Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa
File: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (raw, json)
Hash identifier: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=
Subject key identifier: 1C:9D:84:8F:55:E7:31:EC:FF:EB:38:C4:84:54:FD:83:24:8C:1A:23
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019425213A4B5C2DDFFFC70AB0B7341BC8D2
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa
Signing time: Thu 02 Jan 2025 03:48:41 +0000
ROA not before: Thu 02 Jan 2025 03:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29165
IP address blocks: 62.56.252.0/22 maxlen: 24
81.199.116.0/23 maxlen: 24
81.199.120.0/22 maxlen: 24
81.199.250.0/23 maxlen: 24
81.199.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3a:4b:5c:2d:df:ff:c7:0a:b0:b7:34:1b:c8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 03:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c9d848f55e731ecffeb38c48454fd83248c1a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:ce:f4:e2:92:56:be:e3:68:43:f1:6c:cb:
ae:ff:da:bb:f0:91:ca:3d:bb:5e:72:9e:71:df:5a:
58:37:24:c4:65:23:43:2f:2b:13:cb:1b:b3:b9:f2:
8f:63:92:9f:8d:97:84:ea:6c:4f:b0:ad:98:0f:10:
53:16:c9:7e:55:d5:7f:bc:d7:e7:2c:8b:01:f7:11:
c5:ea:9e:76:97:d5:87:d9:f2:4a:52:cf:66:16:93:
67:4f:c8:61:fd:61:22:8e:e1:56:1c:9f:4a:c9:bf:
f7:be:1b:69:3b:77:f8:a5:b3:58:4e:08:81:50:32:
6b:a6:47:60:41:7c:12:37:8f:50:0c:17:a8:bb:f4:
ea:3f:a4:34:a0:e6:eb:97:ed:c2:be:c1:45:19:f0:
31:86:c1:3c:69:24:bf:5d:9a:42:31:5b:29:65:25:
63:85:e1:14:39:26:4f:16:bb:a2:0c:7c:16:3b:69:
f3:a1:f2:30:a0:d4:b0:60:c7:a0:97:76:e8:0d:a9:
4a:94:bd:16:90:eb:d8:8c:fc:d6:a9:54:fb:56:97:
f3:6f:7d:63:73:6a:5c:49:d6:fd:31:f6:e3:ab:1c:
e2:f7:9b:76:38:ac:8b:68:44:fc:ba:b9:5a:48:8d:
42:7e:e2:6b:49:10:3f:4d:ea:34:1f:e8:eb:5e:16:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:84:8F:55:E7:31:EC:FF:EB:38:C4:84:54:FD:83:24:8C:1A:23
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.252.0/22
81.199.116.0/23
81.199.120.0/22
81.199.250.0-81.199.255.255
Signature Algorithm: sha256WithRSAEncryption
55:1a:47:36:2d:52:1a:6e:0a:dd:bd:26:79:47:ab:fd:77:2f:
19:85:6b:f0:d8:96:c0:e0:14:f7:67:1f:fe:40:96:2f:d5:cb:
55:4d:88:01:a9:1b:b8:29:42:16:34:43:45:e1:3b:48:ec:89:
d6:d9:1a:3a:01:aa:b4:b9:19:e7:8d:13:5d:85:8c:19:26:7a:
4b:50:ae:e4:e6:bb:58:a9:74:31:80:fc:80:db:26:30:a0:7f:
1e:43:8f:e3:7d:b3:59:c8:9f:c0:d7:ed:1c:32:71:95:80:bc:
4c:63:89:15:81:c3:7d:09:c4:08:d1:1b:73:7b:4e:2d:e2:f8:
38:cc:07:72:7b:7c:09:51:e5:3a:6e:09:00:70:6b:8e:5b:01:
9b:53:16:6e:2f:ff:d1:47:c7:17:93:1c:20:34:0d:18:59:b2:
a6:bc:86:50:9f:72:e2:9d:ef:58:70:51:10:48:7b:b1:83:33:
5f:c9:06:33:91:62:6d:21:d2:83:07:87:b6:42:57:3e:bd:db:
dc:ea:3d:39:03:8f:a5:96:c6:a2:d5:78:c4:f4:aa:f7:44:30:
66:15:45:f8:b0:0f:95:a7:84:6b:23:f9:13:e5:db:57:90:65:
56:08:aa:6f:2c:8d:2e:43:36:2b:2d:9f:ce:1d:5c:08:31:4b:
ac:69:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:32 2025 by rpki-client