Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/H57NiATge4ZhmPBN_965_8VMs0k.roa
File: H57NiATge4ZhmPBN_965_8VMs0k.roa (raw, json)
Hash identifier: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=
Subject key identifier: 1F:9E:CD:88:04:E0:7B:86:61:98:F0:4D:FF:DE:B9:FF:C5:4C:B3:49
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 019424456C0919FE57DFFF8F40DBBCAEE686
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/H57NiATge4ZhmPBN_965_8VMs0k.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25433
IP address blocks: 94.232.160.0/21 maxlen: 21
185.197.80.0/22 maxlen: 22
2a0a:7840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6c:09:19:fe:57:df:ff:8f:40:db:bc:ae:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9ecd8804e07b866198f04dffdeb9ffc54cb349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:52:ac:a2:75:74:91:76:f9:d6:57:0f:16:
d6:9a:c1:90:1b:91:17:97:94:3c:c5:46:17:18:d1:
57:2c:dd:b2:e0:fa:81:17:5a:69:db:4e:3b:45:3d:
7d:71:6c:6e:9d:21:3f:26:ff:e7:7b:61:8a:0e:ab:
3f:45:39:d8:26:6a:31:0d:cf:75:36:0b:e5:0b:17:
fa:bf:2d:c4:6d:f6:be:e2:1d:10:c5:a9:47:28:30:
fb:3f:9c:b5:7f:82:1b:6d:d4:5f:6c:ec:cb:5f:ac:
f3:69:44:63:95:f2:94:a1:c2:76:eb:41:12:72:fb:
7f:09:3d:40:88:91:73:d7:87:7a:1d:bc:94:45:7d:
fa:6a:3a:d6:5c:72:60:0a:66:d3:a8:99:74:00:cb:
f0:86:ed:41:c5:21:1a:f0:c4:0a:00:5d:2d:34:3c:
05:1e:67:d7:ce:aa:80:50:d5:49:88:82:03:f6:5e:
b9:b4:d0:e6:45:30:8c:20:3b:19:ef:45:e9:54:b9:
33:67:16:04:1b:47:42:8d:16:bd:e7:92:15:bd:d8:
fc:12:e5:65:85:1f:e0:7a:37:fc:ff:54:ab:8a:c5:
85:2b:5e:67:8e:97:0a:45:e2:78:f9:d4:61:ea:44:
bb:16:59:a2:be:a0:05:b8:91:82:00:04:ce:69:ef:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:CD:88:04:E0:7B:86:61:98:F0:4D:FF:DE:B9:FF:C5:4C:B3:49
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/H57NiATge4ZhmPBN_965_8VMs0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.160.0/21
185.197.80.0/22
IPv6:
2a0a:7840::/29
Signature Algorithm: sha256WithRSAEncryption
5b:51:78:a4:83:e2:67:75:59:11:6d:3b:a6:26:58:8b:b4:b8:
c0:89:10:b5:9f:92:1d:61:ca:5f:49:cf:2a:4b:eb:ff:28:46:
60:b3:c6:99:0d:46:05:96:99:47:8c:f2:be:cf:15:a0:ca:4e:
d1:cb:1c:76:ef:41:23:b9:cb:85:3f:d2:a3:73:bd:04:4d:02:
20:ec:72:51:46:2f:7c:80:2d:2c:6c:e5:36:f4:a8:1b:3b:34:
c5:19:37:08:04:42:e3:bc:24:22:b2:23:a5:81:95:98:92:ff:
89:af:16:69:ab:a2:fc:7f:c7:71:1b:1e:33:a9:49:e7:1d:79:
b1:34:4e:d8:20:02:d1:76:40:87:70:42:8d:bc:08:db:95:00:
92:69:11:68:86:95:2c:be:9d:a8:37:6e:74:78:38:03:c8:40:
0c:5b:ae:30:de:90:26:3e:31:96:b2:27:19:9d:98:40:e7:52:
66:68:39:2a:7a:41:07:25:51:c9:55:ba:36:35:6f:3c:e3:c8:
fc:a0:df:ff:91:18:8e:af:1d:cf:a4:8f:2f:6f:d6:53:43:8d:
d0:5d:48:70:1d:be:b3:06:25:f7:14:71:5c:2d:e0:3a:66:39:
39:f5:53:24:8c:36:2e:09:f3:3e:fd:58:4a:15:06:5e:28:ef:
2b:6e:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:51 2025 by rpki-client