Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HlL11xdtyh1eUKUIVFKbkBoDtUc.roa
File: HlL11xdtyh1eUKUIVFKbkBoDtUc.roa (raw, json)
Hash identifier: h6FeBhuXsfVOuaCCfIbgGddYg2CNvgRissdbbH7q5IA=
Subject key identifier: 1E:52:F5:D7:17:6D:CA:1D:5E:50:A5:08:54:52:9B:90:1A:03:B5:47
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019540BB5F41B67A4BC93ECD41C13EB5C662
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HlL11xdtyh1eUKUIVFKbkBoDtUc.roa
Signing time: Wed 26 Feb 2025 05:29:36 +0000
ROA not before: Wed 26 Feb 2025 05:29:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 5.253.38.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:bb:5f:41:b6:7a:4b:c9:3e:cd:41:c1:3e:b5:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 26 05:29:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e52f5d7176dca1d5e50a50854529b901a03b547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:99:9e:9f:cf:43:cb:50:0f:ce:35:f2:0c:
63:9e:ba:1f:50:29:7b:af:8b:9b:ea:f3:8c:d9:2c:
c3:47:bd:f1:d6:0e:94:25:23:96:93:88:54:89:1b:
6b:e2:18:93:b7:70:cc:01:42:9c:ad:ba:3a:a4:60:
4d:ea:37:18:f2:d5:55:31:82:bc:39:22:8b:91:6d:
f7:9b:53:48:a8:39:9e:ab:45:13:a4:cc:23:61:30:
43:73:02:c4:78:f8:f5:03:f6:68:16:28:c3:ae:b8:
44:af:15:e4:d2:5b:f9:65:ae:c9:dc:26:fa:a7:bf:
b3:63:12:cb:2d:7b:4e:44:54:30:91:01:bf:27:dd:
64:67:e0:30:8f:53:32:47:79:be:41:bd:c1:74:98:
ae:f1:e5:1b:4f:8c:88:c4:ce:01:04:5c:da:e8:54:
a0:00:59:58:96:67:b4:a7:7a:69:53:12:b9:8f:c9:
18:fc:c2:53:da:36:cd:46:9d:49:1b:d2:cc:cf:17:
0d:52:b7:cb:d2:0f:18:63:2f:e1:f3:c0:1d:9d:5c:
56:8f:36:15:18:c3:af:a6:72:5b:54:cf:5c:59:fa:
f6:81:2a:f4:c6:67:ee:b2:86:60:8e:9b:f2:30:57:
70:75:38:4b:71:f6:4b:01:99:f7:9d:13:29:14:a2:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:F5:D7:17:6D:CA:1D:5E:50:A5:08:54:52:9B:90:1A:03:B5:47
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HlL11xdtyh1eUKUIVFKbkBoDtUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.15.143.0/24
45.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:16:de:17:19:90:99:e3:8d:ab:a9:5f:d8:9f:93:b9:45:38:
9a:52:86:0f:2b:c9:80:8c:e1:a4:a2:79:e9:b4:ea:47:3c:09:
36:84:74:b5:1d:27:09:cc:c1:f4:fe:e4:cf:c5:d2:8e:4f:a3:
60:88:d3:b0:89:06:04:14:73:3c:85:1c:2d:a2:9a:c8:6e:3a:
1e:84:ff:c3:08:4b:57:89:6e:e3:1a:f9:9b:d3:94:40:3c:8b:
1a:2c:67:a4:c6:4b:2d:90:f1:3a:8f:97:1c:73:9b:be:49:af:
d3:0a:3a:3d:c3:bd:1c:b1:97:83:87:b7:8b:64:be:e4:2a:5d:
9c:05:b8:f2:f7:37:3c:82:4e:4e:3e:95:d2:41:b6:54:64:8c:
57:28:f2:47:16:74:a4:ed:ab:62:43:1f:38:91:7f:1d:90:83:
e3:91:1a:b6:ac:63:c1:8a:9a:20:da:07:db:ad:b6:76:9d:b6:
10:6a:01:46:3f:a5:f9:cf:06:14:ff:eb:0b:7f:06:0c:e4:79:
7a:0f:f4:da:b2:86:7c:9c:54:95:da:84:d5:28:b2:cd:22:4a:
f1:43:8c:43:4f:6e:84:e0:af:85:c0:f5:3c:83:ff:84:7d:83:
8a:b9:a7:a0:3d:74:b8:4e:0d:cd:32:db:cb:6d:10:a1:d8:ee:
b3:ca:79:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVAu19BtnpLyT7NQcE+tcZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMjI2MDUyOTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTUyZjVkNzE3NmRjYTFkNWU1MGE1MDg1NDUyOWI5MDFhMDNiNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+CZnp/PQ8tQD8418gxjnrofUCl7
r4ub6vOM2SzDR73x1g6UJSOWk4hUiRtr4hiTt3DMAUKcrbo6pGBN6jcY8tVVMYK8
OSKLkW33m1NIqDmeq0UTpMwjYTBDcwLEePj1A/ZoFijDrrhErxXk0lv5Za7J3Cb6
p7+zYxLLLXtORFQwkQG/J91kZ+Awj1MyR3m+Qb3BdJiu8eUbT4yIxM4BBFza6FSg
AFlYlme0p3ppUxK5j8kY/MJT2jbNRp1JG9LMzxcNUrfL0g8YYy/h88AdnVxWjzYV
GMOvpnJbVM9cWfr2gSr0xmfusoZgjpvyMFdwdThLcfZLAZn3nRMpFKKJ2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB5S9dcXbcodXlClCFRSm5AaA7VHMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSGxMMTF4ZHR5aDFlVUtVSVZGS2JrQm9EdFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0mAwQA
LQ+PAwQALVzDMA0GCSqGSIb3DQEBCwUAA4IBAQCoFt4XGZCZ442rqV/Yn5O5RTia
UoYPK8mAjOGkonnptOpHPAk2hHS1HScJzMH0/uTPxdKOT6NgiNOwiQYEFHM8hRwt
oprIbjoehP/DCEtXiW7jGvmb05RAPIsaLGekxkstkPE6j5ccc5u+Sa/TCjo9w70c
sZeDh7eLZL7kKl2cBbjy9zc8gk5OPpXSQbZUZIxXKPJHFnSk7atiQx84kX8dkIPj
kRq2rGPBipog2gfbrbZ2nbYQagFGP6X5zwYU/+sLfwYM5Hl6D/TasoZ8nFSV2oTV
KLLNIkrxQ4xDT26E4K+FwPU8g/+EfYOKuaegPXS4Tg3NMtvLbRCh2O6zynm5
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:13:07 2025 by rpki-client