Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HrLEOQqegl9qQrTwIQbj7qaI3xg.roa
File: HrLEOQqegl9qQrTwIQbj7qaI3xg.roa (raw, json)
Hash identifier: HV/U/uo1Z/Cd2Wo4F3IgPFOrHR6Ex8OJbgQ8EQ6igL4=
Subject key identifier: 1E:B2:C4:39:0A:9E:82:5F:6A:42:B4:F0:21:06:E3:EE:A6:88:DF:18
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0186A93A615D63653FDFAF19503FD2FE03C7
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HrLEOQqegl9qQrTwIQbj7qaI3xg.roa
Signing time: Fri 03 Mar 2023 20:47:00 +0000
ROA not before: Fri 03 Mar 2023 20:47:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.231.104.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
37.251.200.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:3a:61:5d:63:65:3f:df:af:19:50:3f:d2:fe:03:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 3 20:47:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eb2c4390a9e825f6a42b4f02106e3eea688df18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:ec:65:d0:f8:63:97:a0:1a:49:51:fe:a2:
d8:5f:ff:1c:50:1b:66:7e:b6:1f:d8:bf:86:1e:7f:
67:7b:90:67:28:4d:cf:ba:58:13:02:0d:16:3e:a8:
ed:a1:54:dd:d0:cb:dd:e6:9e:1b:12:54:9f:e3:4e:
05:f2:64:4f:ca:85:51:63:4f:b5:95:ad:da:04:85:
72:91:a4:44:46:49:d1:0a:3a:c1:fd:ab:00:78:6b:
fa:f1:5d:51:e1:2a:ea:90:6e:24:55:09:17:68:4f:
13:26:ed:8c:08:e7:14:e3:a2:a5:1a:94:73:35:13:
bd:ba:0c:cc:9b:0b:a5:d9:5b:31:97:47:d0:43:57:
c8:bf:78:18:e8:96:54:e7:d2:01:08:7e:9d:58:57:
07:8b:21:9e:48:e6:37:4e:66:fe:88:89:fd:ab:39:
6d:3d:1d:7b:4f:f9:8c:15:b1:af:35:c4:1f:82:b1:
43:15:66:b5:b9:04:32:76:11:53:5f:d4:67:cc:31:
f9:ab:4e:d3:88:6c:58:2a:54:6f:54:86:37:f6:0f:
29:a1:96:14:31:30:20:b3:e8:67:79:c0:fc:12:c0:
4f:6c:0c:6b:30:35:50:3c:53:ac:43:31:27:00:57:
da:5a:1e:a8:f6:67:bb:a6:9e:95:76:4f:69:4a:da:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:C4:39:0A:9E:82:5F:6A:42:B4:F0:21:06:E3:EE:A6:88:DF:18
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HrLEOQqegl9qQrTwIQbj7qaI3xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.200.0/21
37.251.240.0/21
46.231.104.0/21
94.26.24.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
39:c2:fc:7b:b8:d0:cd:1d:c9:8d:45:35:12:67:6f:a9:72:aa:
e0:ec:ac:21:92:27:42:56:6d:58:b5:60:55:60:6d:d1:c3:fb:
93:d1:25:53:1b:d2:68:b0:29:30:fd:25:5e:2c:1f:78:83:b8:
7f:9c:5e:9a:50:aa:0a:4c:91:ed:b5:59:fd:e4:f6:08:c6:55:
a8:06:10:d5:80:31:20:41:5c:82:05:b9:b2:60:ad:db:2a:5d:
a0:9b:35:dc:25:db:cf:67:4b:bf:11:59:0e:59:a8:9a:43:ae:
99:88:9a:42:90:ba:3a:1a:70:63:fd:67:72:0f:0b:f3:69:74:
02:a5:b7:ae:90:b9:aa:19:72:73:48:4c:67:fe:12:e8:88:c7:
1e:24:38:3e:d6:5d:05:a8:52:85:fe:61:8d:af:83:93:95:5b:
b1:a8:e3:48:2e:f6:48:4d:89:47:98:bf:66:23:eb:0a:37:5a:
2f:e6:9b:34:15:ed:45:07:01:09:d0:50:29:5f:20:ab:67:c5:
02:e1:81:8b:7f:1e:b1:75:9b:f6:d2:24:4f:12:c4:f8:5a:98:
83:d7:3b:47:49:62:17:15:2a:e7:ee:e4:ff:9a:8d:63:9f:b9:
d9:54:01:f3:ac:5d:3e:42:3f:45:8e:13:9a:13:5a:09:85:48:
fb:cc:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:44:58 2025 by rpki-client