Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa
File: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (raw, json)
Hash identifier: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=
Subject key identifier: 85:12:74:74:5B:89:4E:8D:1F:EB:BC:F9:03:7C:EE:A4:0D:E9:F4:48
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019426D9571C3E6269F84B4A24C3DF366596
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41008
IP address blocks: 62.233.0.0/20 maxlen: 24
109.233.24.0/21 maxlen: 24
193.58.8.0/21 maxlen: 24
193.201.162.0/24 maxlen: 24
212.113.64.0/19 maxlen: 24
2a02:2398::/29 maxlen: 48
2a02:239c:0:24::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:57:1c:3e:62:69:f8:4b:4a:24:c3:df:36:65:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851274745b894e8d1febbcf9037ceea40de9f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:75:f4:0d:5b:59:8d:17:3c:20:fe:7a:23:
30:b1:42:fc:9c:1c:2f:19:94:67:29:0c:40:84:c5:
6b:c2:c6:ba:42:4d:7b:02:e0:f7:42:33:1b:37:3e:
9a:28:d6:be:cb:22:63:1a:ad:a2:72:c0:77:f1:b4:
c5:5a:1e:46:99:63:c7:5f:34:aa:8d:0d:b4:1d:1b:
8e:60:24:a2:5c:89:63:e2:08:d8:57:dc:d0:0e:b6:
0a:e5:dd:f7:4e:8b:e2:15:5c:af:19:5d:85:6b:1e:
53:b4:1d:ce:36:e1:b4:d6:bc:4a:83:70:ee:34:16:
97:d6:45:28:af:7a:b7:22:d3:cd:79:a2:69:34:7b:
36:0a:2a:39:f8:14:52:c1:f0:cc:0e:c2:c4:de:58:
b2:2f:ad:0e:e7:91:f7:f7:fa:15:e6:3a:22:4a:e8:
8b:0e:a8:43:44:77:d0:31:96:5d:5a:b7:cd:94:35:
5f:9a:af:c8:ae:15:72:b6:0b:9f:84:af:02:24:a1:
1a:e8:73:be:99:43:f8:87:eb:85:c8:94:4b:a6:d9:
3f:b8:25:db:48:1a:2e:23:3c:e1:7a:8f:af:fe:86:
87:bc:3e:05:46:62:f4:b3:5c:e1:24:25:55:70:21:
0a:3e:8d:a3:fd:32:be:68:43:05:0e:6b:7c:8c:25:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:74:74:5B:89:4E:8D:1F:EB:BC:F9:03:7C:EE:A4:0D:E9:F4:48
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.0.0/20
109.233.24.0/21
193.58.8.0/21
193.201.162.0/24
212.113.64.0/19
IPv6:
2a02:2398::/29
Signature Algorithm: sha256WithRSAEncryption
ac:3c:3d:97:58:f2:af:52:1d:e7:84:e5:89:4c:83:97:a1:e7:
99:67:43:9b:34:03:18:5b:dd:b7:04:fa:b3:16:a0:53:49:ab:
3c:93:cf:7a:02:fe:f6:86:eb:9d:42:bc:c8:18:09:b4:a9:16:
c0:1a:3a:9f:85:ee:2a:5f:ae:c3:87:3c:f0:ca:3f:73:96:89:
50:78:6a:81:6a:ec:d2:0a:78:9c:50:03:e9:b0:8e:72:e8:52:
44:9c:85:95:1c:ac:13:18:33:e6:c1:6c:18:89:bb:18:91:a5:
d9:3e:55:aa:32:82:5d:fd:93:ea:93:ef:cf:72:7a:63:24:ed:
ac:6d:3d:6f:25:59:40:a9:8f:9c:24:28:0a:7c:d6:c1:9b:72:
de:02:de:87:0c:02:78:6f:de:89:2b:30:c0:f3:de:3a:14:01:
7c:da:ab:04:8a:b1:80:c9:7d:8d:07:f1:c0:99:a1:d4:f0:33:
9c:21:73:2b:f3:95:22:33:46:dc:d3:3f:64:1c:1e:6c:e7:3f:
9a:cc:f5:0a:16:c9:2a:99:84:b9:a0:44:75:6d:6e:c8:b1:29:
79:91:d7:f0:f5:7d:cd:28:bd:76:14:71:80:30:41:09:48:56:
93:37:cb:2a:62:9f:28:5b:55:ad:02:47:01:15:43:fe:47:c4:
2b:ea:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:16 2025 by rpki-client