Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/hyQNNpjW95By6SH0X4WUwzxeoxY.roa
File: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (raw, json)
Hash identifier: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=
Subject key identifier: 87:24:0D:36:98:D6:F7:90:72:E9:21:F4:5F:85:94:C3:3C:5E:A3:16
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019422FC368A0132197BD21633501802F980
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/hyQNNpjW95By6SH0X4WUwzxeoxY.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25534
IP address blocks: 185.146.16.0/22 maxlen: 24
185.146.16.0/23 maxlen: 24
217.15.176.0/20 maxlen: 24
217.15.176.0/22 maxlen: 24
217.15.180.0/22 maxlen: 24
217.15.184.0/22 maxlen: 24
217.15.188.0/22 maxlen: 24
2a00:1a08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:36:8a:01:32:19:7b:d2:16:33:50:18:02:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87240d3698d6f79072e921f45f8594c33c5ea316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:58:c2:a6:22:05:35:86:71:b7:88:7f:14:
41:3f:13:d1:0c:01:27:62:01:71:f4:d4:15:75:8c:
64:ba:ab:60:09:c5:eb:2d:75:7e:2b:8c:19:39:66:
00:cd:4e:e4:fc:0b:06:06:1c:51:fc:74:0e:97:95:
84:3a:9e:96:dd:38:79:a7:75:22:1a:0c:2f:aa:58:
e3:6c:7d:d5:06:a7:f2:1c:9f:99:5e:4f:68:b2:bf:
bc:bd:10:09:54:9e:38:38:6c:d1:be:06:8c:e3:44:
72:10:5e:44:87:f8:74:72:c4:d3:09:7e:3e:88:bf:
7b:8e:62:b2:89:c9:7a:a0:7f:82:03:58:e6:36:0f:
b0:bf:2a:03:0e:64:b7:3e:e0:10:56:19:13:88:a6:
03:97:47:c0:a0:3b:4c:78:e0:f4:68:1b:88:8f:0b:
ec:63:3a:2d:6e:c1:66:bc:d7:a2:28:44:76:f4:b2:
7b:97:cb:94:db:34:46:74:da:58:db:3c:8b:3b:ed:
58:a1:bf:0d:77:d9:fd:5e:2d:6f:69:b9:d8:a7:ec:
22:50:94:16:02:9f:5e:1a:ae:55:72:77:95:a3:cb:
61:4e:fc:79:f4:dc:ef:db:3d:e2:67:ab:6d:46:08:
c7:22:22:4d:ae:c5:72:33:d0:68:30:78:29:76:aa:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:0D:36:98:D6:F7:90:72:E9:21:F4:5F:85:94:C3:3C:5E:A3:16
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/hyQNNpjW95By6SH0X4WUwzxeoxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.16.0/22
217.15.176.0/20
IPv6:
2a00:1a08::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d9:fe:a4:cd:1c:bd:e0:55:b9:28:77:59:33:88:a4:44:af:
a2:ae:14:93:4b:fa:cd:37:6a:85:5c:21:34:0b:42:1a:c0:a3:
18:94:6d:52:49:5f:ba:44:ea:4a:5b:60:b0:cc:9b:47:bd:02:
56:15:39:68:18:ee:cb:ee:90:d2:7d:06:ac:a4:2a:c6:5c:03:
98:99:5a:64:f1:ea:5e:5b:82:64:1b:7d:aa:7c:e1:85:ad:9b:
47:5e:03:e9:f8:08:31:f7:e6:62:74:8e:fe:fa:72:c8:27:62:
4b:d5:86:0a:d2:51:9e:7d:fb:4a:4f:61:90:d8:4d:f7:46:e9:
af:88:ca:3b:10:d4:92:69:2d:c4:28:11:8e:73:a4:70:45:54:
85:92:a5:16:a7:4c:2f:e1:21:2f:d7:bd:8c:33:4a:0e:29:06:
ab:5c:24:c9:17:3e:04:de:d5:0d:d9:f5:55:a4:b3:32:6a:b7:
68:4e:89:e8:18:b8:54:f8:35:07:70:f3:9b:a8:22:38:48:d8:
fe:49:c4:fb:65:53:31:5e:32:3c:bc:f1:17:7f:e5:16:45:de:
66:07:a3:20:3c:a2:0c:65:c1:58:32:14:d1:44:4f:9d:e8:cd:
00:51:65:6c:72:a8:80:be:7a:5b:91:4a:3c:50:ce:d5:3c:02:
4b:f7:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:24 2025 by rpki-client