Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/HUhMVW-ldLEfTap6Snf3A4DJkEU.roa
File: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (raw, json)
Hash identifier: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=
Subject key identifier: 1D:48:4C:55:6F:A5:74:B1:1F:4D:AA:7A:4A:77:F7:03:80:C9:90:45
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019427477D20230B4DBC46C4BC7C5CE990F8
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/HUhMVW-ldLEfTap6Snf3A4DJkEU.roa
Signing time: Thu 02 Jan 2025 13:49:44 +0000
ROA not before: Thu 02 Jan 2025 13:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30870
IP address blocks: 83.98.136.0/23 maxlen: 24
83.98.148.0/24 maxlen: 24
83.98.154.0/23 maxlen: 23
83.98.167.0/24 maxlen: 24
83.98.182.0/24 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.216.0/24 maxlen: 24
83.98.217.0/24 maxlen: 24
83.98.218.0/23 maxlen: 24
83.98.220.0/23 maxlen: 24
89.30.150.0/23 maxlen: 24
89.30.154.0/23 maxlen: 24
89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
213.247.55.0/24 maxlen: 24
213.247.57.0/24 maxlen: 24
213.247.62.0/23 maxlen: 24
2001:16f8:15::/48 maxlen: 48
2001:16f8:666::/48 maxlen: 48
2001:16f8:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7d:20:23:0b:4d:bc:46:c4:bc:7c:5c:e9:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d484c556fa574b11f4daa7a4a77f70380c99045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:a6:92:ac:a7:d8:97:d8:92:bf:1b:6d:64:
2b:e6:0d:fd:df:2e:52:a6:f4:b3:2b:d8:46:1d:0d:
92:c6:08:95:2e:5e:48:95:05:0d:17:f3:97:60:43:
9c:c6:45:5b:b4:2d:9a:01:63:63:3f:76:58:4b:cf:
18:1c:17:61:8e:a9:29:bd:ad:39:31:4b:3a:63:e7:
5e:db:0f:18:d5:42:6c:36:fc:8b:66:66:f0:05:fe:
18:41:ed:65:ee:ab:91:d9:a9:4d:c4:5c:f9:05:a7:
06:a1:4f:c0:56:c2:1f:0c:1c:c7:c3:d4:a6:72:7d:
07:11:00:26:be:04:06:0a:08:68:19:40:be:54:ad:
fb:58:1f:bc:39:c6:54:44:f6:b8:78:da:63:69:c1:
fb:9e:ca:5f:13:4a:4f:5e:04:93:93:ed:b0:9e:de:
0d:3d:18:69:c6:60:ef:97:47:59:28:3d:56:3d:3c:
d7:ab:6f:18:3d:ab:61:3f:a0:fd:72:ff:05:de:34:
05:49:e6:02:b2:30:f9:0a:29:1b:41:b7:68:85:c3:
7e:54:d0:ae:10:6d:8c:4e:86:ef:85:5d:ed:64:c2:
7d:ab:6b:f0:57:ae:34:7a:c9:ca:d4:92:87:9c:b5:
22:1f:74:1c:99:10:32:70:8c:4c:5a:96:3d:71:ee:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:4C:55:6F:A5:74:B1:1F:4D:AA:7A:4A:77:F7:03:80:C9:90:45
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/HUhMVW-ldLEfTap6Snf3A4DJkEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.136.0/23
83.98.148.0/24
83.98.154.0/23
83.98.167.0/24
83.98.182.0/24
83.98.209.0/24
83.98.216.0-83.98.221.255
89.30.150.0/23
89.30.154.0-89.30.157.255
213.247.55.0/24
213.247.57.0/24
213.247.62.0/23
IPv6:
2001:16f8:15::/48
2001:16f8:666::/48
2001:16f8:4000::/48
Signature Algorithm: sha256WithRSAEncryption
a4:32:af:ca:93:26:ca:c3:77:d2:b7:49:75:24:72:21:b4:aa:
18:f9:5d:f2:ea:35:e1:0e:10:e4:e0:5a:b7:65:96:09:e5:bb:
57:48:e8:3f:2f:22:46:69:fb:a4:6e:58:4c:b9:7f:ae:49:83:
eb:7b:4e:75:da:5c:30:ee:35:72:9e:42:fc:f2:e1:d7:e4:6f:
63:ed:b7:cb:22:b5:2c:d3:ad:75:9e:a6:2e:0b:c3:75:a5:bc:
e9:12:e8:f1:dc:78:7a:9f:95:1a:10:f6:09:2c:51:a9:e6:a7:
b5:9c:f6:3e:7e:83:b6:9d:17:7d:37:0a:6e:c4:47:0f:53:6e:
bb:15:4e:1d:fd:68:34:46:c7:df:84:dd:38:77:c2:bc:c1:26:
fa:71:b2:03:12:73:5f:0d:d6:a5:e2:da:59:cb:a1:8b:f8:80:
c6:5a:69:eb:21:2d:fc:39:78:26:7e:b8:a9:9c:b7:a9:69:3c:
bc:32:62:03:08:17:ef:4f:9b:e6:41:a1:5f:0e:72:1d:58:3f:
61:bb:4c:a8:3d:2b:70:65:f9:80:8f:bb:b2:76:94:05:5a:18:
a4:fe:c2:86:e0:70:71:71:3e:8f:71:b0:92:67:1c:bb:83:83:
de:10:cd:16:55:b7:7e:b8:71:cf:4f:a6:28:9f:6e:e5:2b:8d:
d2:1c:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net