Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa
File: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (raw, json)
Hash identifier: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=
Subject key identifier: 1E:44:51:F7:1D:24:C1:F0:8E:18:B4:39:1C:63:6F:A3:D4:1B:63:76
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019425FC79C155C95757C87A8FE8A35DDF33
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 62.26.0.0/15 maxlen: 24
62.144.0.0/16 maxlen: 24
62.246.0.0/16 maxlen: 24
79.140.176.0/20 maxlen: 24
80.83.96.0/20 maxlen: 24
185.210.52.0/23 maxlen: 24
194.112.16.0/20 maxlen: 24
195.52.0.0/16 maxlen: 24
195.63.0.0/16 maxlen: 24
195.78.160.0/19 maxlen: 24
195.185.0.0/16 maxlen: 24
212.172.0.0/16 maxlen: 24
2001:4090::/32 maxlen: 48
2001:4091::/32 maxlen: 48
2a01:5c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:79:c1:55:c9:57:57:c8:7a:8f:e8:a3:5d:df:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e4451f71d24c1f08e18b4391c636fa3d41b6376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:7b:00:e9:f0:b4:eb:18:46:c7:68:eb:d0:
41:b7:6f:50:83:86:4d:22:e6:1d:64:c6:f5:52:2e:
3a:80:b2:45:ce:92:90:c2:6d:07:15:10:2e:9d:dc:
08:5d:eb:c0:92:3e:f8:3e:66:44:b5:70:db:a8:1b:
9c:d8:f4:18:10:76:da:5c:35:9a:36:0c:d5:f4:6c:
cf:df:10:7d:ee:ef:a8:65:c9:f8:57:c2:5f:ee:58:
28:f5:b1:e8:85:13:66:4a:e7:75:f0:0a:db:b9:b6:
cf:97:de:57:2b:a1:f4:34:16:a9:fd:80:3d:9e:0c:
fc:79:73:77:f3:21:96:ab:6b:b4:1f:80:be:62:68:
8b:0d:77:94:04:25:bc:9b:71:09:39:65:cf:20:fe:
5e:1a:57:49:18:c1:4e:62:67:7c:17:f3:10:17:74:
36:72:92:35:f5:ea:27:7f:99:bc:c5:19:be:75:f8:
94:c1:72:8a:57:bb:d9:92:38:4d:d7:4a:23:a3:50:
f5:96:b7:61:4d:95:9b:29:b1:2d:91:f6:40:a4:c7:
65:16:6a:36:7b:c1:08:0e:05:49:f9:bf:6a:96:c6:
b1:63:30:4f:db:ea:7d:79:d4:34:fe:54:f0:93:50:
1e:f1:04:67:a5:ce:bd:a0:34:13:a5:52:fb:9c:55:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:51:F7:1D:24:C1:F0:8E:18:B4:39:1C:63:6F:A3:D4:1B:63:76
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.26.0.0/15
62.144.0.0/16
62.246.0.0/16
79.140.176.0/20
80.83.96.0/20
185.210.52.0/23
194.112.16.0/20
195.52.0.0/16
195.63.0.0/16
195.78.160.0/19
195.185.0.0/16
212.172.0.0/16
IPv6:
2001:4090::/31
2a01:5c8::/32
Signature Algorithm: sha256WithRSAEncryption
39:e0:4c:aa:47:26:df:2c:07:61:49:c7:9b:60:6c:a4:6c:84:
4b:06:55:d2:34:f9:75:04:47:0f:6c:61:79:4c:78:cb:c3:20:
94:85:1b:03:1c:dd:e7:6f:60:b6:52:10:f3:28:4c:e9:e6:5a:
5a:38:1d:d9:44:11:68:22:bb:c9:d6:26:27:b0:2a:fc:69:df:
f5:01:a6:64:c0:fa:4d:79:e4:70:ab:98:90:a1:25:f6:8b:2f:
74:3a:4f:ee:4a:8a:0d:f8:a8:1b:77:92:ee:2b:1f:fd:ed:5d:
72:5d:6d:be:0d:97:ce:78:72:a1:61:a8:be:22:03:1b:37:30:
52:47:c5:78:28:0f:ec:b3:92:32:83:be:f8:36:8b:57:8d:28:
c4:12:80:f8:f5:36:86:0d:8f:92:18:0c:33:d4:fb:fa:90:85:
db:0f:a8:05:f8:cd:f4:5d:9e:a7:5f:de:e0:86:06:77:3b:37:
ce:df:c7:f9:44:38:3b:fa:21:0f:c2:54:e2:9f:4d:77:bc:f4:
79:a4:f4:07:34:b6:46:73:17:c2:37:f2:f2:61:77:59:cc:a6:
b0:1f:67:0a:41:ae:da:86:c8:0d:0b:c1:b9:26:3c:3a:d8:fe:
76:27:b5:40:4b:3b:fa:0f:11:a5:67:53:f9:6b:28:25:b9:7b:
dd:4f:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:59 2025 by rpki-client