Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa
File: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (raw, json)
Hash identifier: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=
Subject key identifier: 1F:45:3E:2A:6D:EB:CF:F6:2D:89:D4:97:EF:10:1D:27:E0:3F:47:30
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019425FC9A27D9077840318A9B1D1FB90150
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa
Signing time: Thu 02 Jan 2025 07:48:19 +0000
ROA not before: Thu 02 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 185.82.216.0/22 maxlen: 22
195.123.224.0/21 maxlen: 21
217.12.202.0/23 maxlen: 23
2a02:27aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9a:27:d9:07:78:40:31:8a:9b:1d:1f:b9:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f453e2a6debcff62d89d497ef101d27e03f4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:6a:28:15:dd:83:e9:e2:c7:0c:4c:10:2f:
c9:60:0a:2e:64:ab:35:3b:36:84:04:d6:4e:d9:51:
0e:bc:d7:97:7d:50:30:50:2a:c1:b7:f4:8b:c6:8b:
9b:f6:78:ae:e3:26:c4:b4:a1:ab:6a:84:80:16:ff:
04:58:80:7a:94:49:4a:c0:2b:39:d7:82:92:54:4a:
1a:8b:c2:1f:b8:91:7d:db:9a:cc:59:e7:3e:da:94:
d3:0b:43:b4:0b:b1:93:09:9f:7f:1e:34:74:4a:8e:
08:9a:3f:63:5b:d5:7b:47:e2:f5:03:b5:b1:ea:9c:
7b:89:f9:01:32:f9:35:a4:86:c8:9d:e5:bd:fb:f3:
5e:cf:95:38:76:fd:d1:2e:03:01:77:db:b8:5b:dd:
58:d4:68:a9:51:12:e3:99:8f:03:cf:a8:86:cb:a8:
ca:d0:10:d4:96:e1:12:10:d5:fb:32:9d:73:21:fc:
64:47:09:e8:79:3f:d1:5b:08:c3:7b:88:47:45:fc:
d2:3d:ae:1d:77:be:52:14:11:d8:c7:97:30:c2:1c:
ac:1f:72:e4:c2:06:53:72:2c:8a:5b:a6:ea:d8:8b:
2d:b7:36:26:c4:1c:71:03:a0:d7:41:00:2d:2f:bf:
17:03:f3:6e:40:38:d9:19:cb:41:92:5e:73:d7:9a:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:45:3E:2A:6D:EB:CF:F6:2D:89:D4:97:EF:10:1D:27:E0:3F:47:30
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.216.0/22
195.123.224.0/21
217.12.202.0/23
IPv6:
2a02:27aa::/32
Signature Algorithm: sha256WithRSAEncryption
73:e3:07:a3:dd:ac:8d:bf:ba:93:4a:76:50:c4:72:14:93:9d:
16:8a:cb:97:bb:0d:01:f3:45:51:4d:1e:48:67:c9:74:f3:05:
06:40:23:58:08:fe:55:10:ec:62:1b:58:09:db:ae:24:bc:e4:
0b:70:a2:51:62:8d:b0:df:9b:5a:5a:c8:2d:13:68:c0:b0:2f:
7b:ea:88:59:bd:14:81:27:90:5a:9b:70:96:b4:de:25:4b:f0:
04:19:ad:8d:a7:2a:54:fd:9f:98:0b:dc:e9:74:03:71:b5:73:
fd:21:fb:9d:f9:72:20:68:07:f9:eb:a9:6a:e0:86:29:b9:a1:
5b:dc:63:bb:51:42:69:6a:bf:5f:c2:61:58:fd:8f:25:39:f2:
89:c4:11:3b:7f:51:4d:32:27:03:2a:35:5f:da:9c:14:45:6a:
76:d3:01:75:8a:fb:52:3d:13:0b:5b:61:20:a3:48:d0:54:15:
6a:db:2c:65:7c:f0:97:79:bc:e9:b6:26:3d:54:67:2c:bc:9b:
55:95:61:f9:ef:65:0f:b3:25:36:45:1c:dc:67:1b:c2:29:0b:
e8:c8:69:c4:f3:d7:39:a2:13:a9:e7:69:8b:d3:3a:5e:ae:5a:
29:f8:40:c9:37:7d:f8:82:cd:47:b1:89:1a:07:80:0d:55:7a:
f1:ef:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:22 2025 by rpki-client