Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/R_HOCw5P73NNB5qfzoYE_3ubShI.roa
File: R_HOCw5P73NNB5qfzoYE_3ubShI.roa (raw, json)
Hash identifier: tYdokgxqk7M5jXTjwLBwO26v/Z/lq4g8azhuMqo8pVU=
Subject key identifier: 47:F1:CE:0B:0E:4F:EF:73:4D:07:9A:9F:CE:86:04:FF:7B:9B:4A:12
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D7A02C57C60944E7263B0A37F5C51
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/R_HOCw5P73NNB5qfzoYE_3ubShI.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 45.15.19.0/24 maxlen: 24
2a0e:1c80:19::/48 maxlen: 48
2a0e:1c80:7::/48 maxlen: 48
2a0e:1c80:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:7a:02:c5:7c:60:94:4e:72:63:b0:a3:7f:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f1ce0b0e4fef734d079a9fce8604ff7b9b4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:b7:29:30:39:e7:28:05:a9:63:04:fd:9d:
6e:d3:e8:e2:51:99:09:b2:10:8a:dd:e2:f1:70:c0:
25:d9:43:28:11:90:7f:81:54:f1:5d:cd:d4:25:8f:
78:e2:2f:fb:23:01:60:76:f3:38:94:25:16:77:9d:
21:b4:c2:64:89:5a:dd:34:e5:be:04:9d:9a:7d:c1:
5d:ef:bc:f8:1d:ed:b1:89:8e:ea:9d:7e:55:b4:36:
a3:a9:4e:f3:3e:50:ff:13:a5:18:3b:5d:bc:8e:72:
a3:a5:74:f9:c0:53:7d:03:7c:15:2e:31:01:d9:58:
ff:e9:8e:9b:07:63:26:05:90:5c:f3:d5:10:4a:8c:
35:aa:f2:e0:0f:32:7f:f2:5c:24:dd:19:46:ce:07:
33:ee:3a:6c:b0:71:ee:f8:c3:2f:1d:fa:34:b9:6b:
00:87:80:83:85:bf:e0:58:cf:54:76:da:2b:ca:74:
cd:b4:18:51:f7:b2:a4:04:07:37:24:0d:3d:18:34:
87:a2:c9:f6:f1:a8:80:ef:bc:42:2f:d7:4c:c0:f2:
2c:55:8b:f7:81:88:fd:0d:dd:28:1b:b0:2f:dd:c9:
a5:64:1b:01:30:49:50:e4:ab:8a:25:17:a1:68:b1:
1f:2c:30:8f:c5:2e:4a:51:27:17:9b:54:cf:c6:12:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:CE:0B:0E:4F:EF:73:4D:07:9A:9F:CE:86:04:FF:7B:9B:4A:12
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/R_HOCw5P73NNB5qfzoYE_3ubShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.19.0/24
IPv6:
2a0e:1c80:2::/48
2a0e:1c80:7::/48
2a0e:1c80:19::/48
Signature Algorithm: sha256WithRSAEncryption
60:a4:44:09:07:80:12:92:ac:78:78:80:b2:d9:5a:61:de:7e:
35:4b:2d:32:ee:52:43:3f:8d:c9:bc:37:e2:f4:30:a0:46:d0:
56:c6:2b:58:31:a2:6b:7c:d2:fd:08:27:f9:7c:e2:05:a1:f6:
84:3d:3d:c5:a7:2c:ac:d5:46:0e:bb:c2:9f:a1:1a:e6:12:76:
96:3c:f4:dc:5a:b4:b8:b3:53:e4:c8:f2:ea:bd:66:a4:5d:08:
95:3b:eb:05:26:35:6b:9c:41:8c:b4:ee:42:1e:5c:fa:7a:49:
02:35:2b:4e:32:fc:b8:f4:f8:e2:47:24:1c:09:ce:fd:b3:7e:
67:10:88:b4:bd:30:cf:64:b7:9f:13:eb:88:96:11:49:ca:40:
0e:c8:dd:78:96:73:c3:81:20:08:9d:d7:4a:21:c2:fc:17:22:
a5:db:81:23:b2:85:61:7f:df:c6:d9:05:38:1e:b0:17:c5:04:
69:a6:e6:07:45:34:9d:cb:25:9e:00:db:a6:d8:47:1b:39:2d:
6c:43:24:3c:06:4f:2a:dd:3d:51:ea:22:20:29:d0:04:24:93:
c8:b8:d2:c5:98:76:44:c7:23:7b:70:8f:94:de:34:88:68:4a:
4f:be:41:ea:7a:da:02:a1:26:f7:0b:3b:c3:9a:2f:02:84:71:
74:44:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:45 2025 by rpki-client