Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/H9LigG1-eoyksArBLiDVRw0BhjU.roa
File: H9LigG1-eoyksArBLiDVRw0BhjU.roa (raw, json)
Hash identifier: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=
Subject key identifier: 1F:D2:E2:80:6D:7E:7A:8C:A4:B0:0A:C1:2E:20:D5:47:0D:01:86:35
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019420D5D6BA22B9D48073B6BD5E9FC927B3
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/H9LigG1-eoyksArBLiDVRw0BhjU.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 194.56.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d6:ba:22:b9:d4:80:73:b6:bd:5e:9f:c9:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd2e2806d7e7a8ca4b00ac12e20d5470d018635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:e4:7b:90:1f:44:fc:86:4a:ee:d3:6c:c9:
37:b7:26:65:e8:f5:e3:b0:3e:b0:e8:61:db:47:ff:
a8:0b:fc:93:60:5e:b7:75:e0:87:d8:d5:61:e7:87:
9d:27:df:43:80:a8:61:5b:cf:ee:e8:af:b7:ed:0f:
9a:24:a3:3f:8e:70:20:d3:7a:9f:58:1f:82:9c:2b:
ba:25:94:1d:ca:e5:52:c6:2f:c6:39:30:1a:f0:cb:
64:a3:c5:db:6e:c6:70:9e:86:3e:87:91:de:70:4d:
ad:c5:ab:15:77:ce:e4:e6:db:71:a1:55:77:2b:9e:
af:cf:64:74:ea:07:b9:39:25:f6:c3:52:87:1f:cc:
d5:02:f4:df:5c:f9:39:68:af:0e:d8:e9:90:2a:2b:
dd:9b:4f:e7:bc:fe:42:27:e6:3c:61:3b:68:50:0d:
b0:d6:7f:43:cd:39:c9:11:ce:b5:93:c1:97:af:10:
58:8f:10:e6:30:68:61:6d:4e:d5:88:1b:60:15:73:
d1:5f:0c:7b:82:ac:96:74:97:90:9c:cd:03:00:6a:
50:26:bc:a6:d6:0f:5e:d8:b0:f1:d9:56:c9:49:5d:
6d:11:c7:82:61:23:7b:6a:48:1f:23:bd:f5:97:07:
98:30:bd:c5:13:af:e1:45:24:67:54:40:79:9b:d2:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:E2:80:6D:7E:7A:8C:A4:B0:0A:C1:2E:20:D5:47:0D:01:86:35
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/H9LigG1-eoyksArBLiDVRw0BhjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:01:12:96:2f:52:45:58:66:0b:8c:12:d7:76:84:dd:0f:bd:
58:05:31:c8:60:cb:c6:bc:4d:25:68:39:dc:5f:f4:97:5f:25:
fc:60:f1:d7:77:a7:60:95:75:8e:e1:10:60:51:e5:f2:b4:55:
cf:fd:0d:2a:05:e7:1a:76:70:9b:77:43:15:09:38:51:19:f9:
b8:6a:1b:16:07:75:de:e1:6e:ec:d3:d4:82:9b:5e:7c:8b:6a:
da:46:d4:25:d2:c6:f4:a9:be:48:74:1e:04:7f:97:a3:df:3f:
6b:69:1b:e7:39:05:ea:c7:1d:1e:9c:5f:d9:8d:7b:7a:14:e5:
c8:c9:b7:c0:85:02:dc:ac:d9:67:fb:dd:ad:a3:d0:cf:a3:88:
a5:f2:fd:a1:e3:9c:a2:ba:68:5a:28:8a:f4:46:03:11:2b:1e:
bf:70:45:58:a0:da:92:3e:54:ee:12:0f:d3:b6:6c:7f:fe:06:
c0:2e:ab:f1:42:c2:1e:aa:60:98:0b:a6:4e:1a:cf:fb:10:9a:
63:e5:9e:d5:0d:4b:70:d6:db:90:95:57:f4:57:13:c5:03:9f:
44:56:cb:af:ac:a5:1f:b3:4b:9f:84:2e:0b:40:a4:96:2b:be:
44:f9:0c:12:d3:28:4a:d9:30:23:ad:df:f3:cc:f2:ec:d4:e8:
00:24:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:37 2025 by rpki-client