Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/HevIcw-udVLHAsRMuVL8AXS5DmE.roa
File: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (raw, json)
Hash identifier: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=
Subject key identifier: 1D:EB:C8:73:0F:AE:75:52:C7:02:C4:4C:B9:52:FC:01:74:B9:0E:61
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0194228D10125AFE1E0D6AF4669243192207
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/HevIcw-udVLHAsRMuVL8AXS5DmE.roa
Signing time: Wed 01 Jan 2025 15:47:37 +0000
ROA not before: Wed 01 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.132.208.0/22 maxlen: 24
83.139.202.0/23 maxlen: 24
83.139.212.0/22 maxlen: 24
83.139.216.0/22 maxlen: 24
83.139.220.0/23 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.242.0/23 maxlen: 24
83.139.244.0/23 maxlen: 24
85.31.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:10:12:5a:fe:1e:0d:6a:f4:66:92:43:19:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1debc8730fae7552c702c44cb952fc0174b90e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:c6:fa:1f:8c:34:0d:32:cd:2a:1b:22:14:
a4:e1:6d:f4:2b:23:46:38:87:85:2b:99:4e:14:90:
0c:fc:4e:70:13:70:8d:44:18:ec:2f:0b:b8:c4:c6:
08:5e:f0:48:cb:6c:dd:b3:6d:d3:fb:83:d9:7a:84:
13:31:c4:42:ed:c8:21:38:45:a8:29:f9:3d:dd:42:
3c:16:ca:e0:5d:98:f9:7f:db:cd:f8:aa:5c:e6:78:
58:3e:7e:70:6d:ea:1f:9b:28:f9:90:65:7e:05:77:
d1:43:f1:54:66:f1:85:28:8b:49:a5:04:2e:78:94:
ab:3b:9a:bc:98:74:92:cb:db:89:d2:c9:72:15:d0:
a0:0d:7b:83:e0:d9:df:4a:0f:ca:ec:29:e6:49:47:
f8:f2:c4:c3:28:f4:78:a9:01:a7:6d:ff:98:24:4f:
33:6a:94:f6:18:42:f4:a4:56:34:68:fe:f4:3c:78:
3b:3a:2c:1c:1c:79:80:c6:de:e6:20:32:99:bb:11:
65:ad:56:76:e5:12:f7:f6:b5:4e:7a:33:13:7e:eb:
d0:29:18:3b:4d:1a:26:0c:64:32:76:36:91:4c:62:
43:83:46:06:c6:c2:14:0c:0d:5e:f6:09:c8:93:fa:
33:03:dc:b4:0e:4f:52:6d:97:6d:60:37:b2:fe:83:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:C8:73:0F:AE:75:52:C7:02:C4:4C:B9:52:FC:01:74:B9:0E:61
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/HevIcw-udVLHAsRMuVL8AXS5DmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:27:91:27:74:d5:c1:45:c2:56:7b:c0:a8:e5:c6:81:02:80:
15:4b:ec:cf:38:9a:78:80:61:53:36:5f:3f:a1:11:14:fd:72:
de:4a:2f:a3:e1:6a:a2:1d:34:ce:9f:a4:dd:fc:e6:5f:92:1f:
7c:12:b3:c9:f5:26:0f:30:8b:21:a9:72:03:03:e5:1f:dc:a3:
50:e0:0b:e4:79:b7:c7:0d:64:3a:78:bf:27:12:61:bf:28:0e:
42:52:69:12:62:74:cf:84:be:84:40:bc:90:17:3f:09:11:bb:
f0:be:df:78:27:d1:85:41:17:45:99:e1:f4:bd:5a:3f:ef:15:
66:65:eb:21:2d:f9:71:77:6b:ab:36:16:56:45:6c:40:ee:47:
b4:98:86:9a:e2:9d:c8:55:4d:0d:33:55:07:b6:a0:08:58:e7:
bc:0a:f5:f7:d7:e5:fd:77:2d:a9:7a:12:04:5c:c5:59:53:af:
d5:50:9e:cc:43:b6:36:89:2c:b1:b9:6a:d7:87:eb:f7:47:43:
dd:ed:63:de:74:78:9a:0b:1d:c6:e8:02:3a:72:25:10:0a:58:
5e:5f:72:d7:32:69:6b:da:ec:df:22:3b:c6:02:76:e4:98:df:
91:fa:81:c8:2e:57:8e:34:27:13:44:27:a0:a7:f4:a6:dc:5f:
a3:72:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:07 2025 by rpki-client