Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/HIDgrdHX_QU-bGXtDjZHW_ouIno.roa
File: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (raw, json)
Hash identifier: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=
Subject key identifier: 1C:80:E0:AD:D1:D7:FD:05:3E:6C:65:ED:0E:36:47:5B:FA:2E:22:7A
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 01958969D6DFD77C2BD31E873E9427E99CEB
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/HIDgrdHX_QU-bGXtDjZHW_ouIno.roa
Signing time: Wed 12 Mar 2025 08:12:49 +0000
ROA not before: Wed 12 Mar 2025 08:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3342
IP address blocks: 92.241.192.0/20 maxlen: 20
92.241.216.0/21 maxlen: 21
157.250.160.0/20 maxlen: 20
178.72.16.0/21 maxlen: 21
185.98.96.0/22 maxlen: 22
185.157.132.0/22 maxlen: 22
185.170.132.0/22 maxlen: 22
212.237.250.0/23 maxlen: 23
217.61.250.0/23 maxlen: 23
2a06:b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:69:d6:df:d7:7c:2b:d3:1e:87:3e:94:27:e9:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Mar 12 08:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c80e0add1d7fd053e6c65ed0e36475bfa2e227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:e9:b3:26:31:6a:ab:b8:c6:74:f1:61:91:
9a:84:97:32:e0:a2:8b:63:b1:f8:ac:4c:bf:20:01:
83:67:e4:fb:23:5d:15:9e:ef:40:16:6d:37:a6:62:
ba:8e:10:12:02:10:df:8d:20:df:ba:7b:04:1b:c4:
6d:bf:ca:d6:df:80:b1:7e:3b:0b:97:94:94:16:fe:
92:7e:fc:8b:82:87:11:73:6b:0b:4c:f0:0d:e3:94:
6e:a7:79:bf:7b:c0:5a:08:54:f0:fe:cb:5e:7e:97:
84:f2:38:18:f3:31:ff:f4:f3:e5:a4:72:72:b7:b4:
4b:28:df:ff:cb:2e:d9:c5:70:cb:91:4a:d9:b4:a4:
47:6f:fc:7b:76:0c:41:87:b1:90:c9:78:8a:00:5a:
f9:3d:e2:c0:e3:b4:48:28:ac:b5:84:93:ae:5f:ab:
b7:5b:7e:9e:db:16:ca:66:24:e5:74:79:32:d0:2c:
4c:c3:a4:31:15:ac:36:a0:65:da:36:91:55:f4:7a:
2c:d4:ee:61:20:e1:6c:a5:35:8d:c4:93:5c:72:7d:
d9:bc:e1:48:80:67:36:b6:1a:6a:7c:bc:3c:1a:35:
1f:1f:f3:d4:22:58:96:a6:1f:75:e9:19:e6:60:90:
d8:71:7e:ce:d0:ef:6c:6a:51:7c:87:1f:38:aa:75:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:E0:AD:D1:D7:FD:05:3E:6C:65:ED:0E:36:47:5B:FA:2E:22:7A
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/HIDgrdHX_QU-bGXtDjZHW_ouIno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.192.0/20
92.241.216.0/21
157.250.160.0/20
178.72.16.0/21
185.98.96.0/22
185.157.132.0/22
185.170.132.0/22
212.237.250.0/23
217.61.250.0/23
IPv6:
2a06:b00::/29
Signature Algorithm: sha256WithRSAEncryption
2f:43:37:15:47:11:21:72:ca:36:5d:8d:a5:8c:ec:b9:73:3a:
18:d4:2c:0d:0f:16:33:d1:86:97:2e:28:9f:8c:33:7d:da:89:
46:96:8a:e7:5a:66:bb:c5:51:e3:f3:ae:fa:f9:2e:8e:94:bc:
bd:3c:25:5c:79:a7:99:57:ff:5f:93:71:ba:67:74:96:0e:07:
ad:db:ca:4b:c0:d0:d9:db:eb:20:ef:74:d9:be:86:f4:e2:13:
59:3c:d1:1c:2d:2e:86:e3:a9:ee:55:13:fc:2e:56:9d:6d:b9:
af:a8:f1:32:ea:95:25:4b:39:e1:39:d5:54:2e:47:6f:82:87:
9e:19:fb:24:74:b4:b2:56:d1:91:b0:73:76:a3:40:05:1a:56:
84:56:e3:f4:fb:62:81:94:3d:25:f6:d3:cc:d2:e7:e6:85:e5:
72:56:ca:0b:53:d7:0e:e9:3b:26:03:ae:ae:10:3d:ff:7d:3f:
b3:75:52:d7:ee:61:a5:91:de:37:e7:26:95:99:18:56:db:17:
b9:b1:2b:bc:fa:8a:07:c2:e0:89:02:4f:f6:9d:ee:bd:3a:ff:
61:18:0c:00:e9:92:8d:e2:16:93:e8:78:b9:b9:dc:ba:92:e3:
aa:75:84:ec:a1:20:4e:6e:31:27:32:8a:5a:e3:c1:de:44:bb:
01:57:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:25 2025 by rpki-client