Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/K_hoih_GKApYxHJEnS16O-cnMk4.roa
File: K_hoih_GKApYxHJEnS16O-cnMk4.roa (raw, json)
Hash identifier: FdhMANurZIvPIHv7i9+qYNmi/dWbIy+j3vc+E14hecg=
Subject key identifier: 2B:F8:68:8A:1F:C6:28:0A:58:C4:72:44:9D:2D:7A:3B:E7:27:32:4E
Certificate issuer: /CN=73f33c451e745fa8938fceeed59283dea7b2701c
Certificate serial: 01857227FD0E4B264EFF8E9EAC8FF8FA3317
Authority key identifier: 73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/K_hoih_GKApYxHJEnS16O-cnMk4.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 5.11.48.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
95.130.248.0/21 maxlen: 24
185.32.116.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
141.101.32.0/21 maxlen: 24
2a04:ff40::/29 maxlen: 48
2a00:12c0::/29 maxlen: 48
2a04:4cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fd:0e:4b:26:4e:ff:8e:9e:ac:8f:f8:fa:33:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f33c451e745fa8938fceeed59283dea7b2701c
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bf8688a1fc6280a58c472449d2d7a3be727324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:e9:cb:51:9a:8a:25:8c:7c:da:76:4e:66:
7c:22:ca:d2:86:fe:d9:7a:4d:64:09:7a:a0:2e:38:
c1:c4:cc:0a:b2:54:cf:27:25:b9:9f:f1:8f:33:d6:
08:4e:0d:1c:6e:d1:f3:dd:d9:40:4d:fd:47:56:ed:
56:38:6d:1f:64:32:3a:28:ef:10:d5:c2:d5:8a:65:
37:a1:c5:ee:bd:6e:ca:1d:75:4b:87:10:06:db:bf:
48:ab:10:75:8d:f2:fd:e9:eb:59:60:d4:a7:ce:f1:
c2:43:a4:6a:ec:ad:cd:e5:47:5d:86:e1:6a:00:cd:
4f:f2:6a:33:63:bd:4f:16:da:9d:a2:07:b6:01:32:
bb:c1:06:28:d6:83:bc:5e:a1:ab:79:f7:8d:a9:48:
60:fe:ea:6e:00:96:ec:28:75:01:d6:d3:50:ca:af:
ac:3b:9c:44:7a:dc:bc:64:e2:5f:23:4b:bf:f9:5e:
ce:b4:d4:27:9f:49:bf:cd:51:21:d9:20:4e:bc:24:
16:85:70:fc:d4:f1:2a:4d:1c:5c:f5:d8:eb:a0:ff:
ac:3d:89:ec:b9:0d:34:4b:ac:3b:e2:85:f9:ec:ef:
89:bb:60:19:f7:7f:b0:a4:d9:df:48:78:ba:ea:c8:
eb:ad:7f:df:0c:c2:04:d9:6d:da:6e:dc:9b:37:4b:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:68:8A:1F:C6:28:0A:58:C4:72:44:9D:2D:7A:3B:E7:27:32:4E
X509v3 Authority Key Identifier:
keyid:73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/K_hoih_GKApYxHJEnS16O-cnMk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/c_M8RR50X6iTj87u1ZKD3qeycBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
93.190.64.0/21
95.130.248.0/21
109.75.176.0/20
141.101.32.0/21
185.32.116.0/22
185.65.88.0/22
185.143.164.0/22
IPv6:
2a00:12c0::/29
2a04:4cc0::/29
2a04:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
40:50:77:3f:f6:b2:db:44:49:9e:d8:97:a3:e2:29:3e:81:29:
26:d7:85:a9:f1:3c:64:9e:2d:e4:78:11:7f:d5:48:c6:eb:7d:
7d:cb:8a:0d:99:8e:f8:bb:c5:45:da:c2:4f:5a:0c:7e:53:40:
6c:71:c1:36:cc:78:d3:6c:b8:f3:8f:bf:47:cf:b4:17:af:05:
42:2e:0e:66:98:26:1e:3e:5c:13:ed:7a:6d:32:bf:4f:25:8e:
6a:ac:dd:f4:1d:ad:94:f5:ce:bb:7f:ef:87:06:b2:df:6c:54:
3f:69:c7:fe:b5:ab:63:b5:71:09:a5:a2:2e:88:a4:99:a3:28:
b8:d8:4d:e3:c0:0e:6e:34:48:76:34:ca:dd:29:f3:a5:51:10:
1c:18:73:1e:f1:64:4d:e6:ec:5a:f2:d3:8b:35:c2:e4:3f:2e:
ef:4b:f6:c4:5b:b8:0a:92:73:5e:75:e8:45:85:6e:90:5f:f7:
57:2f:74:f6:71:f6:df:bd:65:e6:01:c5:c7:c7:44:b9:4f:72:
b2:d5:81:67:f7:72:11:5f:40:30:a9:7a:7f:ab:10:e3:5a:e4:
79:f2:5e:59:ac:d1:58:7f:dd:b9:89:0c:21:02:0b:c6:28:78:
0a:b2:90:79:23:78:ca:6e:88:26:ed:0b:34:a1:a2:8e:1a:9a:
40:da:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:27 2025 by rpki-client