Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HskJsHS-a6dI939JYM_BTBZfdEg.roa
File: HskJsHS-a6dI939JYM_BTBZfdEg.roa (raw, json)
Hash identifier: EgysMXFnOmo/Zq5R7RosjYubzS1uR2j77JhO2wel39Q=
Subject key identifier: 1E:C9:09:B0:74:BE:6B:A7:48:F7:7F:49:60:CF:C1:4C:16:5F:74:48
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A49B11525825427B8D98529BE39B1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HskJsHS-a6dI939JYM_BTBZfdEg.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 45.138.109.0/24 maxlen: 32
85.209.254.0/24 maxlen: 32
185.190.81.0/24 maxlen: 24
185.236.80.0/24 maxlen: 32
194.49.108.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:49:b1:15:25:82:54:27:b8:d9:85:29:be:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ec909b074be6ba748f77f4960cfc14c165f7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:46:b1:bc:66:0c:07:ec:f6:1a:79:ad:29:
13:bf:c0:d5:a9:5b:36:da:1c:e8:53:9c:da:33:d7:
59:b6:d6:34:3e:5c:0d:22:e6:91:82:cb:0e:14:c3:
12:3c:91:72:7c:f7:07:4b:6c:63:a0:92:ef:93:53:
b9:da:bd:7d:fd:66:96:4a:c8:b0:9f:7c:ac:03:f8:
ef:dc:69:f5:8c:cc:5d:54:76:7e:11:9d:80:fb:79:
f7:ff:1c:0a:1e:ad:d4:d6:a9:48:5f:05:c5:6c:e8:
93:eb:80:e0:03:41:87:26:af:c8:c4:6f:ec:70:8e:
57:5e:d5:40:b5:57:c8:9c:d2:a6:29:63:7b:eb:bc:
17:04:59:55:e3:f4:4e:d0:20:45:7d:d5:9f:d3:7a:
84:09:48:df:3c:ca:52:ff:2c:2b:b4:68:04:8e:a6:
a7:71:9f:12:61:af:a4:ae:f5:91:a4:28:44:60:63:
9d:03:ee:6a:47:27:1e:d0:76:d1:3a:7b:81:fe:c9:
67:51:74:4d:b3:cc:6f:f9:99:24:43:98:b5:cd:77:
58:2a:4e:38:bb:55:3b:c8:4e:33:6b:66:8f:75:d0:
6a:5b:e0:10:da:8d:52:f5:ae:af:77:b9:36:b2:77:
13:93:fc:a8:c1:ae:17:9a:70:79:52:71:90:95:b6:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:09:B0:74:BE:6B:A7:48:F7:7F:49:60:CF:C1:4C:16:5F:74:48
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HskJsHS-a6dI939JYM_BTBZfdEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
85.209.254.0/24
185.190.81.0/24
185.236.80.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:98:1d:e7:76:54:7a:09:e6:6a:ea:0d:3d:01:b7:84:e6:e7:
bb:03:2e:41:3a:00:f9:97:73:00:d5:b7:29:5c:5e:b6:ef:4c:
91:9b:b8:ec:ee:e3:3a:4d:d3:31:b5:5b:df:d8:f9:0d:64:23:
42:96:6d:48:80:14:2b:21:9e:3b:9f:52:ed:20:b1:03:8f:cb:
01:a5:cb:e0:0a:c5:0c:69:d5:70:77:53:4d:55:c2:9f:01:c2:
1a:79:ac:6b:46:eb:2d:5d:a4:d8:93:d9:45:ea:3e:e1:2c:fd:
0f:31:a4:6a:04:13:a8:ff:e2:c4:9b:5b:e8:39:64:52:86:11:
28:3c:26:90:42:cf:f0:45:45:22:af:3f:05:21:ee:49:d1:c3:
5d:25:3c:b1:14:30:d2:31:6a:94:07:08:3f:4b:ca:18:51:9b:
b3:c2:73:ce:64:84:c1:dc:4b:3a:fa:a4:01:10:42:1f:b8:e9:
f1:af:ae:71:54:1f:67:96:76:29:3a:d8:c8:d2:b9:d6:14:b8:
2b:6c:5f:cd:76:7b:e3:48:e6:72:54:81:c7:ce:84:32:29:da:
20:e5:be:06:11:6c:47:83:89:9d:af:5d:5d:46:d2:23:fb:c9:
43:f9:af:05:3d:0f:87:07:8f:5b:93:6a:26:bb:9b:2d:69:06:
eb:07:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:04 2025 by rpki-client