Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HYgvZnlKgl5pvq-sBxhwSiTDpnU.roa
File: HYgvZnlKgl5pvq-sBxhwSiTDpnU.roa (raw, json)
Hash identifier: 24D78Pj+RVpkzeL6Q7pXzRVT7bC7da1tvSmnvdTWzuA=
Subject key identifier: 1D:88:2F:66:79:4A:82:5E:69:BE:AF:AC:07:18:70:4A:24:C3:A6:75
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 018AD043C6A6B3B51C4EF1EFBD7A0A61B0AB
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HYgvZnlKgl5pvq-sBxhwSiTDpnU.roa
Signing time: Tue 26 Sep 2023 06:53:37 +0000
ROA not before: Tue 26 Sep 2023 06:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 193.56.173.0/24 maxlen: 24
37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
37.228.148.0/24 maxlen: 24
193.56.126.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
185.107.192.0/23 maxlen: 23
185.107.192.0/22 maxlen: 22
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.250.0/24 maxlen: 24
185.245.168.0/22 maxlen: 22
185.101.95.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
185.116.159.0/24 maxlen: 24
193.46.24.0/22 maxlen: 22
2a06:7f80::/29 maxlen: 29
2a06:7f80:3::/48 maxlen: 48
2a06:1c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:43:c6:a6:b3:b5:1c:4e:f1:ef:bd:7a:0a:61:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Sep 26 06:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d882f66794a825e69beafac0718704a24c3a675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:6c:fe:bf:4d:74:8e:4e:75:97:75:df:3a:
4f:87:b3:d8:d0:bc:3d:c9:c6:9e:e9:a4:62:c6:16:
62:b3:28:1c:e5:ed:e3:da:69:1b:67:9a:f9:79:86:
6c:db:12:b9:21:22:fb:a0:72:3d:b8:ab:fd:ae:18:
7d:af:50:d2:63:30:d0:ab:90:94:44:db:95:16:e1:
5d:37:8e:62:87:01:ba:38:cc:21:ef:d9:8a:c8:07:
9b:4d:2a:75:48:ec:e5:68:d9:d6:b0:a8:81:5d:ac:
a2:4e:88:92:aa:6a:bb:2d:cc:fe:4e:d1:71:ad:27:
1a:32:f2:40:f3:69:88:a4:3c:34:f9:8d:2f:5b:89:
2f:cc:71:db:e1:a4:25:da:52:5a:a2:9e:f6:bf:7f:
ac:39:36:e0:fa:88:82:01:49:98:d8:b5:82:d2:4c:
44:d1:bf:71:ae:95:7b:eb:b5:b3:26:72:9f:cd:d6:
28:39:c8:c9:f0:27:14:2e:d6:ed:46:17:9d:e8:ef:
48:ce:b7:6c:06:4e:d3:28:f2:33:e9:b2:4e:bf:82:
e5:c3:4c:17:68:a2:95:ef:a1:d3:38:1d:d9:2f:97:
37:31:3f:6c:bd:f9:a0:05:7d:d5:d4:95:1a:81:ab:
7c:13:70:b4:a1:bd:cb:76:32:8e:52:a2:9c:c5:3f:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:2F:66:79:4A:82:5E:69:BE:AF:AC:07:18:70:4A:24:C3:A6:75
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HYgvZnlKgl5pvq-sBxhwSiTDpnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/24
37.228.151.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
51:df:55:43:28:c6:7e:9d:22:5e:f4:3e:d0:cb:45:74:42:e5:
62:a6:b2:00:d9:52:eb:de:85:3b:06:23:c3:ed:c0:10:3e:a9:
98:f0:81:6b:64:e8:ba:d7:5c:6d:18:cc:60:87:19:57:9a:0a:
5e:15:10:35:f2:d8:51:14:bb:96:78:a8:6f:60:56:43:04:05:
16:1a:96:05:32:2b:dc:d9:73:0c:97:d7:d7:e9:b5:63:c5:72:
44:fc:93:9f:c4:ca:cf:d1:8c:c0:01:41:f0:de:4a:71:97:b3:
20:fd:bf:e4:ab:ed:d2:dd:7f:09:46:b9:0b:c3:d8:a5:5c:e2:
10:e7:76:ef:88:94:cc:68:a3:25:37:d2:5b:6f:8d:70:86:a0:
fa:a6:a9:5a:b4:1f:08:86:95:bd:17:c5:df:54:41:7c:1f:47:
26:22:f2:21:68:ab:e2:9f:b8:4d:28:01:16:c6:8b:26:aa:70:
6c:56:b0:0b:76:0c:de:94:f8:b1:00:77:b1:48:04:96:8d:d6:
0b:dd:b1:a2:37:09:db:ea:02:d9:23:1d:29:26:79:84:f6:12:
de:88:5b:58:ea:a8:11:b2:45:a2:dc:ae:bb:ae:02:53:70:11:
ba:14:51:a6:64:64:74:60:f2:cd:4b:12:0a:0b:ac:be:43:f5:
7c:06:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:59 2025 by rpki-client