Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/hBV1lora2TRWVIDjfS5RTXSSC-w.roa
File: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (raw, json)
Hash identifier: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=
Subject key identifier: 84:15:75:96:8A:DA:D9:34:56:54:80:E3:7D:2E:51:4D:74:92:0B:EC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01955BBF05B83522F2E1BD9A0A168FDE4FAA
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/hBV1lora2TRWVIDjfS5RTXSSC-w.roa
Signing time: Mon 03 Mar 2025 11:23:20 +0000
ROA not before: Mon 03 Mar 2025 11:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 5.182.72.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
45.149.117.0/24 maxlen: 24
45.149.118.0/24 maxlen: 24
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
92.114.83.0/24 maxlen: 24
141.98.52.0/22 maxlen: 24
185.44.28.0/22 maxlen: 24
185.94.248.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
185.128.192.0/22 maxlen: 24
185.150.80.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
193.39.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:bf:05:b8:35:22:f2:e1:bd:9a:0a:16:8f:de:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 3 11:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841575968adad934565480e37d2e514d74920bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:b9:b1:45:7e:ab:57:d6:6d:f6:ff:e9:ff:
26:81:ba:d2:16:65:60:2f:50:2c:fc:98:13:ae:5b:
1a:5c:09:95:b2:88:a4:55:2a:ed:e3:d7:c4:48:c2:
ff:55:d3:e6:33:d9:bf:25:08:11:0e:20:18:b3:3e:
91:47:3f:13:7e:38:98:5d:34:a8:dc:b9:70:a1:59:
06:5d:46:4f:0a:80:34:01:77:9f:6f:87:e5:e5:11:
c1:19:af:47:2c:83:1a:1b:53:82:f6:0e:d1:3c:3b:
d5:25:06:89:fa:2e:7d:0a:67:21:c7:8a:5f:70:96:
4d:b9:15:76:2c:32:02:3d:84:b7:93:11:fd:a1:52:
37:23:02:ce:7b:80:e2:fa:96:c1:9c:49:bd:ed:a8:
f5:60:55:8a:72:2d:9b:bc:51:70:5f:fa:bc:5e:a1:
f2:22:ba:3b:d4:f9:20:66:0a:77:06:a8:d7:d2:34:
f8:52:cb:21:8e:2a:a8:5e:00:63:c2:69:61:01:b6:
95:63:82:94:f0:9d:16:de:9d:4b:3b:a2:16:48:15:
48:33:eb:ae:b6:8f:ed:54:d0:c5:9d:ee:56:09:de:
8a:22:9e:40:be:17:56:b2:82:7a:8d:36:06:8d:33:
eb:f8:b9:dd:cb:7e:4d:1c:3a:7f:be:4b:c5:6b:6b:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:15:75:96:8A:DA:D9:34:56:54:80:E3:7D:2E:51:4D:74:92:0B:EC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/hBV1lora2TRWVIDjfS5RTXSSC-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.136.32.0/22
45.146.224.0/22
45.149.117.0-45.149.118.255
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
141.98.52.0/22
185.44.28.0/22
185.94.248.0/22
185.123.136.0/22
185.126.232.0/22
185.128.192.0/22
185.150.80.0/22
185.151.176.0/22
185.198.108.0/22
185.230.0.0/22
185.248.208.0/22
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:9b:bd:4b:15:cf:b6:f8:03:5c:95:ce:ce:87:67:52:af:72:
27:7e:5a:1b:a3:d2:e4:39:b0:a1:87:4e:87:65:ab:d4:d3:50:
8a:5a:a6:1f:0b:82:5d:e3:88:9a:d8:b0:3b:2d:61:b7:54:48:
a3:51:fa:28:54:a6:4e:79:5e:a2:47:d6:bf:f5:8d:4c:2e:08:
d4:92:28:db:64:9b:7d:f3:86:b4:c6:b2:73:42:80:fc:bf:90:
82:ba:61:46:87:68:64:c2:86:9d:fa:9f:5f:fa:ed:0f:a4:1d:
72:83:7a:b3:cf:4f:90:9b:a7:c2:75:b7:23:f4:7b:47:17:4a:
dd:c5:e9:82:41:2b:f9:3e:5f:b8:80:3d:f8:21:c5:a7:99:7c:
bb:98:7a:3b:cc:a2:1b:b1:4d:6b:09:10:1f:ac:1e:b4:81:c9:
d8:bf:53:61:13:33:b5:c4:c3:2b:5a:be:b3:43:83:ee:af:07:
37:2a:1c:aa:a8:09:dc:c7:60:09:24:86:47:94:f6:fa:d3:4e:
25:9c:40:8d:f9:ea:db:2b:73:ac:ff:12:48:d1:6e:3c:02:2b:
13:30:5a:a9:8e:ca:3e:4a:3b:d7:04:73:74:c0:d4:04:ae:2c:
f7:ee:50:18:34:71:59:b0:a2:1d:d5:90:3a:e8:44:03:1d:db:
69:2d:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:05:04 2025 by rpki-client