Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa
File: HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa (raw, json)
Hash identifier: 4fQxNDw+xzPlf4g6ZgL9x8rYG7oQVJVTPEy0p3xv3ck=
Subject key identifier: 1C:54:A6:FD:5B:BD:03:34:03:D4:4F:08:7A:74:C8:6F:C6:86:37:CC
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01941FFA59E0F8561A221B2AADAD9200C75F
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201986
IP address blocks: 45.153.212.0/23 maxlen: 23
45.153.214.0/23 maxlen: 23
109.68.127.0/24 maxlen: 24
178.219.56.0/21 maxlen: 21
178.219.58.0/23 maxlen: 23
185.57.68.0/22 maxlen: 22
185.150.164.0/22 maxlen: 22
185.150.164.0/23 maxlen: 23
185.150.166.0/24 maxlen: 24
185.150.167.0/24 maxlen: 24
194.61.88.0/22 maxlen: 24
2a02:5960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:e0:f8:56:1a:22:1b:2a:ad:ad:92:00:c7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c54a6fd5bbd033403d44f087a74c86fc68637cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:ca:dc:01:dd:10:91:24:a7:b7:09:f4:26:
64:d6:38:3c:2a:91:9c:ef:95:de:4f:44:f0:3b:97:
ed:49:b3:7a:20:e0:7a:1d:2f:28:cf:d2:29:51:d2:
38:d4:50:1a:d6:37:98:2e:81:c5:9a:f0:08:d2:37:
66:87:f9:32:5b:98:3d:4a:52:7f:00:3f:b7:ba:3a:
10:71:25:3f:a6:f1:a8:71:c6:6f:3f:df:42:73:65:
ce:d5:6e:22:98:a0:08:3e:47:e0:4c:de:56:d3:f4:
85:66:71:c6:27:82:9d:94:b6:20:02:48:3b:b7:c5:
b4:48:e6:a8:c0:a9:a4:46:5b:45:06:80:a1:d7:db:
b0:0a:e3:75:94:3f:2a:32:0d:93:52:89:62:a0:b2:
db:93:df:a3:7f:0b:d6:c6:a0:9f:98:f8:18:72:ad:
9c:f7:4a:aa:a8:2e:43:87:b2:86:8e:ee:15:1f:d5:
22:ef:2d:40:63:a5:14:5c:f5:a4:f5:83:21:e4:53:
2d:7e:09:25:9b:ca:0e:e3:3f:99:a1:38:5f:9d:3b:
4f:57:89:1c:ca:4a:d0:43:0f:49:2a:77:86:08:32:
7f:14:96:7f:7e:c4:80:4c:78:34:0f:bd:97:69:de:
1d:3d:60:df:ed:e3:65:42:a9:40:94:ac:f9:f4:b0:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:A6:FD:5B:BD:03:34:03:D4:4F:08:7A:74:C8:6F:C6:86:37:CC
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.212.0/22
109.68.127.0/24
178.219.56.0/21
185.57.68.0/22
185.150.164.0/22
194.61.88.0/22
IPv6:
2a02:5960::/32
Signature Algorithm: sha256WithRSAEncryption
87:71:33:e6:0d:45:c2:de:40:4d:b0:00:88:0e:05:f2:07:7e:
88:f3:0f:4e:13:3b:71:aa:63:17:aa:4d:17:31:09:01:4a:30:
74:d8:42:2c:31:6e:95:d7:af:b7:46:fd:c4:9f:54:e7:01:dd:
dd:4c:1d:da:34:d8:38:88:66:d2:33:cb:22:8d:18:8e:3a:73:
63:9a:39:01:8c:7d:54:d7:f9:17:ef:8b:f9:68:01:e9:b9:89:
99:82:ee:44:99:42:43:6d:28:78:cd:78:5c:11:0c:7c:57:8e:
33:6c:e8:f2:fd:15:35:22:23:2f:31:76:21:e9:e9:47:de:1d:
fd:28:3b:e3:60:ab:93:33:f1:c2:7e:ee:15:b8:77:8c:fa:d0:
bf:09:c3:cd:bd:b7:2a:2c:fd:df:1a:17:06:47:31:4f:16:81:
2f:fb:72:ec:c2:f0:c6:2d:de:91:9f:ad:54:3a:3d:21:45:76:
37:20:fc:5d:a5:ba:74:05:b3:79:d5:49:67:a6:45:ef:a0:ad:
82:7b:86:d2:24:2f:9b:32:3c:1e:c3:2b:07:4d:23:6d:67:5c:
ac:dd:0a:ef:b3:2c:69:b7:54:8c:ef:91:52:a0:9a:83:0f:58:
74:f9:00:28:3f:58:25:23:2b:09:ef:f2:ab:87:e4:f3:b4:b9:
7a:b4:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net