Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HLfw5LU9CiKABY7M6_pJHIZbTUo.roa
File: HLfw5LU9CiKABY7M6_pJHIZbTUo.roa (raw, json)
Hash identifier: AemKFVTLUxciXLej7Eg+tf9qt2FrxzO9sGiJ74bvtlc=
Subject key identifier: 1C:B7:F0:E4:B5:3D:0A:22:80:05:8E:CC:EB:FA:49:1C:86:5B:4D:4A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23D88F2DFFB5A09539D0D15425C89
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HLfw5LU9CiKABY7M6_pJHIZbTUo.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.32.0/22 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:88:f2:df:fb:5a:09:53:9d:0d:15:42:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cb7f0e4b53d0a2280058eccebfa491c865b4d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:ec:a7:5e:81:2f:34:21:0f:31:98:91:c8:
05:69:a2:4c:8f:58:f2:21:7c:06:9e:4b:32:12:8c:
c5:aa:fc:fb:3a:34:20:64:44:ef:8a:31:81:cf:8c:
9d:07:8a:e6:16:21:bb:04:f1:d6:7d:28:39:ce:85:
2e:13:41:52:4e:89:37:40:d4:07:0d:e5:0f:e9:13:
f3:1a:d1:f5:13:90:c2:7f:10:43:ef:81:73:6d:25:
58:0f:f2:90:ef:c8:3e:57:64:98:b9:80:ce:35:56:
da:d0:f3:74:6b:f6:d6:5b:cd:2a:d6:db:85:c9:ab:
10:e9:73:9e:2c:63:4e:8f:db:da:58:f8:e1:55:fe:
bb:65:e3:24:8a:2c:61:e5:ab:65:fa:b7:24:b6:46:
97:11:f0:10:3a:50:e8:f6:d6:e8:8c:d5:04:1b:21:
38:a6:e5:96:11:44:f7:2f:ad:51:d8:11:c3:89:26:
11:e9:1c:a6:c6:10:4c:9a:a1:62:8c:4d:0d:3c:bb:
1c:4a:8b:13:44:58:ac:c7:e4:26:1b:ae:05:d0:de:
36:5e:76:db:64:5e:0c:8e:3a:b8:a6:8e:c2:77:38:
97:cf:64:7d:24:6c:37:c3:92:dc:30:c1:2c:21:09:
88:8e:df:7f:ef:28:95:f9:6a:64:fa:9c:67:2e:c5:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:F0:E4:B5:3D:0A:22:80:05:8E:CC:EB:FA:49:1C:86:5B:4D:4A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HLfw5LU9CiKABY7M6_pJHIZbTUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.203.0/24
45.8.255.0-45.9.1.255
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:95:aa:bc:89:21:92:d4:d4:6a:ca:72:d9:05:a0:f5:e6:6d:
ee:ad:c0:b8:65:39:80:50:18:7c:fb:b5:92:bb:2a:84:7e:49:
b7:d2:d8:41:fc:c3:21:3a:5e:24:1d:00:69:76:3d:f1:75:2b:
5f:30:ea:b7:4b:b8:c8:5c:3d:f9:d9:9a:1f:20:2e:12:7f:7d:
9e:8b:ac:2b:70:1f:26:d3:32:89:d5:f3:2f:d7:f5:47:bb:1b:
3b:ef:ce:79:0c:c7:b4:23:1e:8d:77:24:9f:d8:93:3d:9a:d7:
cc:fa:02:f6:67:d0:d2:93:a4:02:70:24:7b:87:50:76:9a:11:
18:0b:cb:e9:c0:76:26:e2:64:96:c2:31:5e:54:2b:f8:8b:12:
de:94:ca:6f:4c:34:6c:ac:52:21:5f:f3:a3:47:81:06:03:a6:
9d:49:58:ca:d5:14:b6:f0:3a:88:03:9d:f9:4d:f7:11:56:b4:
0c:c3:4b:0a:c4:35:4e:64:56:c0:28:8c:f2:f2:cf:13:a9:2e:
ad:2c:3b:4c:ea:ed:d5:81:36:fc:47:49:99:ef:36:68:e6:93:
be:14:50:bf:25:32:9d:af:d1:fb:c5:3e:cb:83:48:e9:98:c7:
65:ba:a5:b3:50:d4:9d:f1:41:d8:ab:02:88:55:7e:b6:07:10:
7e:86:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:35 2025 by rpki-client