Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Hv4o6o-Fse7yYv1GWGOAcbfd5yQ.roa
File: Hv4o6o-Fse7yYv1GWGOAcbfd5yQ.roa (raw, json)
Hash identifier: tvW5+QsOfCt6ce0+pXUMMU9rLOBvkhv0LLmi1i/gUFg=
Subject key identifier: 1E:FE:28:EA:8F:85:B1:EE:F2:62:FD:46:58:63:80:71:B7:DD:E7:24
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019598CD5AE1DC4A58E694FCA87D5193F29C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Hv4o6o-Fse7yYv1GWGOAcbfd5yQ.roa
Signing time: Sat 15 Mar 2025 07:55:49 +0000
ROA not before: Sat 15 Mar 2025 07:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29262
IP address blocks: 46.29.26.0/24 maxlen: 24
46.29.27.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:cd:5a:e1:dc:4a:58:e6:94:fc:a8:7d:51:93:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 15 07:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1efe28ea8f85b1eef262fd4658638071b7dde724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:e8:a1:e8:a2:48:fb:24:cf:01:0c:cb:a6:
39:f8:a7:c8:d0:1c:1b:44:df:ca:c1:a5:47:3c:45:
52:a5:f0:02:55:c3:9b:66:88:54:03:2b:cc:c9:3f:
3e:74:56:b0:49:86:ce:be:31:2e:1b:c3:bb:c3:d9:
55:40:6a:3c:c6:71:6a:a6:05:57:ef:d7:86:fc:b8:
48:2e:c8:70:57:ff:f2:9c:c5:8f:c4:1f:35:5a:8c:
6f:ee:14:25:79:d7:c8:5f:e7:c1:7b:05:67:28:30:
3d:a4:91:ae:bb:ed:61:2c:e8:44:51:e2:e7:a0:38:
99:13:66:67:3b:5f:93:b3:3e:e4:4b:9d:42:49:d1:
d0:54:68:61:3e:7e:18:8e:26:f0:9d:ab:06:a6:13:
0b:ed:56:25:7b:e5:85:60:6a:87:c7:84:36:3f:c9:
de:69:80:f6:12:ed:3c:90:4c:7b:35:d9:1e:4e:8f:
cc:ef:b4:05:8f:b5:55:a8:aa:47:63:ab:aa:69:43:
57:a5:63:7c:93:54:df:1c:04:45:fd:69:5e:5c:1b:
e2:bd:fb:82:91:9c:05:be:d5:00:ab:87:28:8d:18:
8f:7c:35:67:74:df:fa:ba:20:d4:d4:15:6e:4d:04:
da:54:39:d1:5c:5c:14:b6:12:d0:79:b0:81:42:35:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:28:EA:8F:85:B1:EE:F2:62:FD:46:58:63:80:71:B7:DD:E7:24
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Hv4o6o-Fse7yYv1GWGOAcbfd5yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/23
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:63:8f:81:95:0a:c7:df:ff:fa:7b:fc:e1:70:c8:b3:d6:05:
41:31:9a:d9:d3:70:7c:ac:69:6d:a7:3e:c9:c1:02:90:c0:05:
cb:00:41:e0:32:0f:33:36:a2:c5:82:e3:bc:48:54:01:67:1e:
22:7e:24:9e:59:2a:94:84:ac:71:4b:c5:f2:09:bd:93:3a:01:
05:6a:fa:8e:52:52:f9:15:a5:3a:68:72:dc:11:a2:10:49:b1:
e1:71:4f:c3:67:e1:de:2a:93:15:1a:08:13:df:dd:17:92:08:
34:02:f0:72:c4:5e:25:a5:19:d2:25:35:10:3a:f8:13:ba:87:
3c:8c:87:ac:a9:dd:24:22:43:fd:1b:4b:49:cc:32:41:1d:b1:
db:89:1f:65:01:e1:f1:60:4d:65:40:d1:78:8d:a2:37:0c:7c:
8b:1c:15:48:20:97:3a:0e:38:c6:f1:eb:f5:ef:ac:fb:16:24:
07:83:9d:bb:2b:ea:68:ef:10:08:33:0d:e5:bc:c9:d1:3d:08:
0b:5a:51:41:56:45:3a:fb:ca:cb:bc:a9:c1:92:c3:0e:19:6b:
c1:8e:0e:7f:18:80:45:1c:ab:0d:2e:05:a1:5d:3a:13:33:19:
03:e0:a6:28:c0:4e:1f:e7:cb:92:c2:98:bc:91:95:d4:a7:c5:
2a:a5:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:07 2025 by rpki-client