Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hiYx9o80KLXgZfU0e1K35V9JU1A.roa
File: hiYx9o80KLXgZfU0e1K35V9JU1A.roa (raw, json)
Hash identifier: Bnjbi+w9mhxtj/BlovmLwXDDf1OaZoTjW/XMDG4jCCk=
Subject key identifier: 86:26:31:F6:8F:34:28:B5:E0:65:F5:34:7B:52:B7:E5:5F:49:53:50
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA32056774B22D23F54C4B7F93A0B35EC
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hiYx9o80KLXgZfU0e1K35V9JU1A.roa
Signing time: Tue 13 Feb 2024 15:40:21 +0000
ROA not before: Tue 13 Feb 2024 15:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.220.0/24 maxlen: 24
79.172.251.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
217.144.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:20:56:77:4b:22:d2:3f:54:c4:b7:f9:3a:0b:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 15:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=862631f68f3428b5e065f5347b52b7e55f495350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:48:42:a5:99:26:2b:41:32:73:37:39:3c:
7a:8b:29:1d:91:d4:02:39:fb:07:b8:4a:b0:35:e8:
f2:07:ea:54:7b:18:3c:5b:b0:b4:e6:29:74:2a:34:
ff:f8:72:43:94:90:ad:c1:8e:bf:62:f7:13:25:3b:
3c:59:13:fa:bd:12:3d:2e:1d:86:d8:4f:79:8f:d2:
82:df:e4:cc:67:88:bd:fc:9f:c3:52:a2:cb:90:3f:
14:a1:7c:21:21:dc:08:18:bb:e0:33:55:9e:49:39:
72:7f:51:c8:7f:69:78:28:4d:70:06:bc:56:4a:32:
ad:1e:c1:f9:80:8c:33:65:4b:07:a7:8e:6a:ae:e8:
fb:33:b2:0d:ee:f8:63:97:a5:ac:eb:49:57:7b:77:
97:40:6f:c1:7c:4f:67:e6:d2:2b:5d:cd:0b:47:de:
01:f7:5b:48:84:a4:13:33:95:b6:a9:47:e2:f7:73:
ac:c2:3b:cc:c2:b5:44:7b:51:b7:6e:0e:37:a0:7d:
f9:4a:60:da:7a:30:d9:b4:a4:f3:fd:16:a7:92:20:
b7:61:da:7d:14:63:d0:7f:4d:bc:2a:c7:4b:60:bf:
ec:fb:f9:26:08:c4:c5:cc:84:15:18:40:e9:ea:6a:
f6:51:0e:cd:c5:3c:2f:0c:97:66:80:d1:9a:67:bb:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:31:F6:8F:34:28:B5:E0:65:F5:34:7B:52:B7:E5:5F:49:53:50
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hiYx9o80KLXgZfU0e1K35V9JU1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.220.0/24
79.172.251.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.81.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.59.255
217.144.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:73:80:46:2d:28:8d:2b:7f:f1:4d:c1:64:2c:70:7c:1c:02:
b0:09:03:a9:90:3f:d4:b2:9e:a3:d5:f5:77:d9:03:cf:d3:b4:
30:d0:a6:16:0e:98:f5:fd:aa:1f:12:06:e5:3b:34:ec:be:0b:
43:0f:ae:eb:19:eb:37:69:c7:74:a8:9d:15:00:71:90:61:72:
e7:9a:73:32:cc:91:59:2c:60:99:bf:d2:93:48:61:16:23:94:
b0:4f:39:f8:8f:c4:d2:06:77:74:98:3a:06:91:ce:52:b4:0b:
4b:18:94:f0:fd:dc:d7:7c:bc:30:c5:bd:c1:24:15:15:df:3f:
d0:51:d7:71:6b:17:0c:ee:8f:cb:9a:fe:f5:5a:f1:b4:41:d8:
2b:72:83:3c:db:e0:58:5b:b8:b4:b7:ce:89:1e:9d:0d:9c:a0:
85:a1:a2:4b:c5:53:3d:23:ba:b9:5f:e6:57:2c:0a:ab:b9:22:
54:41:b1:9b:b1:b5:e1:90:72:54:c4:0f:a0:24:78:3d:b5:df:
e9:8a:9b:ef:0e:4e:47:88:78:ff:01:05:a8:ab:ed:f5:ed:5e:
a8:9f:7b:6e:d5:6f:01:c3:41:ff:45:e6:27:a9:18:05:75:16:
95:af:87:29:82:2d:17:57:a2:a0:2d:ca:7d:33:55:f2:5b:80:
c2:89:83:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:49 2025 by rpki-client