Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/HUYhFOHtfiB3vDSEIFzhbEkO_rc.roa
File: HUYhFOHtfiB3vDSEIFzhbEkO_rc.roa (raw, json)
Hash identifier: Oz3wwjjKfQQtE7BDwQpTxjS9aPgTRQmy98ALxeuqcWk=
Subject key identifier: 1D:46:21:14:E1:ED:7E:20:77:BC:34:84:20:5C:E1:6C:49:0E:FE:B7
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01847D5D18FAF0897410F05DB733B4090F63
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/HUYhFOHtfiB3vDSEIFzhbEkO_rc.roa
Signing time: Tue 15 Nov 2022 22:16:04 +0000
ROA not before: Tue 15 Nov 2022 22:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50304
IP address blocks: 45.15.19.0/24 maxlen: 24
2a0e:1c80:19::/48 maxlen: 48
2a0e:1c80:7::/48 maxlen: 48
2a0e:1c80:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:5d:18:fa:f0:89:74:10:f0:5d:b7:33:b4:09:0f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Nov 15 22:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d462114e1ed7e2077bc3484205ce16c490efeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:f4:5c:51:c5:ea:09:dd:bf:7e:d4:93:4b:
3d:63:9a:c3:3c:57:f3:f0:98:45:0f:62:1f:fb:d6:
be:31:14:d6:fb:41:fe:61:a4:d3:09:f2:0d:b7:63:
aa:72:ca:2d:0b:bf:e1:1b:0a:ab:81:25:8b:73:20:
95:46:60:09:f5:79:fc:a5:c1:44:44:0b:87:0c:d5:
86:4f:cd:d4:6f:10:5e:e8:e5:47:17:9d:57:28:26:
c8:a0:ae:f4:5f:b4:18:d9:93:d3:83:58:e6:b7:f7:
1c:5a:3b:0b:63:14:f0:91:f4:df:2a:de:0f:fa:30:
9a:4d:fe:4a:cf:f7:15:37:cb:54:58:a7:3b:a9:1b:
91:93:c2:2e:a5:a3:d2:93:95:d9:00:3d:81:1d:05:
77:05:81:9e:67:e9:9f:02:64:09:db:58:ea:af:f6:
5b:8a:36:ff:80:8f:1b:7e:d0:60:32:f0:e4:9d:d9:
54:2d:bd:6e:f6:af:87:be:11:d6:dd:a2:d1:6e:8e:
09:49:ec:a2:38:26:b6:59:7f:2f:95:91:af:36:9e:
51:5e:0f:8f:48:51:9c:14:1e:f3:0a:f7:b3:4a:ec:
10:45:61:2e:e3:8d:98:9c:9d:a1:d3:09:57:a9:2f:
89:bc:fe:ba:c6:b5:66:d1:9b:e1:84:ad:e7:6e:ad:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:21:14:E1:ED:7E:20:77:BC:34:84:20:5C:E1:6C:49:0E:FE:B7
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/HUYhFOHtfiB3vDSEIFzhbEkO_rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.19.0/24
IPv6:
2a0e:1c80:2::/48
2a0e:1c80:7::/48
2a0e:1c80:19::/48
Signature Algorithm: sha256WithRSAEncryption
92:dd:cd:aa:8e:6d:df:84:11:d0:6e:68:05:ab:06:e8:25:63:
c5:b5:3c:3f:4c:aa:0b:bd:98:5a:4b:6a:2e:66:89:ad:c3:d4:
ec:6f:38:c0:bb:0e:fc:86:28:86:9b:ba:a1:f1:2e:30:7a:6d:
8f:75:5d:68:d7:94:3d:6c:2c:9e:23:95:68:3d:67:2c:9d:7f:
58:69:eb:a2:6f:56:18:f3:82:bb:72:80:2b:f7:f8:5d:52:b5:
57:53:17:80:af:50:23:5a:a4:ca:22:02:3d:d7:1d:7a:f9:77:
8b:41:ed:b9:47:63:d2:80:8a:62:3b:71:74:36:69:57:9f:fb:
70:67:7d:09:61:7d:e2:6d:55:34:65:35:ef:07:68:ea:55:d0:
15:bb:0f:b6:c8:51:1f:d3:04:f0:5d:7f:5f:58:a8:e2:95:0c:
fb:dc:da:90:18:fb:2b:a3:37:bc:4f:06:d9:38:43:d8:64:2f:
c7:09:c2:8b:ee:98:9c:ae:28:72:9f:aa:97:af:97:7c:e5:20:
eb:91:1e:c4:67:cf:52:72:29:bd:13:8e:30:4d:83:c2:29:fd:
23:5e:3d:67:fd:d6:7d:22:2f:1d:1b:3c:73:8b:ae:77:ea:cf:
77:bf:be:2b:fb:42:b9:97:8e:9f:65:4f:7f:a5:4f:71:19:b7:
61:10:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:14:57 2025 by rpki-client