:9f:32:de:17:d0:f3:da:ea:f5:5c:
94:53:ab:8d:0c:8a:58:b1:78:31:bc:a1:1e:31:31:
58:7f:bd:e8:3e:35:73:11:22:b3:a3:5e:81:37:ac:
9a:be:7f:1b:d9:8e:29:76:5f:ac:0b:0c:e8:a1:29:
35:96:94:cb:b4:9e:4c:d7:57:5f:e5:e8:c4:ea:25:
89:fb:18:68:e5:2f:22:72:5f:b0:be:78:f3:45:0e:
3e:ec:16:14:bf:3a:6c:df:c6:79:ed:b6:03:3f:2f:
c8:55:ca:01:e9:b7:2a:aa:41:d9:f6:fb:dd:7a:0b:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:75:E9:98:09:62:7B:13:65:C5:84:D1:56:B5:DD:8A:08:B7:B3
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.252.0/24
Signature Algorithm: sha256WithRSAEncryption
32:14:ef:70:b5:ae:64:56:55:0c:f7:61:77:ea:ae:a6:93:1f:
56:2b:b9:c0:61:c1:5c:6e:c8:a8:9a:02:15:ee:f7:6e:93:a5:
8b:d7:35:4b:d0:aa:a5:bd:c7:af:87:51:6d:78:23:95:d4:8d:
6c:f4:f7:36:7d:2e:21:64:c1:bd:85:35:43:59:75:b8:a3:ed:
32:b7:d3:fe:4c:24:f1:14:e0:9e:36:22:8d:36:2e:3f:84:9d:
61:b6:b8:66:af:4f:4b:ff:c9:cd:bd:eb:f8:5a:83:ae:f7:0e:
01:b3:38:90:95:92:e9:33:32:88:90:d4:c5:a6:9a:4b:d2:d0:
96:14:b2:9d:55:ea:5d:de:ec:d5:99:f5:f6:6c:03:10:03:4b:
fe:d8:6b:91:22:03:4c:e6:e1:d5:b8:7d:0b:bc:2f:e3:b8:88:
6b:dc:2b:cc:bf:d5:11:b7:ff:8e:75:15:6f:9a:03:dc:7e:84:
ef:27:38:c3:3d:61:db:59:15:65:ef:9e:da:1f:fa:0c:a0:9e:
a4:70:76:90:6b:80:d7:21:42:5f:c0:79:bb:94:34:3c:71:ce:
51:71:a1:3b:a0:c8:be:3c:a3:f4:13:00:c8:cc:25:62:d2:9e:
97:75:41:1c:c8:33:00:7e:8c:cd:2d:3b:70:dd:cf:0a:f5:67:
0a:85:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:21 2025 by rpki-client