Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HGbNyad1V-GHMmAWOdtjFiH4ndg.roa
File: HGbNyad1V-GHMmAWOdtjFiH4ndg.roa (raw, json)
Hash identifier: xRFWZuCHdt+yqUZwqIpLqRIblGm60IKMgXSwaR63Ah8=
Subject key identifier: 1C:66:CD:C9:A7:75:57:E1:87:32:60:16:39:DB:63:16:21:F8:9D:D8
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01953C708E91512A3F2864860A363962BF15
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HGbNyad1V-GHMmAWOdtjFiH4ndg.roa
Signing time: Tue 25 Feb 2025 09:29:24 +0000
ROA not before: Tue 25 Feb 2025 09:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 45.139.179.0/24 maxlen: 24
85.8.185.0/24 maxlen: 24
185.184.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:70:8e:91:51:2a:3f:28:64:86:0a:36:39:62:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Feb 25 09:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c66cdc9a77557e18732601639db631621f89dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:81:41:8b:19:c9:c5:37:25:1b:a3:c1:2e:
40:be:65:25:dd:da:78:2f:26:ed:51:d5:7a:ba:71:
ba:f2:fa:13:e8:28:f0:69:ee:c7:44:93:7a:de:ac:
17:41:5f:0e:b1:80:20:40:ba:7f:8f:ea:67:f3:b2:
7b:5e:f9:23:fa:21:f1:29:c8:76:a8:ef:95:15:ac:
f7:f6:6a:b2:95:72:b0:4b:b3:7a:48:cf:50:0c:2a:
d4:60:49:7e:e1:aa:6d:0f:06:19:3a:5c:0f:e1:b3:
a7:8a:8b:f2:54:2d:97:f4:5f:3d:d4:d1:d4:ae:5c:
69:61:ad:ef:e9:8b:9e:ec:ad:b2:99:53:35:a4:a3:
d4:82:7b:4a:8c:e9:14:ba:61:70:df:32:8e:8d:20:
c0:50:39:19:96:61:30:fb:ca:bf:f7:05:c8:6c:e6:
78:fa:a5:90:76:b6:48:fa:d4:10:0f:b0:f9:45:3a:
98:28:20:e5:90:25:3d:89:dd:8e:cd:ae:36:aa:1b:
40:93:cc:65:fc:40:56:40:97:5b:e8:05:e2:3d:f8:
93:43:21:db:ad:88:98:bf:8e:5e:94:76:ec:12:72:
cb:c2:b7:e9:11:8b:0e:b1:a5:f4:a3:67:71:e5:15:
92:83:76:73:f6:13:61:fe:ab:17:1d:87:f8:92:14:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:66:CD:C9:A7:75:57:E1:87:32:60:16:39:DB:63:16:21:F8:9D:D8
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/HGbNyad1V-GHMmAWOdtjFiH4ndg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.179.0/24
85.8.185.0/24
185.184.53.0/24
Signature Algorithm: sha256WithRSAEncryption
25:91:36:0d:c9:f8:52:01:1e:33:78:42:3e:61:dd:71:2b:8c:
71:07:5a:c6:97:18:45:fe:9d:ee:ee:9d:0a:5c:9a:c8:a1:8e:
f3:af:35:01:3b:97:81:a7:58:50:c4:56:58:6a:db:04:16:c2:
bf:97:99:fd:36:13:b9:03:74:72:d1:62:52:0c:68:04:ae:48:
b0:00:a3:ed:fd:fc:2a:a9:77:49:a1:21:e6:2c:b8:f6:c9:2d:
10:c5:34:6e:25:6c:f0:34:72:a0:58:6f:8c:68:a0:d2:43:2e:
4a:af:b1:5d:ff:05:89:e3:33:b9:28:4c:13:6f:49:4b:97:31:
b3:ca:3d:f1:7c:44:60:1d:7f:e8:ee:e5:60:74:94:a1:fd:70:
53:3b:f6:fa:d2:f6:38:47:60:22:ed:ca:64:f6:3c:b0:e1:18:
19:a8:4b:2d:a0:e3:9b:74:60:14:17:a5:f4:30:1d:d1:85:97:
78:2e:58:79:1a:57:90:3e:f4:3d:6f:23:24:8c:71:57:6c:4c:
d0:70:2a:de:53:13:87:63:9a:f7:ea:98:02:9b:b7:d7:d3:73:
66:a8:68:93:eb:f3:27:1b:e0:0d:69:5f:66:c3:22:ed:8c:ea:
af:ac:b6:0e:31:56:0e:0d:c6:04:33:60:61:6a:84:11:df:87:
69:3b:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:19 2025 by rpki-client