Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HPF3np-IWjQJxuB1DdapH_HvmIg.roa
File: HPF3np-IWjQJxuB1DdapH_HvmIg.roa (raw, json)
Hash identifier: nbpo8p4b1CWWrVW6DgzWhvlvLbZTKZo9ZFMTPhx9W2M=
Subject key identifier: 1C:F1:77:9E:9F:88:5A:34:09:C6:E0:75:0D:D6:A9:1F:F1:EF:98:88
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0186CD5A4F2A80129FC71A11B9F9E46767A0
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HPF3np-IWjQJxuB1DdapH_HvmIg.roa
Signing time: Fri 10 Mar 2023 21:08:13 +0000
ROA not before: Fri 10 Mar 2023 21:08:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:5a:4f:2a:80:12:9f:c7:1a:11:b9:f9:e4:67:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 10 21:08:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf1779e9f885a3409c6e0750dd6a91ff1ef9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:af:58:9d:c3:0c:03:a0:f0:d4:7b:51:77:
40:0a:61:87:09:34:11:a2:07:2b:24:3f:31:1f:63:
46:0f:19:b2:75:d0:80:63:2f:8e:61:67:00:11:25:
97:f6:6d:8c:ea:bf:2d:e9:84:2d:40:8c:5d:d0:ca:
c8:e7:48:29:c3:8f:84:39:cf:1d:aa:c2:1c:07:97:
6a:af:54:1d:67:b0:8b:4b:27:db:2f:85:e6:54:e3:
d3:b2:ef:d5:54:ee:f9:d5:0c:f3:e1:37:c9:25:eb:
7e:5c:be:cb:66:d2:08:50:c1:86:e0:16:c5:c0:b5:
dc:63:4b:6d:e4:2f:64:2e:d2:9a:44:fa:95:24:fe:
ae:23:91:31:b1:3b:2d:c3:7b:b7:78:a1:cb:f2:1d:
34:af:2a:ee:01:14:80:ed:35:c4:7b:9f:46:35:b1:
47:0b:00:54:06:10:a2:4f:d6:92:e6:7a:f7:47:7b:
ae:d0:33:4b:0b:f0:7b:2e:f2:49:df:e5:34:ab:1f:
fa:0e:52:08:7c:79:7f:5b:78:9a:78:36:4f:7a:51:
3a:fc:f9:1f:3b:05:af:e3:88:d9:e3:13:71:3b:bc:
87:a5:a0:33:ea:e4:39:c6:3f:e0:bf:00:97:c0:1f:
9a:46:6c:65:78:4e:11:99:95:a9:ff:89:3c:dc:0e:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:77:9E:9F:88:5A:34:09:C6:E0:75:0D:D6:A9:1F:F1:EF:98:88
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HPF3np-IWjQJxuB1DdapH_HvmIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
37.251.240.0/21
46.231.104.0/21
88.135.96.0/20
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:f6:73:eb:12:7f:68:19:f9:48:18:55:f8:1b:00:55:73:de:
fc:2f:e6:4c:bc:e8:9b:69:0d:46:d1:6d:96:08:67:d5:31:74:
00:54:d3:e0:7e:d3:e1:29:84:4f:4c:e1:cd:1c:8a:3e:b8:b2:
ab:03:8c:62:e2:53:c9:6b:81:cc:ea:ff:0b:51:26:18:bc:3a:
4d:04:58:87:56:ec:85:c1:c8:18:e2:95:b5:e1:2d:aa:18:84:
9a:a9:0f:61:11:79:2a:a8:b7:57:3c:a0:d5:c3:9b:97:ad:dc:
64:69:31:80:40:00:98:50:c8:30:7c:f0:ea:88:76:34:41:73:
73:4d:c8:8a:01:1f:42:c0:e2:1e:33:11:3b:0c:81:53:27:5a:
dd:1f:32:4d:c6:cc:fa:26:c2:75:0b:df:0a:ff:46:63:cd:3c:
c1:4d:d6:f2:63:ec:87:6e:f6:a4:4a:d1:03:20:b7:95:83:19:
cc:0f:11:5a:7f:11:c3:7b:42:f3:e4:2b:09:2f:ca:e9:f0:b7:
bc:a4:85:2b:94:68:12:f9:99:e6:60:fa:ca:d7:d3:a4:bc:83:
b6:7b:66:27:24:f5:54:03:54:fd:66:09:d7:26:40:83:2f:32:
20:77:ed:76:c8:ca:90:0d:d1:85:57:1c:e1:41:80:79:e7:68:
f5:0c:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:05:54 2025 by rpki-client