Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/HyefmTBy2OXIxQS41tlTH-MtUgc.roa
File: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (raw, json)
Hash identifier: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=
Subject key identifier: 1F:27:9F:99:30:72:D8:E5:C8:C5:04:B8:D6:D9:53:1F:E3:2D:52:07
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01941FFA6BD47D9913A80BEC4FBCF51675BC
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/HyefmTBy2OXIxQS41tlTH-MtUgc.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 80.241.56.0/21 maxlen: 24
80.241.60.0/24 maxlen: 24
91.198.250.0/24 maxlen: 24
91.223.20.0/24 maxlen: 24
185.97.172.0/22 maxlen: 24
195.10.208.0/24 maxlen: 24
2001:67c:2050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6b:d4:7d:99:13:a8:0b:ec:4f:bc:f5:16:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f279f993072d8e5c8c504b8d6d9531fe32d5207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:e9:34:64:35:de:88:aa:1d:96:d0:32:76:
77:f4:73:ef:73:b3:35:af:e1:a3:7c:de:94:92:ab:
5c:ab:76:ab:63:4e:a9:cc:45:80:36:53:f6:35:1c:
7b:40:67:e3:e0:e6:d0:b4:bb:07:8c:25:fb:23:bd:
6c:e5:97:c7:db:fd:28:9a:9d:eb:8f:c5:32:82:6c:
f1:23:8e:84:39:fa:38:90:ff:0d:67:72:fd:73:4f:
7c:bf:db:d4:fb:14:7c:4f:31:26:7f:9b:9d:e3:19:
f7:d9:02:92:4a:5c:23:17:40:81:ba:90:b7:3a:f8:
36:d2:e6:bb:81:0c:b1:a1:84:fd:af:13:ce:e1:a5:
7a:e3:ee:71:70:fd:f7:f8:eb:c0:37:bc:7d:61:26:
ec:77:3f:26:32:04:94:ef:a3:2c:5a:33:e9:39:e7:
0a:f9:aa:5b:81:37:b2:55:0a:56:31:fe:e5:38:14:
f4:1b:6e:68:49:b1:35:3a:7c:66:b9:e2:07:f6:19:
61:f9:25:8c:c9:9b:66:75:84:e8:70:6f:27:f9:62:
3f:b9:cc:8b:8c:42:70:1c:db:b4:4e:4a:9f:f1:9c:
8c:7e:35:7d:88:2b:88:1e:8d:ec:da:29:50:af:99:
4a:da:da:2e:fd:c6:ce:08:3e:d9:57:85:a4:7f:27:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:9F:99:30:72:D8:E5:C8:C5:04:B8:D6:D9:53:1F:E3:2D:52:07
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/HyefmTBy2OXIxQS41tlTH-MtUgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.56.0/21
91.198.250.0/24
91.223.20.0/24
185.97.172.0/22
195.10.208.0/24
IPv6:
2001:67c:2050::/48
Signature Algorithm: sha256WithRSAEncryption
7b:93:a5:bf:71:50:62:61:52:95:63:b9:91:73:c2:6a:d5:d7:
6e:20:a2:54:8e:83:e5:a4:03:fc:47:33:d2:27:24:bd:31:49:
bd:16:19:6c:dc:69:94:bc:c7:99:10:30:ef:4c:58:43:d2:2b:
84:9e:dd:5d:cd:7d:56:92:35:f2:c6:11:09:b1:3c:df:07:2d:
d2:d1:6a:96:8a:50:e6:20:22:35:48:f9:ad:9b:bb:cb:67:7b:
09:0a:c3:a5:bc:45:b1:7a:46:8c:a3:4e:b1:66:b5:53:c1:ac:
fe:f3:ec:5c:f5:7d:ea:9e:5f:d7:0e:22:de:5c:fc:d1:95:6a:
0b:b0:8b:f4:45:83:52:62:0c:3e:a8:77:15:4d:23:b1:8b:68:
90:36:6a:ee:73:a4:68:09:8f:39:3a:af:ec:44:46:16:78:f7:
77:5d:22:d4:d8:36:f3:02:00:b5:48:76:c6:25:4f:e5:61:08:
25:2d:66:2e:e5:e1:b5:dc:86:6f:09:41:0a:77:00:cc:10:53:
7e:30:b0:ae:1a:13:37:8d:8f:13:10:5c:ec:34:6e:ea:a3:7d:
c1:b9:69:2a:60:6b:25:32:d0:41:b8:9e:43:45:33:b4:db:d0:
0d:7e:53:27:aa:c0:f3:25:11:7f:01:7f:c2:d8:f6:3b:0f:e2:
82:53:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:57 2025 by rpki-client