Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/HExqzZH-1kNrXKo35eW9thGzHRo.roa
File: HExqzZH-1kNrXKo35eW9thGzHRo.roa (raw, json)
Hash identifier: rw6JLHnfIjs6uz6iDmu36qsUj4hdrYIyw70j0jT7LC4=
Subject key identifier: 1C:4C:6A:CD:91:FE:D6:43:6B:5C:AA:37:E5:E5:BD:B6:11:B3:1D:1A
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 0185DEE2ACE8FC5338484BF003DF2A5EFCB6
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/HExqzZH-1kNrXKo35eW9thGzHRo.roa
Signing time: Mon 23 Jan 2023 13:47:55 +0000
ROA not before: Mon 23 Jan 2023 13:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51333
IP address blocks: 185.58.4.0/22 maxlen: 24
188.65.80.0/21 maxlen: 24
194.36.72.0/22 maxlen: 24
2a0c:bdc0::/29 maxlen: 29
2a02:6120::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:e2:ac:e8:fc:53:38:48:4b:f0:03:df:2a:5e:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Jan 23 13:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c4c6acd91fed6436b5caa37e5e5bdb611b31d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:12:c9:2c:c9:e2:54:35:0e:f7:0d:d7:23:
ff:f6:5e:7f:77:12:fd:05:5f:7a:2e:c0:e8:e8:26:
8f:7b:1e:7c:46:07:7f:5b:0f:08:3d:cd:4b:b7:1d:
2b:aa:48:d4:bc:f2:01:e4:d2:6d:08:04:c5:48:c8:
dc:85:4a:43:57:c5:3f:49:c7:64:57:08:4e:3c:98:
17:be:73:4d:95:1a:5e:2c:87:0b:82:58:f8:72:d5:
16:6c:47:50:81:52:b5:ae:c1:52:e7:52:7c:4f:78:
85:0d:32:2e:66:19:5b:73:a4:b9:c6:9b:7d:e4:4a:
ec:d6:fd:d6:5a:12:a5:d9:31:d5:f9:2c:41:13:b1:
1d:4c:ce:27:43:6a:3c:39:9e:29:bd:e1:ae:90:92:
d7:bc:13:d7:02:b7:a4:c8:8e:75:d5:12:05:46:cd:
04:78:c5:f8:7e:ba:46:4b:17:ab:aa:e8:1c:8a:6b:
be:93:77:5b:c7:26:86:00:23:12:33:dc:53:22:33:
1f:0d:2f:f5:7b:25:20:a4:e8:b6:3a:76:fd:99:31:
5f:30:bb:4a:20:b5:04:c3:b1:bd:e5:29:e0:ac:96:
79:52:36:87:4c:95:03:db:5b:5b:61:f5:1a:90:4a:
e6:95:9b:26:54:c6:dd:f5:a4:a6:89:3e:90:ae:3c:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:6A:CD:91:FE:D6:43:6B:5C:AA:37:E5:E5:BD:B6:11:B3:1D:1A
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/HExqzZH-1kNrXKo35eW9thGzHRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.4.0/22
188.65.80.0/21
194.36.72.0/22
IPv6:
2a02:6120::/29
2a0c:bdc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:5c:a9:09:7f:2d:42:84:f7:60:9a:28:c3:b0:70:71:62:bb:
9b:5c:e8:92:9e:61:94:61:e5:e0:10:49:c7:26:e0:36:02:cf:
c0:1e:9b:18:53:fe:7c:d4:48:b2:cb:a7:2b:cd:24:d1:cf:c0:
ed:d3:19:46:b9:3b:34:dd:a6:d3:39:e2:ff:ba:36:77:36:5a:
1c:34:8e:f1:19:4e:57:cf:51:e5:6f:60:c9:e7:61:29:36:17:
c4:ba:9c:f3:75:51:57:80:e5:d9:92:7e:a1:a8:9f:93:5b:96:
9b:51:d1:e4:ff:ea:26:b4:2c:06:30:76:e5:ba:dd:4c:6f:bf:
e2:fc:3e:18:13:f8:fe:14:bb:f6:9d:76:1c:47:b8:49:fb:61:
1b:f6:b2:72:5c:51:f5:d5:fb:2d:98:cf:18:e6:19:3d:12:b2:
48:95:65:4e:25:4f:45:a5:c8:28:8a:fb:ae:b2:a5:1c:c7:31:
18:a8:0e:4e:83:e0:6f:eb:18:53:78:94:8a:0a:07:e1:56:6b:
f3:90:5c:19:dd:41:cb:41:78:73:59:b9:77:c7:0d:2d:dc:ae:
8c:73:e5:51:66:5d:47:52:14:c2:ec:16:33:eb:c6:02:94:21:
e4:c2:61:7d:d5:97:f6:5a:ec:91:21:db:0d:62:5d:c0:a9:80:
b5:5c:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:49 2025 by rpki-client