Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/h616S8CObPCxdJef21IBTy1P_kM.roa
File: h616S8CObPCxdJef21IBTy1P_kM.roa (raw, json)
Hash identifier: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=
Subject key identifier: 87:AD:7A:4B:C0:8E:6C:F0:B1:74:97:9F:DB:52:01:4F:2D:4F:FE:43
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019425FC35B59B600F186C62202596EC81DB
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/h616S8CObPCxdJef21IBTy1P_kM.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39294
IP address blocks: 45.82.216.0/24 maxlen: 24
45.82.218.0/24 maxlen: 24
45.82.219.0/24 maxlen: 24
195.88.134.0/24 maxlen: 24
195.88.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:35:b5:9b:60:0f:18:6c:62:20:25:96:ec:81:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ad7a4bc08e6cf0b174979fdb52014f2d4ffe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5a:79:80:26:5a:eb:5f:aa:da:28:5a:c9:fe:
15:d1:00:7e:81:b4:1a:e4:b4:bf:9e:cd:9f:4f:0a:
cc:79:ab:4b:55:4e:1c:a5:03:04:07:80:0d:d2:9a:
fc:87:40:63:93:1a:c7:32:8e:13:78:67:04:84:7e:
a0:5f:a0:8e:db:86:b1:b6:6e:b8:cb:02:47:3b:e1:
d1:ae:d8:d7:bf:88:05:25:c0:8b:06:22:db:d9:3f:
62:f1:89:d5:e8:13:71:61:75:28:e5:5d:ad:d2:e7:
92:b3:20:6c:05:1e:b2:36:87:e0:80:4d:12:62:ad:
ac:26:8a:b9:07:04:98:87:2a:1d:e9:7c:d1:d6:5b:
4f:2f:09:45:a1:7c:56:92:6e:9d:79:7e:87:b3:cb:
4c:d8:15:51:d5:36:74:10:76:9b:31:43:53:03:e3:
73:32:4b:d0:29:a7:ec:ef:a2:e9:bd:fd:06:d7:fa:
03:b9:12:1b:87:58:9f:0e:f7:20:47:ce:a5:71:7b:
69:a8:b3:51:b7:f4:aa:d3:e7:8d:97:42:67:34:57:
dc:f0:35:ba:2a:a1:ee:b3:10:01:a4:51:47:ba:1e:
44:a9:b6:7e:5c:6b:0a:ab:f0:e3:e8:67:60:d9:3f:
b0:d6:1c:68:ba:78:b7:0a:3a:9b:95:7c:d1:32:da:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:7A:4B:C0:8E:6C:F0:B1:74:97:9F:DB:52:01:4F:2D:4F:FE:43
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/h616S8CObPCxdJef21IBTy1P_kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.216.0/24
45.82.218.0/23
195.88.134.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:11:77:55:67:aa:73:e9:80:4e:ad:4a:5d:53:6a:b2:77:2e:
ac:af:7a:cc:05:1c:a8:ec:ec:c7:95:cf:d9:3d:2a:65:79:40:
fd:1e:00:fc:e2:fe:c3:d0:19:55:0d:c1:f9:b7:cf:2a:47:87:
a3:2e:a4:90:6a:13:9b:40:52:15:38:4c:c4:12:5a:d9:cd:de:
20:50:01:94:69:23:16:c5:54:28:43:2b:b0:c5:2f:c6:d3:14:
96:8f:26:50:e2:a9:10:27:4d:3c:6a:45:9d:5b:41:8d:b9:81:
44:22:e0:39:06:be:a3:14:a7:bf:be:47:cb:1f:5e:6b:e0:5f:
bb:35:08:d5:a6:a9:1f:2d:f7:73:5a:24:b3:2b:25:85:16:06:
45:36:bd:7b:28:b6:13:da:76:2f:9c:db:18:d4:43:2d:33:64:
58:7f:8d:4e:e9:be:bf:25:89:4b:81:3e:9d:3b:4f:ef:57:90:
da:c7:b0:f8:df:57:ed:07:ea:c2:b3:a0:c9:84:d5:09:61:27:
86:3d:cd:4e:28:ec:56:83:43:26:84:45:2b:a7:a2:7e:25:1a:
e6:32:1a:79:db:ac:fe:c9:c9:d3:10:41:5b:e5:48:b9:61:35:
f5:06:85:42:b2:b6:07:3d:0a:da:16:88:6a:bb:4a:66:f2:32:
ca:57:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:19 2025 by rpki-client