Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvl4MRHs7LMmR5A3RhmkBEbnBWc.roa
File: hvl4MRHs7LMmR5A3RhmkBEbnBWc.roa (raw, json)
Hash identifier: b4DYJc+DblMjZcfh+abUvUoN63MO2yWWN3DVU5Bhmt0=
Subject key identifier: 86:F9:78:31:11:EC:EC:B3:26:47:90:37:46:19:A4:04:46:E7:05:67
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01953DBC925534ED60A362A7FB7673BCDA9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvl4MRHs7LMmR5A3RhmkBEbnBWc.roa
Signing time: Tue 25 Feb 2025 15:32:03 +0000
ROA not before: Tue 25 Feb 2025 15:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.131.185.0/24 maxlen: 24
139.28.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:bc:92:55:34:ed:60:a3:62:a7:fb:76:73:bc:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 15:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f9783111ececb3264790374619a40446e70567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:f0:64:4b:63:ca:4b:7e:5b:5c:77:c1:85:
bf:e0:e0:8c:43:f3:b1:ae:a0:73:be:bc:c0:57:10:
2c:d5:8a:59:2f:d8:10:1c:b2:d3:ab:af:4a:c9:b3:
ac:42:90:a5:d0:5d:2e:4c:07:c3:2b:f9:9c:f4:cb:
1a:ff:d2:4e:a3:ee:76:97:96:e8:d4:20:0b:0d:39:
59:d9:e4:83:4c:7c:5d:d4:15:8f:56:58:41:59:42:
9e:0e:42:ae:7c:27:47:3c:52:58:09:86:82:36:5c:
aa:d2:75:a1:97:fd:f3:6c:8b:2e:a7:a0:07:05:a9:
09:f3:09:e4:62:f8:1b:15:d8:64:24:1e:61:19:4d:
21:1f:64:a4:85:76:15:ed:b5:f1:b8:30:d3:7e:4c:
81:a3:85:3c:a7:93:57:aa:bd:91:99:6d:2b:c0:8c:
9e:bd:6f:4f:ca:91:1d:c8:f3:a7:a8:15:9c:56:55:
48:d6:29:08:33:ce:21:c4:2d:2d:6a:c9:96:47:b0:
c1:2d:31:8f:7e:93:c3:58:53:ca:38:73:6d:e5:09:
2f:20:80:c9:56:9c:f8:9a:b5:a3:95:da:d0:01:4b:
78:37:5b:5b:6f:0f:93:26:81:25:8b:43:be:52:51:
98:f9:90:a0:f0:61:cb:a1:76:d6:99:c8:51:af:cb:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:78:31:11:EC:EC:B3:26:47:90:37:46:19:A4:04:46:E7:05:67
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvl4MRHs7LMmR5A3RhmkBEbnBWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.185.0/24
139.28.96.0/24
Signature Algorithm: sha256WithRSAEncryption
61:02:b8:36:f1:d0:c7:08:b3:b4:3a:4f:93:4f:5d:44:89:25:
6a:27:7c:6b:54:53:9b:9e:32:91:6e:02:26:f8:a9:63:22:66:
93:fb:35:62:e4:34:a0:1b:d3:d2:cd:de:a5:28:de:24:22:e2:
50:bb:99:d6:47:45:00:b5:8d:7e:25:5e:63:2b:c9:c2:5b:34:
2d:ae:19:87:29:76:6a:9e:19:aa:3a:5d:59:7c:43:b4:34:7e:
02:77:62:5d:c3:0d:3e:0c:83:a4:44:49:aa:f5:15:7b:e7:bc:
38:67:6b:2f:5a:80:0d:7b:90:b1:31:88:83:da:c9:19:9b:a8:
c2:ad:b2:8f:b7:51:e3:ae:ae:e0:ba:8b:89:70:c9:d7:e3:d1:
ce:ff:2e:91:65:35:24:b8:ae:7f:c2:d4:2d:fd:c7:8a:3c:85:
9f:1a:58:4a:0f:e0:dc:45:5c:57:88:59:c9:6d:e0:54:76:ba:
d7:63:52:c5:6e:f1:c3:88:93:b2:07:51:9b:f6:e7:54:bf:fa:
24:f1:6e:e2:fd:2e:c8:16:bb:92:94:13:36:11:6c:8e:d8:04:
42:72:4e:d3:a1:28:a2:f6:c7:9f:f1:4f:73:a9:66:4f:50:f7:
49:a0:bf:85:51:4e:73:78:bc:31:ca:eb:a1:36:e1:13:44:af:
4d:55:dd:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZU9vJJVNO1go2Kn+3ZzvNqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjI1MTUzMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmY5NzgzMTExZWNlY2IzMjY0NzkwMzc0NjE5YTQwNDQ2ZTcwNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03zwZEtjykt+W1x3wYW/4OCMQ/Ox
rqBzvrzAVxAs1YpZL9gQHLLTq69KybOsQpCl0F0uTAfDK/mc9Msa/9JOo+52l5bo
1CALDTlZ2eSDTHxd1BWPVlhBWUKeDkKufCdHPFJYCYaCNlyq0nWhl/3zbIsup6AH
BakJ8wnkYvgbFdhkJB5hGU0hH2SkhXYV7bXxuDDTfkyBo4U8p5NXqr2RmW0rwIye
vW9PypEdyPOnqBWcVlVI1ikIM84hxC0tasmWR7DBLTGPfpPDWFPKOHNt5QkvIIDJ
Vpz4mrWjldrQAUt4N1tbbw+TJoEli0O+UlGY+ZCg8GHLoXbWmchRr8tCSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIb5eDER7OyzJkeQN0YZpARG5wVnMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaHZsNE1SSHM3TE1tUjVBM1JobWtCRWJuQldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYO5AwQA
ixxgMA0GCSqGSIb3DQEBCwUAA4IBAQBhArg28dDHCLO0Ok+TT11EiSVqJ3xrVFOb
njKRbgIm+KljImaT+zVi5DSgG9PSzd6lKN4kIuJQu5nWR0UAtY1+JV5jK8nCWzQt
rhmHKXZqnhmqOl1ZfEO0NH4Cd2Jdww0+DIOkREmq9RV757w4Z2svWoANe5CxMYiD
2skZm6jCrbKPt1Hjrq7guouJcMnX49HO/y6RZTUkuK5/wtQt/ceKPIWfGlhKD+Dc
RVxXiFnJbeBUdrrXY1LFbvHDiJOyB1Gb9udUv/ok8W7i/S7IFruSlBM2EWyO2ARC
ck7ToSii9sef8U9zqWZPUPdJoL+FUU5zeLwxyuuhNuETRK9NVd3z
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:15 2025 by rpki-client on console.sobornost.net