Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/HvEy6S3Ot5506jaubdhYUPInfR8.roa
File: HvEy6S3Ot5506jaubdhYUPInfR8.roa (raw, json)
Hash identifier: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=
Subject key identifier: 1E:F1:32:E9:2D:CE:B7:9E:74:EA:36:AE:6D:D8:58:50:F2:27:7D:1F
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019426D9DDA0403BFCA472D65A3DAEC80B4D
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/HvEy6S3Ot5506jaubdhYUPInfR8.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51440
IP address blocks: 5.34.160.0/24 maxlen: 24
46.28.136.0/24 maxlen: 24
46.28.140.0/24 maxlen: 24
46.32.222.0/24 maxlen: 24
95.215.129.0/24 maxlen: 24
95.215.130.0/24 maxlen: 24
195.35.85.0/24 maxlen: 24
2a03:2940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dd:a0:40:3b:fc:a4:72:d6:5a:3d:ae:c8:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ef132e92dceb79e74ea36ae6dd85850f2277d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:41:ff:35:cc:dc:28:a1:52:c3:5b:c2:30:
c2:39:1d:5f:a3:f2:83:9f:52:3b:cc:4e:83:3f:21:
ea:a5:ea:0d:ab:d0:6a:d0:5d:ef:80:28:90:f8:a5:
57:4a:c9:eb:8b:3c:13:4e:e2:d6:55:62:f9:76:e0:
fb:cd:18:ba:81:c1:b5:a1:99:81:97:78:e5:72:ad:
16:fc:5b:70:59:45:af:78:7d:f0:2b:24:ee:f3:c4:
01:f8:6c:b7:71:39:40:f8:d6:25:7e:f2:d4:94:23:
b5:78:6f:e6:de:53:f1:df:70:ad:45:03:19:a9:55:
66:67:83:86:ed:ff:1b:c4:74:47:1c:54:d9:ff:92:
a0:57:a5:57:00:7e:95:fc:25:a7:a8:be:a7:b8:c9:
8d:b4:19:6c:58:a0:a7:98:d3:f5:3e:27:97:0e:49:
da:88:98:32:74:40:f6:48:29:c1:6b:97:ee:89:d4:
c6:d4:b3:6b:49:0f:1c:d4:62:bb:80:d8:a0:27:0e:
a5:da:05:8b:f9:a2:8e:db:3e:a7:01:47:48:16:f0:
f3:fe:55:dc:b6:10:08:e8:55:be:45:b0:e6:ed:bc:
d5:d5:33:7a:43:07:83:cb:cb:19:9e:c8:f2:89:a6:
57:f3:46:22:df:0b:02:73:f2:18:c8:b1:54:74:c1:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:32:E9:2D:CE:B7:9E:74:EA:36:AE:6D:D8:58:50:F2:27:7D:1F
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/HvEy6S3Ot5506jaubdhYUPInfR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.160.0/24
46.28.136.0/24
46.28.140.0/24
46.32.222.0/24
95.215.129.0-95.215.130.255
195.35.85.0/24
IPv6:
2a03:2940::/32
Signature Algorithm: sha256WithRSAEncryption
3d:69:1d:d2:ca:b1:7a:8c:1c:1c:0c:2a:35:52:47:18:da:0b:
85:1f:56:fa:f1:ab:53:8a:8c:1c:61:58:13:a8:36:53:39:ad:
6d:cc:46:7b:7f:11:54:7f:3a:9c:ea:5d:df:cd:a2:88:ef:0d:
cf:24:54:2b:1d:37:4e:0b:f7:85:bc:18:fe:5d:2f:77:1c:72:
47:8f:43:e6:ae:b7:9d:34:27:54:24:3b:0f:ad:a1:05:84:96:
39:f3:be:b4:b5:2e:3b:e2:1e:b8:f5:7d:29:e6:89:2d:a5:a0:
07:87:e2:3a:fb:c2:b6:75:4b:e9:51:d8:4f:75:55:5f:db:60:
f8:61:b4:a5:29:06:9c:a2:0c:9b:2d:8c:30:cd:af:7a:5b:45:
58:11:cd:9f:bf:fb:64:22:96:36:4a:7a:7a:a9:36:62:61:8b:
24:a3:89:77:48:b3:72:fa:ff:20:66:35:09:1b:b1:83:80:12:
dc:0a:bd:4b:6f:94:49:84:19:35:8f:db:a7:0c:14:4e:19:09:
df:ce:04:49:fc:d9:c9:ba:0c:97:38:29:25:53:c7:5e:dc:3e:
92:0d:79:f9:fe:03:b9:27:f2:59:df:f2:39:73:05:3f:96:41:
bc:05:f3:23:c1:69:db:b0:a9:ac:e2:e3:01:4a:c2:99:25:0f:
9a:16:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:24 2025 by rpki-client