Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa
File: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (raw, json)
Hash identifier: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=
Subject key identifier: 1F:12:EA:3F:49:23:F5:D7:0F:1B:B0:9F:15:DE:D1:F2:06:63:63:21
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0195B28E123DA0F916C47C0FCCCDF0DB845F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa
Signing time: Thu 20 Mar 2025 07:56:49 +0000
ROA not before: Thu 20 Mar 2025 07:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.141.234.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:8e:12:3d:a0:f9:16:c4:7c:0f:cc:cd:f0:db:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 20 07:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f12ea3f4923f5d70f1bb09f15ded1f206636321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:4a:b7:bb:d8:8a:45:56:83:de:e4:09:83:
91:97:8a:9d:a9:2a:f8:b0:5a:11:f6:32:79:e6:f5:
99:4c:cb:ce:ce:28:b3:ce:c8:18:c3:c0:08:20:cd:
95:46:c0:ed:28:33:3e:ca:98:54:8a:84:5e:7d:9d:
b8:8a:9f:db:bd:50:2b:8b:a1:10:67:2e:d3:5c:6b:
30:6b:25:09:3a:b3:08:1b:24:c3:6b:c1:d2:bd:01:
48:e9:68:66:d7:b2:ab:78:8a:4d:c4:62:4d:a6:c2:
07:dc:38:db:6d:e1:60:47:af:f0:5e:1d:1d:b1:bf:
aa:39:10:cf:1a:c2:79:53:ab:fc:1e:f4:b3:0c:5c:
cd:02:b5:bc:df:49:43:3f:6e:43:3d:44:27:a7:44:
1d:4e:66:80:b7:f0:21:aa:bd:6a:39:dd:06:69:76:
0b:e5:3b:7b:60:f7:84:10:20:06:81:3e:50:ba:d4:
f0:15:41:31:f2:39:15:1c:1a:03:a3:78:be:b0:e9:
59:f0:66:c8:70:1d:58:af:e9:54:37:61:fc:f5:cb:
c5:30:7f:36:93:94:18:e5:7a:8c:ff:e0:90:b3:2f:
06:05:97:7c:27:68:28:1e:63:34:9d:69:dd:c5:7f:
15:c7:32:57:42:f7:fa:66:de:13:e0:c9:31:36:f2:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:EA:3F:49:23:F5:D7:0F:1B:B0:9F:15:DE:D1:F2:06:63:63:21
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.131.0/24
93.152.207.0/24
93.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
10:20:46:7b:13:6a:4c:77:a9:85:a1:f8:4e:a9:56:a0:4c:f0:
59:2a:b1:26:4b:05:cc:04:4d:cf:73:b3:ac:de:35:65:36:34:
6a:39:b4:c6:2e:c2:24:3b:00:7a:b0:b8:03:af:6b:b4:15:03:
48:bf:35:f7:4b:92:11:10:3a:17:a2:2a:78:79:5d:92:11:a0:
8c:98:d7:1a:b1:e8:a4:25:65:d2:00:7d:eb:c0:00:a4:b3:e7:
4b:e7:a2:20:36:c1:26:99:6f:fd:ae:b3:d7:23:a4:bf:40:e2:
ba:d6:3b:f4:d4:98:dc:2b:f5:c1:8c:ff:4f:b5:16:69:49:1e:
f6:96:b7:b4:af:84:ea:61:bd:f1:4b:0e:6d:5a:b7:e1:72:ca:
3b:e6:01:f6:a1:ca:92:ce:ce:de:53:27:7c:a1:3e:bb:bc:e1:
a5:ed:5a:d7:8b:a5:a1:a8:df:96:a2:0c:09:8c:9f:cc:33:94:
f1:f1:9a:36:d1:7c:2e:21:a4:c0:3c:9c:1a:ee:c2:e0:45:4e:
bc:4c:ca:dc:bd:f1:cd:e9:2f:0e:5c:82:d5:8a:c2:f9:73:62:
04:df:ab:b1:31:53:5b:4b:d3:23:4c:63:88:10:48:0e:a8:83:
95:5e:4f:e5:9c:bb:58:1d:5f:c5:f1:b6:ea:b1:02:bb:e2:ff:
2d:81:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:20:47 2025 by rpki-client