Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/hEr345EKe6TR-GDdFLEsJeYIavM.roa
File: hEr345EKe6TR-GDdFLEsJeYIavM.roa (raw, json)
Hash identifier: qE5V9hcxxOzfz6t697ylC0toyPGeJQf7QhNvoewJ29Y=
Subject key identifier: 84:4A:F7:E3:91:0A:7B:A4:D1:F8:60:DD:14:B1:2C:25:E6:08:6A:F3
Certificate issuer: /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial: 0183E349
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/hEr345EKe6TR-GDdFLEsJeYIavM.roa
Signing time: Sat 01 Jan 2022 10:04:27 +0000
ROA not before: Sat 01 Jan 2022 10:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42947
IP address blocks: 95.214.241.0/24 maxlen: 24
95.214.242.0/23 maxlen: 24
94.154.3.0/24 maxlen: 24
5.181.236.0/22 maxlen: 24
45.14.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25420617 (0x183e349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Validity
Not Before: Jan 1 10:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=844af7e3910a7ba4d1f860dd14b12c25e6086af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:4e:bc:d5:ad:d9:bb:b6:74:9d:ea:aa:0c:
d6:8e:28:e4:3b:f1:fa:e9:6a:91:c2:9b:fb:02:ca:
c7:29:73:4b:74:d3:90:52:9c:14:a7:69:82:98:ba:
c2:5f:2b:6b:45:5c:1a:55:fa:9a:c5:01:c7:f3:6d:
a0:85:1a:d7:7f:88:25:cf:ef:81:4b:1e:be:eb:a1:
29:8c:aa:c9:91:e6:5c:ec:df:7c:30:7b:02:5f:b5:
e3:a3:5c:b3:9d:c0:ba:db:cb:78:5b:08:89:c0:81:
ff:b3:7d:34:60:d1:c3:67:7b:7f:b5:ba:6b:35:12:
69:48:55:f3:b7:69:32:b1:82:35:ba:0c:0c:b9:1f:
08:09:d2:39:2a:54:e7:82:d6:6b:a8:24:c1:06:2a:
05:41:d0:5e:48:de:1f:a8:f7:bf:eb:18:f8:f3:06:
b0:15:72:7e:11:f6:c5:80:62:84:9b:02:e3:fd:6b:
4e:f3:75:3f:d2:c2:d3:a4:34:b2:49:52:cd:40:45:
15:02:70:72:d8:9e:65:18:8d:54:5a:44:b2:df:75:
bf:1d:d7:da:58:40:ef:0d:b2:5f:6b:e7:05:d8:b9:
11:c8:d5:44:6a:30:65:8f:41:ce:d6:bf:2b:de:09:
ca:51:d6:9a:8f:67:8f:6a:45:64:51:c3:d3:17:84:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:F7:E3:91:0A:7B:A4:D1:F8:60:DD:14:B1:2C:25:E6:08:6A:F3
X509v3 Authority Key Identifier:
keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/hEr345EKe6TR-GDdFLEsJeYIavM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.14.120.0/22
94.154.3.0/24
95.214.241.0-95.214.243.255
Signature Algorithm: sha256WithRSAEncryption
51:fc:23:3b:e3:a9:1b:5a:29:5f:57:ad:64:cd:72:21:66:72:
f6:ff:9c:35:75:97:6a:63:02:0c:81:44:7e:e0:e3:3f:f4:63:
a3:ed:b1:dd:44:28:52:cd:cf:fa:79:04:7a:f4:f2:24:87:d6:
17:6d:dd:2e:00:3e:62:75:8d:5c:2f:5e:bc:f3:de:b7:5e:da:
a9:42:47:a5:ab:c8:5d:d4:7f:42:75:a6:e9:d9:c7:3c:33:f1:
be:d3:ae:a2:66:ab:56:ec:d3:0e:4f:62:e2:ae:c2:62:ef:51:
22:ac:4d:a6:d4:4a:fd:f6:c8:40:6b:22:d0:89:05:ce:c9:f3:
ba:f2:60:f4:eb:e6:96:33:e4:0c:25:a7:67:76:9b:5c:56:a2:
58:19:20:d5:83:9d:3e:f7:55:b6:a6:7d:dd:7a:c3:a8:2a:37:
41:92:09:8e:4d:49:b4:23:99:67:2f:83:f6:d6:a1:a6:bd:22:
73:f6:13:8a:78:be:12:75:05:00:2a:19:a5:dd:f6:fb:b5:06:
79:ea:e4:5b:26:d7:b2:5d:ac:33:84:20:71:83:96:3e:56:9d:
e2:e1:1f:bf:63:f0:87:9e:05:b6:8b:25:43:2d:a1:2a:57:b1:
54:ff:83:e9:45:65:b7:28:31:dd:56:97:47:8e:15:d5:29:ea:
e7:92:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:14:24 2025 by rpki-client