Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/HFXD-OKajKfSVzL1pC6BqRY1MMc.roa
File: HFXD-OKajKfSVzL1pC6BqRY1MMc.roa (raw, json)
Hash identifier: f0C4tABZkyFhe8eBbjlv8OIqTkIwicBAsp8PRiLS7ik=
Subject key identifier: 1C:55:C3:F8:E2:9A:8C:A7:D2:57:32:F5:A4:2E:81:A9:16:35:30:C7
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 01869732AA678EA28E22B75368EFC171DCBD
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/HFXD-OKajKfSVzL1pC6BqRY1MMc.roa
Signing time: Tue 28 Feb 2023 08:45:25 +0000
ROA not before: Tue 28 Feb 2023 08:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48362
IP address blocks: 45.152.52.0/22 maxlen: 24
185.31.212.0/22 maxlen: 22
185.252.36.0/22 maxlen: 22
94.199.168.0/21 maxlen: 21
91.195.116.0/23 maxlen: 24
2a02:1688::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:32:aa:67:8e:a2:8e:22:b7:53:68:ef:c1:71:dc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Feb 28 08:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c55c3f8e29a8ca7d25732f5a42e81a9163530c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:22:2b:e3:ad:8f:ba:38:34:0b:7c:a2:0d:
83:89:52:55:eb:ed:73:03:4b:74:e9:8d:58:cc:d0:
7a:67:aa:e5:0e:ab:d1:e1:5e:3f:0d:71:c9:d6:08:
74:c3:b5:e5:c1:aa:72:e6:a6:5f:e9:e5:76:8d:e7:
0e:c7:2a:87:5e:44:d4:c1:d2:e1:88:da:91:df:98:
7d:58:5a:ec:14:d9:fb:c8:a0:72:c2:95:a2:43:04:
c1:ba:55:52:45:ac:e1:04:05:83:31:2e:88:2c:eb:
d8:ca:2c:ab:7a:15:41:39:d5:34:0d:d7:7d:b4:e9:
6f:7c:1c:0b:f8:07:74:02:c3:18:1c:8f:e1:42:7c:
37:3f:0f:ae:c1:94:27:2c:5f:92:27:e5:a2:8b:e3:
df:7e:46:5d:8c:c2:f1:f3:98:79:93:f0:ac:56:4d:
47:da:8b:45:e3:41:20:49:44:3a:e4:7e:bd:d7:45:
cc:53:5d:58:d7:3a:41:70:f5:17:93:3c:02:5e:bb:
90:57:2f:94:5c:ec:6c:f9:48:02:14:9a:74:2c:af:
f3:7f:29:27:69:4c:3e:4e:f0:16:51:8c:14:49:37:
6b:d3:f6:90:19:9b:da:49:5d:76:43:bf:76:a1:b0:
80:f1:f8:34:fd:9f:d3:e0:bb:70:11:53:5e:09:e2:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:C3:F8:E2:9A:8C:A7:D2:57:32:F5:A4:2E:81:A9:16:35:30:C7
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/HFXD-OKajKfSVzL1pC6BqRY1MMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.52.0/22
91.195.116.0/23
94.199.168.0/21
185.31.212.0/22
185.252.36.0/22
IPv6:
2a02:1688::/32
Signature Algorithm: sha256WithRSAEncryption
13:de:8d:ea:ec:40:3f:a6:61:6b:f2:10:38:a4:d0:7b:3f:81:
67:2d:75:b8:b4:f6:fb:61:be:17:07:90:0f:c9:4b:da:65:c7:
d4:c7:8e:4d:38:a2:d8:ec:4c:1e:9f:ff:52:79:40:a1:66:8e:
f6:07:23:2d:d6:39:bf:b6:12:1d:0e:6d:d9:01:bb:2c:62:6a:
43:be:17:6a:7c:36:de:37:78:85:ea:f0:72:87:0c:f3:99:d5:
39:1e:9a:6c:5d:2e:46:20:3c:73:fe:d8:e4:6c:f4:81:40:2c:
56:cc:a2:f6:51:e4:d5:5d:1e:2c:90:d4:55:32:4e:fe:c7:1d:
55:90:b6:0d:00:08:56:ed:27:85:86:3d:1a:cf:8c:0f:9d:53:
9d:ca:18:49:47:11:19:d5:be:ab:22:bd:e8:cd:ae:42:15:73:
fb:9c:9e:18:65:b9:4c:e5:5a:21:0f:04:82:17:8f:5e:e9:d7:
c3:09:87:d2:2e:b0:2e:19:de:d7:bc:a3:03:d7:28:5a:b1:71:
09:85:43:4e:12:af:41:34:7f:fb:52:83:02:c1:60:2a:d4:a0:
79:a3:af:90:6d:2d:8a:72:f8:d2:11:ee:f7:08:fb:8b:47:5e:
11:46:b6:d2:61:ea:c9:1d:89:b8:6e:a3:cc:64:c2:8c:57:4c:
bd:ea:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:58 2025 by rpki-client