Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/HN5Ai7UYMPmItHMFu1UIru4_irQ.roa
File: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (raw, json)
Hash identifier: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=
Subject key identifier: 1C:DE:40:8B:B5:18:30:F9:88:B4:73:05:BB:55:08:AE:EE:3F:8A:B4
Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial: 01942825AE810BEB9412A3206F0D8E2C97BB
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/HN5Ai7UYMPmItHMFu1UIru4_irQ.roa
Signing time: Thu 02 Jan 2025 17:52:25 +0000
ROA not before: Thu 02 Jan 2025 17:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209196
IP address blocks: 45.87.204.0/22 maxlen: 22
45.91.104.0/22 maxlen: 22
45.94.192.0/22 maxlen: 22
45.131.72.0/22 maxlen: 22
45.137.108.0/22 maxlen: 22
45.137.108.0/24 maxlen: 24
45.137.109.0/24 maxlen: 24
45.137.110.0/24 maxlen: 24
45.137.111.0/24 maxlen: 24
45.141.160.0/22 maxlen: 22
45.158.152.0/22 maxlen: 22
92.118.176.0/22 maxlen: 22
212.102.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ae:81:0b:eb:94:12:a3:20:6f:0d:8e:2c:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
Validity
Not Before: Jan 2 17:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cde408bb51830f988b47305bb5508aeee3f8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:bb:c1:b5:66:93:3b:8f:05:4d:c7:29:34:
25:2f:14:6f:9b:e1:c3:2f:07:55:20:f7:33:ea:dc:
2e:a3:bb:00:b3:31:75:9a:0d:e5:0f:d0:85:66:4f:
b4:25:aa:5a:64:90:84:41:2f:bd:ee:01:83:9a:5d:
69:37:07:21:82:2b:b4:3a:7f:a4:c6:d3:72:2c:68:
95:6a:a1:56:1a:d1:5c:56:6f:de:9b:30:7d:a4:49:
83:a9:83:4a:68:27:74:bf:ab:f6:7b:cc:80:04:71:
ad:74:ec:2a:81:fe:bd:f0:a5:98:8e:91:46:26:d4:
0b:61:8c:3a:ce:57:6c:f7:a7:7d:8a:60:6e:7f:4c:
2b:ba:90:59:04:c0:e7:55:5c:f8:5e:d1:5b:82:f7:
86:38:8f:e9:9f:c2:5e:d1:96:14:60:ed:ee:e1:b3:
86:94:83:0f:ef:bd:4e:b7:18:9f:d2:c4:81:b9:4a:
a5:da:df:b1:bd:4e:53:6b:3b:68:3e:33:07:78:3c:
e0:6d:79:74:39:71:b0:16:30:d2:bd:65:98:3d:46:
24:cb:13:c0:6d:89:2a:0c:8d:c2:e3:9e:18:b7:65:
66:b5:03:ab:d6:3a:b0:51:6f:1d:dc:c2:83:d1:99:
00:39:41:2f:0e:af:58:4e:22:c2:fe:e8:6b:87:cc:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:40:8B:B5:18:30:F9:88:B4:73:05:BB:55:08:AE:EE:3F:8A:B4
X509v3 Authority Key Identifier:
keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/HN5Ai7UYMPmItHMFu1UIru4_irQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.204.0/22
45.91.104.0/22
45.94.192.0/22
45.131.72.0/22
45.137.108.0/22
45.141.160.0/22
45.158.152.0/22
92.118.176.0/22
212.102.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2b:95:c1:d5:2c:8a:5c:6b:b2:2f:b1:5a:2d:74:2b:34:de:
fb:86:c2:7f:52:a8:0b:58:f8:5c:06:57:bf:8b:64:28:ea:90:
bf:54:b8:03:a4:dc:c9:0a:45:4e:8d:5c:37:6d:3d:a2:ac:f8:
ba:85:9a:7e:e7:54:b9:d2:62:9b:1f:fb:08:05:d1:b5:f4:d2:
a4:eb:b2:28:08:ad:13:ab:f3:71:5c:9b:5b:86:6a:e6:9f:fb:
fb:97:79:d1:4f:c0:97:f9:bc:49:07:47:72:d6:f1:56:60:f8:
ac:14:b8:31:2a:4a:3d:57:37:52:92:64:8d:38:c9:53:a2:35:
3c:ed:9b:85:21:c1:a5:83:e1:8d:d8:1b:b0:b7:64:42:c8:dd:
f3:51:94:1b:59:29:34:ec:f3:07:39:03:d5:64:8c:b1:2d:da:
60:e7:05:14:41:f6:0d:88:07:d5:73:54:6d:79:7b:66:15:eb:
c1:30:46:05:08:f7:c6:2c:4f:8f:8e:37:13:5a:bc:be:3f:b6:
1e:b2:48:9b:f2:e3:a2:ac:be:1d:b4:96:41:9d:84:f1:65:e1:
0a:e6:dd:a5:7d:96:eb:51:71:0e:d5:2d:2b:f9:c3:51:fc:d8:
c2:8e:9a:85:41:88:6b:c7:be:4c:53:53:dc:14:6a:2f:23:e6:
a8:98:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:04 2025 by rpki-client