Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/HnCxtgoA5BRu_1pjQiZvCbOAQdY.roa
File: HnCxtgoA5BRu_1pjQiZvCbOAQdY.roa (raw, json)
Hash identifier: M/k6FytGzRA4tsIW/KsaT+lp2tY9pFcIlF0IPb9k9nY=
Subject key identifier: 1E:70:B1:B6:0A:00:E4:14:6E:FF:5A:63:42:26:6F:09:B3:80:41:D6
Certificate issuer: /CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Certificate serial: 3051CFA9
Authority key identifier: DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/HnCxtgoA5BRu_1pjQiZvCbOAQdY.roa
Signing time: Mon 31 Jan 2022 20:38:56 +0000
ROA not before: Mon 31 Jan 2022 20:38:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35226
IP address blocks: 89.184.56.0/22 maxlen: 22
89.184.56.0/23 maxlen: 23
185.179.40.0/24 maxlen: 24
89.16.64.0/19 maxlen: 19
109.106.96.0/19 maxlen: 19
78.143.128.0/18 maxlen: 18
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
2a02:2158::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810667945 (0x3051cfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Validity
Not Before: Jan 31 20:38:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e70b1b60a00e4146eff5a6342266f09b38041d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:5a:45:e7:83:06:b2:eb:55:fa:79:3b:c0:
55:a7:57:77:b4:2c:5f:11:30:3b:58:bf:cb:59:a9:
fa:14:fb:d3:5e:71:72:4a:80:c5:44:5e:07:a6:21:
96:82:2a:c1:7a:5e:7c:c0:d1:6d:a5:20:39:d2:aa:
b3:f3:66:50:2b:6e:35:cf:65:df:7e:05:84:22:e9:
ab:0d:ac:6f:58:43:d2:ab:a6:cb:f4:1b:ce:87:dd:
a1:54:53:ba:71:5c:66:85:62:8e:d6:84:e1:36:45:
2d:2c:c4:55:a9:bb:bb:f9:77:24:72:51:93:f0:97:
ad:65:23:5b:ff:a0:4f:86:5b:76:6b:3c:09:46:b0:
ad:03:0a:17:cb:b6:f5:84:16:f2:83:3e:fd:85:2a:
4e:77:07:d5:10:2b:08:df:5d:bc:94:42:7f:59:58:
f8:23:43:a8:78:a8:35:5c:6a:5e:09:10:de:eb:15:
b9:5e:e4:28:71:98:da:cd:bc:3c:12:26:9f:25:09:
09:44:6e:d9:a4:18:f4:09:eb:55:f2:d3:b9:25:93:
94:72:c5:51:ed:bf:ae:fa:f5:65:18:bf:df:44:47:
53:c5:6e:37:d8:49:de:f5:99:b4:23:db:14:e8:69:
80:59:76:e3:38:b7:f2:94:37:2a:19:57:b0:74:07:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:B1:B6:0A:00:E4:14:6E:FF:5A:63:42:26:6F:09:B3:80:41:D6
X509v3 Authority Key Identifier:
keyid:DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/HnCxtgoA5BRu_1pjQiZvCbOAQdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/3fBI6gK3VRUzURv6kEDdq-EZdMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.128.0/18
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.59.255
109.106.96.0/19
185.179.40.0/24
IPv6:
2a02:2158::/32
Signature Algorithm: sha256WithRSAEncryption
48:70:21:de:88:b9:45:c8:8f:45:8e:8d:25:8a:2b:32:9f:b4:
b0:a9:cb:bb:fc:d4:71:89:9f:89:85:1a:8f:c3:38:ff:d1:a0:
5b:64:cd:74:4e:0f:7b:b2:30:c1:be:7d:fb:c6:64:a1:e6:96:
a4:3c:12:95:cc:7a:b8:d9:37:66:5c:d6:a3:73:ea:b6:06:11:
f0:8b:85:33:2f:29:43:ef:47:46:60:91:cc:9b:00:9e:d8:ee:
6e:5b:47:17:b7:2f:e1:34:ad:d7:b3:79:54:dd:6f:d3:4b:cc:
93:fc:b6:b3:dd:07:d3:96:b8:e6:a8:75:bf:62:84:0a:7e:09:
e4:af:5d:f6:2b:9e:64:2d:7f:7e:29:ee:83:92:f4:75:22:69:
f0:2e:6a:4c:3d:4e:4e:07:1c:da:2e:4a:d1:da:7b:be:32:33:
49:ca:a4:b4:f2:46:28:33:6a:35:90:8a:a2:05:ca:b8:44:7d:
e0:c5:ca:6b:e5:d5:d6:1d:b2:b3:e7:2c:a8:3f:26:65:b8:f3:
2c:e1:e4:13:54:e0:ed:be:c6:e8:6a:ca:52:24:6d:a9:2b:42:
71:77:35:1e:6d:09:e3:f8:88:1f:e2:e7:6a:74:b4:49:56:ac:
15:86:07:db:48:cd:b0:27:84:e2:b1:10:11:9c:51:cc:78:ac:
0a:d6:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:37 2025 by rpki-client