Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa
File: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (raw, json)
Hash identifier: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=
Subject key identifier: 1C:A0:E5:4D:4B:0B:D5:F9:81:FA:88:80:65:C5:B1:58:13:E9:0D:C5
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 01941F8C81AFFE342E6D8D2672DE64DED0EF
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.211.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:af:fe:34:2e:6d:8d:26:72:de:64:de:d0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ca0e54d4b0bd5f981fa888065c5b15813e90dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:74:f5:cc:c2:0f:ab:a6:8c:51:01:5c:8a:
fc:89:ec:7e:57:d3:21:ce:fa:1c:01:f9:88:e8:55:
eb:c5:a7:35:9c:ad:cf:8d:3b:9c:e1:1d:6a:fd:82:
60:91:f8:ce:56:f5:e3:6a:00:22:59:a5:4e:9c:22:
22:77:f0:42:85:f0:36:4b:1c:51:fe:ee:41:df:62:
39:d1:e5:7c:0f:87:74:9a:f9:32:64:0e:ae:03:23:
f9:d0:b4:28:66:bf:48:8e:34:d2:1e:51:fb:2f:ec:
83:71:9e:e0:9e:a6:e1:aa:29:10:1a:93:43:52:0f:
8e:63:1a:51:83:1a:a6:f2:08:25:ce:3e:41:b7:60:
b2:3f:16:55:73:50:88:59:83:65:be:5c:19:b6:60:
ce:a8:d9:97:7c:7b:72:0a:dc:1c:3f:7d:fe:e6:1b:
f8:e8:02:02:37:28:de:72:6d:fc:76:fd:b9:3e:cf:
62:b3:dd:04:73:ef:1b:90:6b:71:a4:7e:ad:a9:ca:
6e:0b:fd:ef:20:89:0c:d9:ca:48:13:4f:c0:c3:6d:
e8:02:f9:42:9d:b6:83:b1:e8:e4:1f:5d:64:65:aa:
31:52:9d:3d:20:9f:ac:4e:e2:9b:17:a3:00:cb:73:
c9:d5:22:30:29:27:be:62:e3:07:11:7f:ba:6c:82:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:E5:4D:4B:0B:D5:F9:81:FA:88:80:65:C5:B1:58:13:E9:0D:C5
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.10.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:34:d3:4c:32:b2:b6:94:88:1f:76:50:01:c3:52:73:77:
f3:17:99:19:4f:cc:73:1c:b6:65:37:08:99:74:57:45:22:d4:
24:ab:42:ff:b8:14:a4:61:4b:47:5c:a6:0b:0a:2c:d3:27:7b:
c3:72:1e:3b:42:9c:19:eb:dd:fe:71:dd:64:6b:91:b4:95:44:
b4:e5:e1:b2:46:08:cc:de:51:04:fc:76:10:14:4b:9d:d8:e5:
ce:a2:a6:f5:a3:b4:d5:ab:67:6a:10:68:5a:8e:de:ee:98:ca:
eb:24:22:68:6f:06:13:6e:cd:88:ce:ae:e9:97:33:3a:1f:0b:
58:68:9e:ca:0d:3d:ae:ab:a3:12:28:b4:00:fc:62:07:b5:04:
1e:a0:05:c5:d8:ae:da:50:7c:fc:71:a7:b6:dd:0d:f0:5e:00:
d7:16:36:95:f9:60:9f:93:26:2e:26:1e:29:92:4d:c0:cb:3f:
9c:43:dc:4c:9d:53:19:7d:9b:47:3b:4a:5b:30:a5:60:56:54:
4b:91:e6:37:1e:c1:45:af:44:ac:37:d0:80:be:22:b3:71:3f:
46:2c:28:1a:e2:14:44:b4:89:03:16:9d:46:4d:56:24:91:82:
75:18:52:ca:a9:01:bb:93:6b:45:64:67:09:42:70:42:1f:29:
96:96:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:45 2025 by rpki-client