Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hvffi-_xgyC5J5jSDMkxnoMTl3M.roa
File: hvffi-_xgyC5J5jSDMkxnoMTl3M.roa (raw, json)
Hash identifier: I2c4qdHbFQpNEa0T7znYVhPLMafEmIC+AjGDS4F1X/Y=
Subject key identifier: 86:F7:DF:8B:EF:F1:83:20:B9:27:98:D2:0C:C9:31:9E:83:13:97:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246AA4F1B244B72B04B003F4FE80EE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hvffi-_xgyC5J5jSDMkxnoMTl3M.roa
Signing time: Thu 02 Jan 2025 17:51:02 +0000
ROA not before: Thu 02 Jan 2025 17:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26506
IP address blocks: 185.207.13.0/24 maxlen: 24
2a00:1728:2c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6a:a4:f1:b2:44:b7:2b:04:b0:03:f4:fe:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f7df8beff18320b92798d20cc9319e83139773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:35:5b:00:d7:60:75:72:ba:56:76:a9:91:
66:2f:66:03:28:be:e8:73:9e:54:f6:df:da:ba:fa:
ea:c2:61:86:96:21:32:01:0e:5c:13:4c:a1:e9:3a:
52:8e:ef:41:da:88:34:54:45:68:1a:0e:0e:4b:ef:
46:1f:9c:9c:6f:ab:30:2f:86:ae:65:2c:f7:f4:f9:
1e:11:5e:46:93:27:75:c9:dc:91:4f:99:0f:03:51:
85:58:5e:44:39:e5:8e:03:98:69:9b:76:8c:d7:62:
b1:57:52:33:3d:d8:08:18:d3:88:39:51:2f:11:2f:
6d:01:10:26:c9:fc:77:d9:40:e2:4e:1b:4b:e7:9e:
2f:23:64:e5:37:93:56:c7:20:85:89:47:f3:05:41:
8f:e9:d6:73:dd:3c:ef:0e:1a:20:27:28:39:61:20:
5c:d2:61:85:19:93:f7:65:14:c6:15:4b:bf:d7:b5:
c2:75:50:7e:0c:21:6c:a7:20:8a:83:3a:de:c6:22:
b9:23:fb:cc:ac:d9:f8:7f:d8:34:50:e5:a9:f6:0b:
26:72:11:44:80:bd:98:36:99:21:8c:ee:6e:ab:43:
20:8e:23:69:96:ed:26:5d:2b:07:e7:01:92:ea:18:
89:ab:ca:e9:5f:61:0e:4e:0e:af:c9:8d:42:bf:51:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:DF:8B:EF:F1:83:20:B9:27:98:D2:0C:C9:31:9E:83:13:97:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hvffi-_xgyC5J5jSDMkxnoMTl3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.13.0/24
IPv6:
2a00:1728:2c::/48
Signature Algorithm: sha256WithRSAEncryption
8c:01:52:86:42:81:17:b7:01:c2:72:b2:ea:23:d2:25:64:69:
00:45:7f:d5:97:05:3f:e7:eb:84:70:e4:96:96:1a:45:08:16:
33:bf:a9:8f:be:f6:92:e5:02:5b:b3:2f:63:22:df:9e:60:1b:
b5:62:3e:bb:8b:ef:31:13:ab:04:a3:8d:6e:fc:e1:22:16:a8:
98:05:d8:de:8c:4c:86:3a:28:07:59:e5:8c:39:43:7f:e3:a3:
ef:71:95:50:a5:ac:10:de:7e:56:ee:f9:3b:6c:15:d1:be:06:
cc:a0:e7:17:87:aa:53:9c:76:91:97:70:b3:db:c0:ce:9b:40:
6f:a1:d4:df:01:21:cb:91:d3:39:1d:23:fe:99:23:08:ed:f4:
7b:2a:ab:bd:60:d4:c7:69:09:68:42:63:95:98:6d:9a:e4:ae:
39:30:c7:ac:80:07:96:dc:dd:17:32:54:7a:72:30:ca:81:2a:
45:18:f5:66:f7:49:da:1a:80:8e:33:ba:4e:14:7a:ec:9d:02:
ff:de:e5:a9:df:af:9e:f0:a1:8f:b5:c5:22:ca:43:2f:fb:ea:
de:5c:19:af:bf:fe:0c:dc:e6:04:29:88:26:70:a1:a5:96:e0:
78:b6:96:04:95:01:17:60:a2:38:8c:b4:cf:7f:a7:61:d3:e0:
b5:c2:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:59 2025 by rpki-client