Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/HkAi_vvBeNnd_ATaCk8zgPjDPzM.roa
File: HkAi_vvBeNnd_ATaCk8zgPjDPzM.roa (raw, json)
Hash identifier: sppUPT/FxPKmI4+Ql7+8bIFKrA/CImxSMwiqkFBwpZQ=
Subject key identifier: 1E:40:22:FE:FB:C1:78:D9:DD:FC:04:DA:0A:4F:33:80:F8:C3:3F:33
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 019567F75EF34E2E85E24D6D96180AA89DE7
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/HkAi_vvBeNnd_ATaCk8zgPjDPzM.roa
Signing time: Wed 05 Mar 2025 20:20:19 +0000
ROA not before: Wed 05 Mar 2025 20:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63025
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:f7:5e:f3:4e:2e:85:e2:4d:6d:96:18:0a:a8:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Mar 5 20:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e4022fefbc178d9ddfc04da0a4f3380f8c33f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:82:dd:34:bb:10:bf:56:48:f3:a0:e2:90:
f5:f7:84:2d:0a:a5:b4:db:e1:e1:a4:5c:57:04:e3:
27:72:25:23:45:6b:4b:d2:cc:c2:02:60:05:65:70:
53:1f:43:65:e2:2f:39:ec:b9:98:5e:9e:30:5e:3e:
95:27:c4:06:1e:94:ce:5b:47:3f:01:9e:9d:34:ed:
49:0d:86:d2:87:af:24:91:ec:c3:c5:8c:b3:70:4b:
1c:fd:bd:32:2f:4a:b8:4c:ca:53:7f:83:31:60:69:
9b:2e:c8:a9:25:a8:24:fb:c1:06:f3:a4:1e:6f:cc:
31:55:b4:9f:05:ae:4b:53:20:a7:ff:72:fa:b0:03:
ae:df:f1:9e:f7:e0:6e:1f:83:2b:28:b9:41:5a:58:
34:b6:c4:a1:85:76:3b:72:38:b6:8c:5e:d2:06:04:
69:e8:88:6c:5c:79:ae:5c:35:94:c1:47:90:7b:d2:
7a:43:87:48:8f:f1:1f:d7:d0:25:4b:6e:9a:4a:96:
ac:f8:06:4d:28:01:63:d1:4c:de:86:c6:2b:45:42:
1c:3c:76:8d:58:85:cc:1e:fd:bf:c3:b4:3d:d9:21:
8c:31:c6:72:1d:95:c1:7b:74:0a:90:c7:19:47:1e:
4d:b5:cf:c6:2d:17:a8:30:05:c2:46:51:ac:5b:c5:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:22:FE:FB:C1:78:D9:DD:FC:04:DA:0A:4F:33:80:F8:C3:3F:33
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/HkAi_vvBeNnd_ATaCk8zgPjDPzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5d:82:c3:bf:ec:b9:dc:37:29:60:b8:88:7a:b5:e7:d5:2b:
52:f7:68:0f:29:c2:1c:7e:2d:d5:4c:63:2a:d9:70:ca:bc:a6:
9f:f6:c8:88:ef:a6:c1:25:83:43:2f:ab:9f:70:ae:35:42:df:
6d:8d:e5:34:a3:21:a2:fa:d2:43:71:fc:26:72:20:d4:16:90:
fa:b1:42:76:43:cc:02:bf:fc:58:c0:b5:a2:88:30:15:f7:9c:
86:f3:37:97:38:3e:55:78:34:8b:c4:88:6a:c8:8b:e7:cf:4a:
8d:d4:94:77:01:26:2d:36:92:4d:43:60:82:c7:d4:f5:57:8a:
8e:b1:aa:94:75:c4:43:cf:1b:3a:01:ef:bc:8c:9a:cc:56:b4:
3c:8d:c5:b8:ea:69:4f:d8:df:59:1a:8c:4a:ea:f8:cb:d7:c3:
ad:26:6b:d9:7b:c6:f6:25:8f:5b:81:a1:14:c7:b8:b4:fc:43:
18:bc:2e:f2:2e:7e:12:27:f8:a3:00:15:68:a3:50:6d:9c:ec:
5a:f3:14:66:fd:3f:8a:03:02:5f:d7:39:38:41:50:83:5d:21:
15:22:89:32:18:91:56:b2:46:2f:f8:c0:21:2b:c6:c1:12:0a:
84:b4:21:8d:78:5b:8a:4e:03:4e:a5:2c:05:3b:29:72:9e:0c:
b6:42:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:09 2025 by rpki-client