Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hiJOcFhCIaYVF0inXb0l1CLxcGQ.roa
File: hiJOcFhCIaYVF0inXb0l1CLxcGQ.roa (raw, json)
Hash identifier: 5nUJ64t28lMCeij3h6K4dFq44+k/EywK+QZ4CiuYCT0=
Subject key identifier: 86:22:4E:70:58:42:21:A6:15:17:48:A7:5D:BD:25:D4:22:F1:70:64
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A53DCFAAA04C5F00C220F87537528
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hiJOcFhCIaYVF0inXb0l1CLxcGQ.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1104
IP address blocks: 145.102.132.0/22 maxlen: 22
145.107.4.0/22 maxlen: 22
145.107.12.0/22 maxlen: 22
145.110.0.0/16 maxlen: 16
145.116.48.0/20 maxlen: 20
145.116.208.0/21 maxlen: 21
194.171.96.0/21 maxlen: 21
2001:610:120::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:53:dc:fa:aa:04:c5:f0:0c:22:0f:87:53:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86224e70584221a6151748a75dbd25d422f17064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:37:15:6a:2d:ea:7f:41:db:f6:0f:b1:2a:
51:10:96:e8:a6:52:5a:f4:f8:89:0f:d3:62:ca:2a:
48:b2:80:38:4f:e7:e2:f1:c1:e6:5a:73:c8:f0:c3:
05:a6:e6:b0:3b:9d:2a:a2:b7:8e:8b:03:4b:77:cb:
b3:70:6c:a5:cf:7d:34:d2:eb:d7:8f:3b:0a:c2:80:
e9:9d:2b:08:7f:d4:c7:03:03:88:59:e8:63:9f:2c:
0c:f4:aa:0e:ce:08:5d:0c:ae:4f:1f:9e:d6:dd:9f:
a1:0e:b2:f9:b3:58:1e:2e:9d:f0:42:6c:8d:8d:70:
ef:fe:e5:1b:3f:19:bb:67:79:48:70:44:26:4e:34:
39:03:d9:56:45:e0:34:2d:39:fa:39:5a:d0:db:9e:
ec:a1:70:0a:ae:c6:a5:79:84:b2:be:be:c9:de:df:
21:01:7f:68:22:81:bb:e4:ac:5c:30:95:b4:f6:3f:
aa:da:7a:2e:56:2d:10:57:41:db:49:1f:a2:31:54:
6c:a0:45:3f:fd:13:0d:10:4c:c2:81:5e:25:09:7b:
72:f0:22:6f:45:d8:5d:47:ec:ec:48:07:a0:0c:73:
a4:b9:95:1e:d8:7a:e8:68:1e:e2:03:c3:5e:88:6c:
bd:96:59:d2:e5:5e:09:f3:5b:e3:f6:2b:ae:fa:3b:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:4E:70:58:42:21:A6:15:17:48:A7:5D:BD:25:D4:22:F1:70:64
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hiJOcFhCIaYVF0inXb0l1CLxcGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.132.0/22
145.107.4.0/22
145.107.12.0/22
145.110.0.0/16
145.116.48.0/20
145.116.208.0/21
194.171.96.0/21
IPv6:
2001:610:120::/48
Signature Algorithm: sha256WithRSAEncryption
9c:ee:14:df:df:b6:17:2b:c7:f1:b8:be:7f:a8:e7:e6:51:5c:
40:f9:32:44:33:99:4f:82:03:ad:34:13:ae:7f:48:77:0b:32:
65:14:a2:a0:2f:a0:6b:24:76:bc:c9:cc:79:63:de:8e:3b:65:
5d:e3:98:b5:b8:55:a3:93:67:69:48:62:73:c4:f0:dd:cb:55:
d1:74:e2:e6:25:2c:6e:e1:41:c2:67:15:64:08:9a:17:f7:f3:
cf:ac:53:d2:80:e6:44:c4:56:79:9b:ec:2f:a4:3f:50:48:20:
3c:ae:51:c1:56:37:c3:f0:d3:65:f9:58:5b:0d:f3:e7:7c:c8:
ee:47:0d:bd:5c:36:26:9e:6e:f6:0c:b0:d5:60:15:8a:ee:0f:
50:35:4e:ee:4d:46:e6:c0:37:f0:db:e9:b6:9d:8e:89:ca:37:
41:3a:b1:8b:9b:8a:65:cf:07:21:b9:10:7b:d1:59:c8:58:ad:
29:03:51:80:3a:22:3d:ad:e0:b1:84:a4:8d:f2:b8:1b:4c:15:
e6:3a:5e:66:f9:8b:d8:5c:6d:9c:b0:cc:ff:6d:44:28:b8:82:
53:65:5a:e1:25:84:b2:a5:e5:01:c7:82:71:58:8c:b5:e8:b5:
db:79:30:fa:29:e7:dc:14:90:eb:e1:95:8c:49:65:ab:8a:85:
f3:9b:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:31 2025 by rpki-client