Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/Hmr7dkr0W7JFrepttGlqLP6NKbM.roa
File: Hmr7dkr0W7JFrepttGlqLP6NKbM.roa (raw, json)
Hash identifier: yDBwYp9xrxrLaEiVdQGFDv7xOzCGwLdfuFI8YUzQtLo=
Subject key identifier: 1E:6A:FB:76:4A:F4:5B:B2:45:AD:EA:6D:B4:69:6A:2C:FE:8D:29:B3
Certificate issuer: /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial: 019423D6AA7A478BC329D0148C96EAEEDD06
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/Hmr7dkr0W7JFrepttGlqLP6NKbM.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49821
IP address blocks: 91.202.196.0/22 maxlen: 22
91.235.184.0/22 maxlen: 22
91.235.184.0/24 maxlen: 24
91.235.185.0/24 maxlen: 24
91.235.186.0/24 maxlen: 24
91.235.187.0/24 maxlen: 24
176.108.144.0/21 maxlen: 21
176.126.48.0/21 maxlen: 21
176.126.48.0/24 maxlen: 24
176.126.49.0/24 maxlen: 24
185.244.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:aa:7a:47:8b:c3:29:d0:14:8c:96:ea:ee:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e6afb764af45bb245adea6db4696a2cfe8d29b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:a9:82:42:c9:75:97:4a:d2:a5:d6:0f:90:
f8:ab:74:59:3f:f6:15:44:e5:68:dc:da:3d:73:26:
dd:48:c8:31:13:11:17:30:e8:d5:62:b4:76:f7:13:
27:78:ac:0d:37:ce:18:10:04:5e:fa:79:65:ed:d0:
01:80:73:d4:5a:bd:e5:09:b2:f7:8e:52:28:f4:4e:
31:6c:83:67:20:5a:c3:c0:60:09:59:77:28:b6:e7:
55:90:91:a4:87:83:db:14:76:3f:e2:5a:57:60:0a:
6a:c3:82:f3:50:1e:9e:41:3b:f4:ae:02:25:6a:20:
f1:19:b7:14:95:a9:c5:d3:97:68:c0:d4:4e:88:fd:
7f:1b:c3:f0:27:ef:65:aa:b5:bf:58:c5:83:fc:24:
e1:b6:76:ec:48:7f:d2:47:ae:68:29:fc:fa:9d:c8:
e6:4f:8d:63:cb:2c:a2:9a:21:e9:f5:85:e1:76:df:
3a:57:51:26:65:eb:7b:42:02:bb:a9:21:42:f1:ac:
e9:b6:c2:e0:c7:80:f5:33:31:7c:86:cb:fd:80:6d:
59:74:17:5f:45:15:df:0a:60:0e:ed:78:45:9a:35:
6c:45:4f:e9:c8:08:2c:95:0e:74:bb:a4:a6:d1:f3:
12:8f:0e:48:28:e2:ed:0e:15:69:47:70:06:0b:3a:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:FB:76:4A:F4:5B:B2:45:AD:EA:6D:B4:69:6A:2C:FE:8D:29:B3
X509v3 Authority Key Identifier:
keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/Hmr7dkr0W7JFrepttGlqLP6NKbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.196.0/22
91.235.184.0/22
176.108.144.0/21
176.126.48.0/21
185.244.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:85:8d:0a:ed:b6:86:05:ef:d2:20:f7:a7:30:ac:a3:67:b3:
e7:12:51:40:25:be:c9:02:4c:c0:30:08:1f:27:7e:fa:07:ee:
64:f3:cb:35:c4:a9:2d:c7:2c:c1:96:cf:8c:83:62:eb:30:51:
e7:c6:aa:85:64:6a:d8:38:52:dd:06:28:85:8a:c3:ab:fa:0d:
0c:19:be:53:0e:c6:37:b5:30:cc:91:7f:ed:8f:ea:0c:13:73:
a6:03:93:8c:50:50:fa:c9:79:7f:bf:2a:50:aa:79:2b:da:88:
47:b4:cd:37:b4:91:07:f6:4e:31:35:c8:a3:65:cc:bb:e8:7f:
b2:af:e3:75:1a:5c:86:13:09:fe:e0:4b:5f:72:9b:8c:6d:00:
d9:02:19:f3:92:0e:60:59:8e:de:94:3c:ef:a1:db:01:04:48:
84:0b:cd:5c:54:ac:87:9a:8c:7d:bb:68:18:e4:72:c4:87:ed:
78:76:f6:e7:77:73:3d:89:eb:f0:ef:1c:70:bd:d3:ef:33:1f:
bd:c3:7a:95:d9:69:2b:8e:75:f3:31:f4:4f:20:34:f3:02:e2:
ff:d8:58:6a:c4:2b:32:db:70:b3:10:05:83:20:e2:d5:55:37:
e4:37:6d:59:92:92:ff:44:83:96:b7:56:a2:fb:0b:aa:a6:8e:
9f:cf:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:56:58 2025 by rpki-client