Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/HJFX7RQ7EiBH4ao9kszXXIrpy6E.roa
File: HJFX7RQ7EiBH4ao9kszXXIrpy6E.roa (raw, json)
Hash identifier: SEeRV9SBJin6KSSMhWzlibZzjEx0Cto2dV4SmNXx4NU=
Subject key identifier: 1C:91:57:ED:14:3B:12:20:47:E1:AA:3D:92:CC:D7:5C:8A:E9:CB:A1
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 046900E7
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/HJFX7RQ7EiBH4ao9kszXXIrpy6E.roa
Signing time: Fri 24 Jun 2022 14:04:31 +0000
ROA not before: Fri 24 Jun 2022 14:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.84.89.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73990375 (0x46900e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Jun 24 14:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c9157ed143b122047e1aa3d92ccd75c8ae9cba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:0e:d4:46:78:6f:53:e6:2d:67:31:a3:5a:
b1:eb:c0:1f:4e:60:3c:8d:36:e0:f7:29:6c:34:b6:
27:ed:37:62:25:e1:b7:6f:0c:9e:8c:63:1a:d0:9f:
93:e0:35:a2:2c:17:77:05:98:6a:8d:15:a8:c9:cd:
17:dc:d1:00:41:17:b2:11:c5:46:af:0b:dd:d1:62:
65:f9:7b:c1:2b:bc:ed:d6:79:75:09:6c:99:8e:51:
ba:82:be:61:f3:a7:00:3c:0f:cb:53:7e:78:f6:bd:
c9:ce:8a:90:a0:45:66:d2:f4:df:98:27:ae:43:19:
1d:2d:34:80:1f:7c:b9:ce:d3:dc:2c:8b:dc:58:e2:
f5:7b:17:85:ab:2a:d4:44:01:22:90:ad:a9:67:c8:
c6:60:a8:c4:b0:92:32:1d:2c:5b:30:09:23:de:af:
b4:9a:1f:50:81:b7:71:16:54:80:f6:54:6e:c5:f0:
2c:d6:84:69:b6:62:bb:17:dd:d1:df:c5:e3:8d:50:
5a:a2:05:d4:9a:b7:b6:76:2e:8a:cb:8c:b1:fb:41:
5c:ed:b2:5c:71:96:45:0e:5c:d2:29:e8:a5:37:93:
63:6b:c0:15:ed:65:70:30:bf:7d:1e:c0:a3:e9:81:
d4:3a:a2:d1:81:a7:a5:e0:92:ef:8f:56:22:62:ae:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:57:ED:14:3B:12:20:47:E1:AA:3D:92:CC:D7:5C:8A:E9:CB:A1
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/HJFX7RQ7EiBH4ao9kszXXIrpy6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/22
Signature Algorithm: sha256WithRSAEncryption
16:e8:0c:57:84:df:e8:73:47:43:0c:da:b8:56:2d:37:a5:f4:
d4:56:55:f1:a8:43:cf:77:be:4c:61:34:b8:a3:ca:94:04:ca:
13:94:58:cb:4b:05:a1:b1:82:9a:fc:89:c9:0e:e8:5e:4d:49:
a9:7c:67:ca:b8:43:c1:d4:6b:df:2d:df:93:c8:78:e2:a3:0e:
b4:05:ca:36:54:fa:70:cc:c7:c8:00:7c:5f:da:fc:29:43:ce:
e6:80:17:2e:7c:72:95:2f:7a:2d:7a:6b:65:3c:5f:78:b5:01:
c5:6a:54:80:05:8f:62:2a:40:05:b2:e0:42:d9:2c:ca:46:83:
81:b5:6b:ff:1d:0a:45:3f:7b:50:d6:b0:05:85:44:00:9a:b5:
03:7b:7d:15:2c:dc:ae:24:ba:f6:3a:aa:ac:ab:ff:31:73:cb:
a5:7e:bd:25:09:5b:86:98:27:11:c9:f3:7d:5b:78:94:64:6e:
44:8b:ac:21:ae:ed:1d:7b:5a:f6:06:1f:b6:93:f8:f6:45:36:
64:65:1d:ea:54:23:8f:f6:0a:c2:3e:4f:d9:93:38:3c:0d:27:
12:e7:f3:1f:d6:ac:6f:b6:f2:ae:95:17:71:e4:68:d2:6f:43:
4b:55:21:bb:13:8c:a6:30:9a:6e:71:b9:17:e1:c6:e8:1b:23:
91:b2:64:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBGkA5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MjU2OWJiZDBhOWVhNWI3MDVmYWJiOTAyMDNhZWUzMTU4ZDgwNTUzMB4XDTIyMDYy
NDE0MDQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM5MTU3ZWQxNDNi
MTIyMDQ3ZTFhYTNkOTJjY2Q3NWM4YWU5Y2JhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWQDtRGeG9T5i1nMaNasevAH05gPI024PcpbDS2J+03YiXh
t28MnoxjGtCfk+A1oiwXdwWYao0VqMnNF9zRAEEXshHFRq8L3dFiZfl7wSu87dZ5
dQlsmY5RuoK+YfOnADwPy1N+ePa9yc6KkKBFZtL035gnrkMZHS00gB98uc7T3CyL
3Fji9XsXhasq1EQBIpCtqWfIxmCoxLCSMh0sWzAJI96vtJofUIG3cRZUgPZUbsXw
LNaEabZiuxfd0d/F441QWqIF1Jq3tnYuisuMsftBXO2yXHGWRQ5c0inopTeTY2vA
Fe1lcDC/fR7Ao+mB1Dqi0YGnpeCS749WImKu21UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQckVftFDsSIEfhqj2SzNdciunLoTAfBgNVHSMEGDAWgBSyVpu9Cp6ltwX6
u5AgOu4xWNgFUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NsYWJ2UXFlcGJjRi1ydVFJRHJ1TVZqWUJWTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvYTQ4YTkxLWNhMzAtNDRmZC1hMjAwLWJhNzc1MDUzN2FjMC8x
L0hKRlg3UlE3RWlCSDRhbzlrc3pYWElycHk2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
YTQ4YTkxLWNhMzAtNDRmZC1hMjAwLWJhNzc1MDUzN2FjMC8xL3NsYWJ2UXFlcGJj
Ri1ydVFJRHJ1TVZqWUJWTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1UWDANBgkqhkiG9w0BAQsFAAOC
AQEAFugMV4Tf6HNHQwzauFYtN6X01FZV8ahDz3e+TGE0uKPKlATKE5RYy0sFobGC
mvyJyQ7oXk1JqXxnyrhDwdRr3y3fk8h44qMOtAXKNlT6cMzHyAB8X9r8KUPO5oAX
LnxylS96LXprZTxfeLUBxWpUgAWPYipABbLgQtksykaDgbVr/x0KRT97UNawBYVE
AJq1A3t9FSzcriS69jqqrKv/MXPLpX69JQlbhpgnEcnzfVt4lGRuRIusIa7tHXta
9gYftpP49kU2ZGUd6lQjj/YKwj5P2ZM4PA0nEufzH9asb7byrpUXceRo0m9DS1Uh
uxOMpjCabnG5F+HG6BsjkbJkFQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:45 2025 by rpki-client