Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/HJG2LfZbcdQILd5mjrG6JouJjB8.roa
File: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (raw, json)
Hash identifier: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=
Subject key identifier: 1C:91:B6:2D:F6:5B:71:D4:08:2D:DE:66:8E:B1:BA:26:8B:89:8C:1F
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 0194258F575E03C6E1F649BEAEE426802884
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/HJG2LfZbcdQILd5mjrG6JouJjB8.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 84.54.24.0/22 maxlen: 22
84.54.24.0/23 maxlen: 23
84.54.26.0/23 maxlen: 23
178.212.72.0/24 maxlen: 24
185.248.133.0/24 maxlen: 24
213.217.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:57:5e:03:c6:e1:f6:49:be:ae:e4:26:80:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c91b62df65b71d4082dde668eb1ba268b898c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:da:bc:b8:d3:3e:89:ee:42:1d:a4:2a:41:
1c:9c:11:35:4f:c9:40:c7:bb:8c:b0:67:bd:e1:c8:
e0:36:33:e2:d9:da:cf:aa:b2:90:28:8e:e3:4a:b4:
70:54:b0:b8:52:ac:d6:cb:9d:7e:36:f9:d3:e2:a7:
7a:ae:3b:66:d0:01:48:07:0f:f4:90:59:51:5f:3b:
24:35:fe:e2:d4:d6:13:49:31:73:87:2d:7f:af:c6:
34:22:c0:5b:99:5f:2b:9a:58:00:13:5c:29:e0:43:
90:6c:36:4d:67:11:62:b9:c7:a8:7f:86:d0:71:3d:
c6:16:51:e4:2b:ff:54:5d:7c:71:91:f7:d8:c1:d2:
0f:2d:d6:31:ae:06:6f:0c:c9:d3:a6:e6:26:79:bf:
68:31:ef:82:df:9c:50:01:9d:c9:1b:ca:f7:c8:d3:
8e:3c:a9:48:7c:93:50:fc:25:59:a6:64:b7:b2:02:
b0:1d:28:cf:99:1f:64:e1:39:11:a0:91:9d:d1:26:
a7:25:65:19:f0:92:1b:49:a0:a3:70:6d:34:80:42:
dd:23:e9:b1:f8:9d:b8:a9:04:89:f1:49:c9:44:e1:
ed:13:e3:b8:4d:14:5c:b7:57:01:0f:0d:0f:5f:b5:
a5:1c:0e:cd:e5:a3:9b:9e:56:9f:19:8c:df:7c:2d:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:B6:2D:F6:5B:71:D4:08:2D:DE:66:8E:B1:BA:26:8B:89:8C:1F
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/HJG2LfZbcdQILd5mjrG6JouJjB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.24.0/22
178.212.72.0/24
185.248.133.0/24
213.217.28.0/24
Signature Algorithm: sha256WithRSAEncryption
72:37:c7:8d:3c:c7:5d:6f:a4:03:78:e4:22:14:c7:f6:2a:93:
b1:27:58:13:35:f7:cd:10:d7:97:5b:10:5f:61:25:42:a1:32:
0b:71:ae:33:67:0d:b2:54:34:53:99:40:ae:92:d0:09:8f:a0:
cc:70:da:ce:61:ca:09:d9:0a:31:2a:84:d6:88:1b:81:25:26:
20:89:c0:7e:bc:3d:f8:e1:77:88:48:73:d3:1f:50:5f:7d:87:
b0:c5:92:c6:a6:4f:6c:ec:8b:c1:64:c2:f9:a7:5e:03:a5:8f:
07:ce:33:5d:a5:34:97:12:ba:73:b9:28:4e:59:6c:5e:59:6b:
ea:e9:b7:e4:03:ea:87:d5:49:aa:a9:fd:91:c2:a8:52:cd:95:
36:07:9d:56:6d:d5:04:99:50:51:91:bb:bb:88:c7:5d:ed:2a:
b0:bd:47:ac:f1:78:56:98:e9:08:86:37:13:56:55:0c:c9:b8:
9f:42:f9:67:29:64:73:15:c8:cf:4d:b2:71:1f:39:2b:c6:c7:
58:a4:43:40:15:86:26:07:3c:f3:22:61:a2:e8:05:bd:34:c2:
a6:c5:45:81:fe:19:02:05:e4:b9:89:f6:4e:c1:3b:bf:82:d5:
6a:1f:6a:0c:38:4a:71:9e:75:8b:b0:6a:1b:62:a2:d2:20:10:
11:df:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:58 2025 by rpki-client