Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa
File: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (raw, json)
Hash identifier: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=
Subject key identifier: 1E:E7:B4:2B:FD:43:78:56:03:A8:9C:BA:CD:C1:EA:7A:86:74:99:1E
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019425222BF3A21ADD4ACEAA5E6FF7A968C6
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57794
IP address blocks: 37.98.192.0/21 maxlen: 21
37.98.192.0/22 maxlen: 22
37.98.196.0/22 maxlen: 22
82.192.2.0/23 maxlen: 23
82.192.2.0/24 maxlen: 24
82.192.3.0/24 maxlen: 24
185.92.164.0/22 maxlen: 24
188.117.192.0/21 maxlen: 21
188.117.192.0/22 maxlen: 22
188.117.196.0/22 maxlen: 22
188.117.216.0/22 maxlen: 22
188.117.216.0/23 maxlen: 23
188.117.218.0/23 maxlen: 23
188.117.224.0/21 maxlen: 22
188.117.232.0/21 maxlen: 22
188.117.240.0/22 maxlen: 22
188.117.240.0/23 maxlen: 23
188.117.242.0/23 maxlen: 23
188.117.248.0/22 maxlen: 22
188.117.248.0/23 maxlen: 23
188.117.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:f3:a2:1a:dd:4a:ce:aa:5e:6f:f7:a9:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee7b42bfd43785603a89cbacdc1ea7a8674991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:c6:16:9a:32:da:4c:72:d1:32:a7:e1:80:
f9:f9:4b:94:47:cc:15:1d:d7:1c:1b:9f:01:1d:07:
b0:fb:0e:e1:14:53:5c:5b:a3:b7:45:23:f7:1f:03:
57:8f:6b:63:d0:a6:5d:23:0d:08:45:46:9f:8b:08:
cf:95:86:35:71:d3:1d:9c:a9:0a:78:f5:90:ee:3a:
0f:cc:fc:4e:a9:50:99:dc:d7:f1:7d:60:ae:86:34:
62:5f:15:36:36:1e:8f:44:10:46:94:44:ef:18:af:
25:9e:91:a5:6a:f2:2a:00:e3:78:6b:fa:0e:93:a6:
4c:78:83:d7:b7:3e:f0:1e:30:d3:96:30:a4:51:89:
72:87:38:b7:cb:b5:d2:f3:18:0f:56:73:6d:65:4e:
ae:5a:61:b8:32:86:14:a5:9a:aa:d6:6c:21:cb:93:
da:ea:c5:22:a4:0c:af:10:31:82:a3:02:77:a0:58:
55:4e:65:f2:d2:4d:dd:66:2a:8e:d0:39:15:a9:70:
c7:2c:65:e3:93:28:cf:e9:26:79:5e:9a:37:c4:b5:
23:12:90:a4:b1:ca:04:f4:94:9e:fd:c8:c3:ad:0e:
96:88:64:54:0f:e5:f6:dd:4b:ec:cc:f2:db:57:a5:
70:96:f5:b5:9e:91:fa:36:24:fd:74:9f:fd:32:4e:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:B4:2B:FD:43:78:56:03:A8:9C:BA:CD:C1:EA:7A:86:74:99:1E
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.192.0/21
82.192.2.0/23
185.92.164.0/22
188.117.192.0/21
188.117.216.0/22
188.117.224.0-188.117.243.255
188.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d2:c4:0b:e0:75:39:a9:d0:bb:dd:aa:32:14:a5:60:81:3f:
bd:83:16:e1:d2:4b:14:93:a1:46:8e:8b:33:e8:cb:17:7d:50:
d1:51:f9:85:f0:ec:ae:76:e5:7b:87:64:e4:36:6b:f6:18:47:
b2:67:a6:ec:12:00:a2:be:01:af:8c:a4:7a:f2:51:99:05:62:
fe:d6:c0:95:76:23:2d:2d:0c:18:ca:51:4c:30:6f:16:64:fc:
fc:7b:75:a2:9d:2e:dc:fd:e8:aa:3d:5c:f9:cb:f9:7b:08:4e:
90:4c:22:b7:dc:e2:7e:c8:57:f5:8c:da:e7:12:85:9c:29:69:
ad:bb:dd:be:9a:42:96:02:05:ef:96:b9:bd:70:ca:ef:69:f4:
f8:62:4a:e6:ca:07:9b:08:8d:74:50:b9:ea:32:ff:c9:b3:1e:
10:93:dd:6f:a6:d6:ed:ff:46:d6:a0:c2:bd:e9:01:c4:e0:9d:
e8:ec:71:8a:67:ae:22:91:dd:cc:0c:4e:f3:db:3a:ff:e1:e6:
27:61:34:0e:51:d3:38:ae:38:0a:0e:bc:64:e5:c3:79:83:62:
ac:11:f4:f6:4a:8b:03:7a:9f:eb:75:ff:6a:3b:93:1a:3b:61:
64:60:c7:f9:1a:d7:ad:04:8e:90:a7:0e:43:d8:e9:d3:a1:c5:
ce:8b:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net