Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HuIC7_7flz3Cz1PnmbM_aSSP0lg.roa
File: HuIC7_7flz3Cz1PnmbM_aSSP0lg.roa (raw, json)
Hash identifier: 6w8cWaryzRw91Ya+P89Sq2n8wcPBy5S1qmfJa3/ILvM=
Subject key identifier: 1E:E2:02:EF:FE:DF:97:3D:C2:CF:53:E7:99:B3:3F:69:24:8F:D2:58
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC609690C3ABEDF28A8B7CCE9DDC8
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HuIC7_7flz3Cz1PnmbM_aSSP0lg.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 85.8.156.0/22 maxlen: 22
176.53.168.0/22 maxlen: 22
185.231.224.0/22 maxlen: 22
193.187.108.0/22 maxlen: 22
213.139.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:09:69:0c:3a:be:df:28:a8:b7:cc:e9:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee202effedf973dc2cf53e799b33f69248fd258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:85:b9:15:ff:28:2a:1d:7d:bb:23:13:88:
a1:57:7d:a1:e7:2f:8e:87:f5:78:ee:7b:64:30:40:
97:7a:eb:b4:c2:f0:f1:42:25:18:39:aa:9f:ce:7d:
e5:01:13:9c:74:20:00:4d:b0:fb:97:e3:a7:00:42:
42:52:8f:3f:f3:a8:3c:90:21:78:47:e7:bc:80:ae:
f8:34:70:3e:ff:ea:4f:1f:5f:dc:84:dd:9e:ed:b7:
cd:97:cc:a7:71:ff:e8:d3:5f:d8:7e:1b:34:e8:ad:
59:47:48:9e:8d:6b:37:ad:c1:fc:71:b7:10:af:e0:
74:37:c9:1f:89:e4:47:9c:3b:22:74:82:3e:b6:88:
66:af:4c:35:6c:6d:f8:cd:3d:13:d1:96:8a:a4:bb:
99:2b:d5:90:89:f7:a0:72:d5:3c:00:61:99:13:a7:
18:94:6b:34:24:f7:8f:68:8d:74:4c:c2:a2:02:c7:
d9:e9:fd:51:2d:e3:f7:99:42:f9:be:d1:0d:ed:c3:
dd:6c:fb:cb:2a:2c:a3:a9:d2:a4:59:3f:89:bb:73:
c5:d9:a9:57:a0:28:1b:ca:c2:c5:3b:07:e6:16:36:
f9:61:37:76:5b:5b:fe:3b:1e:84:89:c9:31:86:8a:
3c:5f:ba:41:0c:88:36:dd:b8:62:4f:41:0c:94:0d:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:02:EF:FE:DF:97:3D:C2:CF:53:E7:99:B3:3F:69:24:8F:D2:58
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HuIC7_7flz3Cz1PnmbM_aSSP0lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.156.0/22
176.53.168.0/22
185.231.224.0/22
193.187.108.0/22
213.139.224.0/22
Signature Algorithm: sha256WithRSAEncryption
60:fd:49:a4:19:d7:3d:3a:09:18:b8:27:b1:ac:91:f4:c8:ac:
f9:ca:49:43:b2:fd:a8:44:4c:71:74:c3:25:12:57:7d:69:29:
c5:e1:ef:9b:8f:97:03:ee:f1:37:01:f3:a4:1f:a8:1d:0f:9f:
04:2b:a8:2c:fd:e1:51:49:88:3f:b1:0e:91:d7:f3:6c:70:b0:
b1:b0:71:4e:33:1b:3c:b9:a8:91:44:d0:33:40:fa:f1:7e:7a:
07:40:7f:a1:92:33:0a:38:52:24:78:14:7c:cd:df:24:8d:2e:
4d:39:ba:8b:3b:8f:ef:26:38:d1:5e:ad:77:59:78:90:6d:23:
93:ee:d8:9b:26:d0:f3:b4:f1:1c:99:ad:70:3e:47:ed:6f:d7:
8f:56:3e:17:db:f0:35:cc:b5:d9:a3:84:82:8b:23:c4:17:ac:
23:5f:95:67:09:da:4b:2a:67:be:b8:ae:47:d3:ae:42:6e:31:
14:cb:c0:8a:31:21:37:e6:64:4e:4e:89:49:3c:1a:5c:c5:d2:
2e:54:2f:d0:a0:c7:50:01:a2:a2:31:25:48:28:c0:88:e5:22:
14:dc:03:d6:a8:cb:d1:31:0e:d5:81:fd:da:d1:5c:e4:f3:53:
e0:9b:b2:48:bd:2c:c9:ad:00:f9:03:59:1d:44:8e:b6:ee:63:
54:2e:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:24 2025 by rpki-client