Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/HTRYgflHhuOfxQLrWVmvNeSsNPI.roa
File: HTRYgflHhuOfxQLrWVmvNeSsNPI.roa (raw, json)
Hash identifier: wRC+AXW/03/noAOD3SEwcSgbJo9J4QyXq7jiUqQpdnw=
Subject key identifier: 1D:34:58:81:F9:47:86:E3:9F:C5:02:EB:59:59:AF:35:E4:AC:34:F2
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 0194266B31280A73D381765A35B3B115A9DD
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/HTRYgflHhuOfxQLrWVmvNeSsNPI.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
83.217.160.0/20 maxlen: 20
185.8.92.0/24 maxlen: 24
185.8.94.0/23 maxlen: 23
185.26.240.0/22 maxlen: 22
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 29
2a10:6940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:31:28:0a:73:d3:81:76:5a:35:b3:b1:15:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d345881f94786e39fc502eb5959af35e4ac34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:f0:f5:e6:33:96:db:ac:e1:0f:98:c3:3f:
07:d0:04:70:7d:9e:58:df:ef:a5:eb:39:6c:1b:8c:
77:c0:41:59:1b:72:e7:f3:c5:db:e3:e6:15:7b:55:
40:65:30:1b:6e:9e:57:89:b8:b0:47:1a:56:79:3c:
65:6a:a9:cc:de:ed:4d:46:c2:63:3e:ba:3e:df:4f:
99:b9:00:33:b1:1c:48:31:80:f0:5f:69:77:5f:2f:
8a:7d:cb:08:b4:0b:2a:6f:f3:21:3a:0e:17:f9:01:
93:f8:ad:92:b3:1f:50:46:e1:3a:f0:11:ec:7a:3c:
23:db:f6:50:19:a6:1c:d7:b1:84:1e:11:ab:08:0a:
bc:22:8c:a9:61:96:07:82:54:8b:a0:8a:1a:50:de:
97:8f:71:2f:4d:cb:2f:d9:f7:dd:f1:dc:f6:26:2f:
c8:f8:22:b4:61:a9:3e:17:f1:4b:04:32:a8:65:4b:
f8:5f:85:60:e9:dd:e7:6a:a3:23:aa:0a:b3:94:1b:
dd:16:8d:3b:40:f9:4e:c9:f0:14:39:84:72:43:3e:
7f:ea:15:ef:e1:24:c3:e3:f4:1e:2b:8f:12:d3:dc:
0d:2c:0f:7d:5f:73:ff:b4:5e:b2:9e:88:4a:a8:88:
e1:fb:f5:34:bc:d7:eb:ff:79:20:0b:2b:20:a7:38:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:58:81:F9:47:86:E3:9F:C5:02:EB:59:59:AF:35:E4:AC:34:F2
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/HTRYgflHhuOfxQLrWVmvNeSsNPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
83.217.160.0/20
185.8.92.0/24
185.8.94.0/23
185.26.240.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
56:5a:7d:87:ed:fd:4d:25:36:b2:f1:6b:8d:8d:bd:f6:0c:47:
53:a2:68:aa:95:a5:c0:73:c8:7e:71:62:30:57:6f:a1:75:26:
ce:f7:29:9e:44:5d:6e:4c:b7:4b:51:b0:44:25:58:25:a6:8e:
a1:c6:14:d8:bd:44:fe:46:05:c6:49:fc:fa:21:ab:7d:a7:ee:
e6:0a:14:73:d1:16:fb:83:86:3b:9a:5a:bf:11:8f:1c:07:40:
4b:11:2b:99:ab:ea:bf:71:b2:0d:db:10:57:2b:67:4a:63:24:
e6:f2:7d:e1:6a:22:d2:f6:57:3a:5c:31:ad:f1:b6:0c:2b:00:
f7:1c:93:7c:cb:d1:11:b2:f6:d5:3e:c2:fb:7e:79:4c:6f:97:
30:0c:ff:72:cf:2c:61:11:b4:78:82:f3:35:ba:65:20:38:8a:
81:e4:c3:9d:f0:7c:a3:0a:e6:cb:ec:8c:a9:7c:43:37:c5:ad:
8b:15:bb:c4:74:75:3a:38:cd:49:66:c4:3e:32:4e:0a:13:82:
a9:bb:42:63:20:ac:82:78:c5:37:fa:da:bb:a8:a7:68:f4:36:
da:78:04:ec:53:0b:90:8b:3d:09:fa:4a:f3:a0:12:44:57:c3:
83:86:3f:62:ca:f7:f7:68:68:1b:70:e4:8c:ba:f8:7a:b1:a3:
66:6c:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:44 2025 by rpki-client