Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/HdC41_gg5ZlJREFwcD8B_s_Bra8.roa
File: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (raw, json)
Hash identifier: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=
Subject key identifier: 1D:D0:B8:D7:F8:20:E5:99:49:44:41:70:70:3F:01:FE:CF:C1:AD:AF
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0194258F6011596F41AE99E5E8822B339A92
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/HdC41_gg5ZlJREFwcD8B_s_Bra8.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50474
IP address blocks: 109.234.160.0/24 maxlen: 24
109.234.161.0/24 maxlen: 24
109.234.162.0/24 maxlen: 24
109.234.163.0/24 maxlen: 24
109.234.164.0/22 maxlen: 22
185.154.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:60:11:59:6f:41:ae:99:e5:e8:82:2b:33:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dd0b8d7f820e59949444170703f01fecfc1adaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:31:f1:6c:bb:a4:c2:55:cf:cf:43:49:a0:
3e:48:1f:c6:18:88:78:56:ae:15:e5:51:6e:2a:90:
95:52:ac:d0:b7:13:f3:25:a0:7c:63:59:72:b1:40:
6c:f1:20:e6:57:67:6a:87:18:55:66:a1:de:84:3f:
cd:47:87:33:ff:8e:35:04:62:b5:61:48:c1:73:36:
fc:a5:f9:91:46:3b:61:9d:14:0f:8a:c9:3c:28:0f:
38:a5:a3:92:66:e8:8d:d2:83:fc:9c:c3:84:e6:fd:
0a:23:37:07:3f:8b:07:b5:f5:4a:ad:cf:1c:c6:76:
ed:4f:9f:ab:c9:49:c4:e0:22:f9:12:c5:e1:b6:19:
6b:e5:02:06:c5:dd:3e:8d:2d:10:08:3f:65:24:d1:
d1:9c:eb:b8:8e:34:67:04:cc:95:20:22:01:10:2e:
06:02:df:2b:7c:66:4d:a4:5a:46:0d:ac:f3:8d:15:
cc:0e:68:39:29:4c:1c:9b:e8:a1:2d:8a:39:95:23:
6d:da:3d:4a:e3:b2:1c:cb:78:e6:6d:73:b7:a5:da:
be:51:ea:86:e8:2d:01:db:a8:ea:6a:c1:d0:d0:57:
03:f6:b5:cf:3d:f6:ed:67:88:82:60:03:f0:34:86:
e1:ea:86:07:7e:5b:3f:06:a1:44:d3:04:4a:2a:7a:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:B8:D7:F8:20:E5:99:49:44:41:70:70:3F:01:FE:CF:C1:AD:AF
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/HdC41_gg5ZlJREFwcD8B_s_Bra8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.160.0/21
185.154.136.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:78:e9:cc:87:60:be:03:6d:b3:ea:77:69:cd:c2:c3:97:15:
c9:60:2c:b8:46:83:2c:6c:32:fa:04:de:fc:f6:90:6c:c1:15:
b5:10:5f:da:d6:46:ff:90:45:9e:d1:55:fe:0a:28:8d:dd:31:
8d:33:8b:75:da:76:84:c0:a9:8b:2c:0c:78:84:8f:cf:55:c4:
d2:0b:94:d8:5a:a7:2c:73:9f:9f:d3:23:15:bb:65:46:5a:dc:
2d:6b:59:e3:b0:5c:41:6e:e4:bf:00:b3:42:eb:0d:29:a6:48:
fb:6c:6e:dd:c6:3b:2a:eb:50:ce:32:79:ee:49:04:13:3b:bf:
71:a5:52:92:9f:4e:10:03:de:5b:bf:1f:04:86:ea:20:82:00:
0c:7e:c4:54:76:a3:4d:da:6d:da:25:af:fe:c2:f4:34:8d:d8:
b0:77:c8:98:26:2d:75:f4:a8:4a:87:5a:bc:c5:87:ed:1e:2c:
66:a4:90:88:75:52:11:69:f2:6b:2f:e5:65:58:fc:45:e6:91:
c3:9c:24:fb:f9:cf:ef:4e:f2:e3:4d:d6:0f:be:f5:d7:4e:0d:
4a:92:84:47:54:d6:dc:57:0a:67:c2:0b:e1:7f:8c:d2:0d:fe:
f5:aa:c3:52:ac:31:be:aa:4a:29:ae:d7:13:ef:52:90:fe:9a:
a4:3c:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:08 2025 by rpki-client