Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa
File: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (raw, json)
Hash identifier: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=
Subject key identifier: 1D:FF:0C:6F:CA:8C:E5:90:74:1B:5E:B5:52:41:6A:47:4B:FB:B8:39
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 01942444AC236DF03A9FE6B587A230559B7B
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2418
IP address blocks: 192.54.174.0/24 maxlen: 24
192.54.175.0/24 maxlen: 24
192.54.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ac:23:6d:f0:3a:9f:e6:b5:87:a2:30:55:9b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dff0c6fca8ce590741b5eb552416a474bfbb839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:32:24:e2:11:44:23:94:04:54:74:a2:05:
14:bd:6c:c0:6a:32:c5:0c:0b:07:eb:df:ff:02:5f:
c8:b7:ce:a2:52:16:65:15:4f:3a:3d:1c:0d:84:9d:
f5:b7:41:00:df:c3:90:0e:58:2a:0a:5b:96:22:17:
bf:ee:bd:94:6a:d5:4b:88:d9:99:e9:71:f3:28:32:
3e:0e:d4:29:ac:5e:a0:4b:8c:f8:f5:54:34:fe:d0:
30:0e:c8:4f:86:c1:1a:39:9b:94:8d:b3:10:70:3b:
9a:61:4b:c3:3f:a9:42:d1:27:85:5a:46:9c:3d:dd:
81:75:fd:65:e8:ad:b9:7a:ba:aa:3b:bb:71:bd:f8:
6a:d7:5c:7d:2b:57:d1:6e:24:34:2a:e6:7e:cd:c9:
01:07:71:e0:75:0e:cc:ce:5a:0b:6f:4d:93:ed:23:
00:59:1f:fd:31:18:74:49:8b:f8:a5:cc:57:04:60:
8d:ef:fc:d9:61:a8:e0:dd:b3:d0:91:f3:ff:b8:b5:
2d:b7:96:3a:f6:06:c9:0f:d8:fe:a5:7d:fe:0f:b7:
1a:06:d7:f3:6d:9e:75:3b:79:81:1f:2f:2a:b9:cf:
51:51:c2:3c:2c:82:5e:dc:4a:1c:51:ec:28:3d:84:
c5:8c:8d:ca:87:aa:d2:0b:e3:94:86:11:6e:fb:7e:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FF:0C:6F:CA:8C:E5:90:74:1B:5E:B5:52:41:6A:47:4B:FB:B8:39
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.174.0-192.54.176.255
Signature Algorithm: sha256WithRSAEncryption
7a:47:86:7e:7d:34:42:8c:15:58:89:01:d1:2c:6c:66:e3:45:
d0:d3:a6:ca:91:e6:b8:57:70:01:e0:3b:5d:34:4d:79:dc:0e:
af:75:8a:35:6c:03:74:9d:cf:e4:5a:1e:b7:b3:37:bf:bf:98:
69:3f:99:be:91:fa:e4:86:9d:ee:8b:3b:ee:2a:91:1e:7a:b6:
68:ac:e2:ca:d8:aa:40:5e:d7:aa:40:68:83:e2:1a:2d:63:25:
28:2d:07:de:b2:c0:43:03:af:45:7d:ba:32:47:d2:ae:95:40:
9d:64:02:43:6f:79:e5:5e:c6:06:9e:e5:34:09:9d:df:88:93:
c8:46:e9:7d:9f:3d:8e:67:23:05:1e:c9:2f:f2:ab:aa:7a:93:
d2:d1:57:0d:64:3f:6f:fa:16:10:51:af:81:43:72:0d:95:1e:
25:6a:90:98:7b:af:10:b2:75:7e:d3:ae:9f:bc:4e:55:de:86:
d4:af:38:6f:b8:56:9c:2e:17:27:9d:9d:13:1f:f9:df:37:80:
04:5c:f0:18:da:cd:84:e6:da:c7:ac:43:12:2c:b0:14:f8:4e:
fe:f3:c7:00:c2:9d:01:0b:80:f3:e4:ce:54:08:31:4c:31:96:
7f:f6:15:1d:94:a8:ec:d4:85:ae:e5:48:8c:8a:fe:cd:5f:f4:
29:2e:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net