Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa
File: HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa (raw, json)
Hash identifier: D9mkb/r3quYRr8SAt68TwHmtLFpg3Gut24nbmI/VIgk=
Subject key identifier: 1D:F8:56:7E:6F:BC:27:02:08:89:06:29:FE:21:CE:E1:F7:77:00:D9
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0195A518EFB102EC63BCCA7450C248A47AC7
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa
Signing time: Mon 17 Mar 2025 17:13:49 +0000
ROA not before: Mon 17 Mar 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.237.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:18:ef:b1:02:ec:63:bc:ca:74:50:c2:48:a4:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Mar 17 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1df8567e6fbc270208890629fe21cee1f77700d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:65:5a:44:fe:b9:be:a3:6b:e4:47:b0:c7:
3a:ee:0c:fe:d5:12:4b:ba:06:2a:71:17:98:0a:b3:
bf:9c:08:42:e6:76:34:e6:b4:cb:33:6a:ce:73:ac:
db:01:f8:3e:68:68:5b:28:a5:24:ce:12:ed:6b:27:
8e:35:ca:48:44:f1:13:2b:07:70:1c:89:b5:99:b7:
89:0d:4e:26:04:a5:25:8b:ca:16:cd:91:8f:2a:b8:
98:f0:4e:11:82:55:cd:87:d7:37:fd:bb:27:6e:d1:
13:d5:ef:f8:e0:99:25:f1:87:4d:f4:4c:52:4b:a9:
44:c1:b2:e4:18:70:f5:18:cd:c8:30:d7:ef:cc:44:
13:a9:49:f9:07:64:4a:ba:5f:80:f0:28:a0:a8:0a:
1e:30:4d:77:f4:5c:21:89:e7:89:fd:03:02:7d:a8:
2c:5e:57:61:85:58:33:d5:0f:d4:4f:c8:b2:3f:67:
82:20:05:0f:72:e8:5c:8f:85:3e:6b:d2:2c:52:cd:
f2:a5:65:a4:75:49:ca:2b:e4:34:f3:fd:4e:0d:62:
9a:ff:c3:6c:e2:35:b3:a0:f2:40:f9:98:e6:90:21:
f7:cc:ca:7a:e8:e7:17:98:10:df:8e:2a:14:16:dc:
b5:a0:d5:27:46:ef:a1:18:78:69:a4:1f:df:6b:c8:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:56:7E:6F:BC:27:02:08:89:06:29:FE:21:CE:E1:F7:77:00:D9
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/HfhWfm-8JwIIiQYp_iHO4fd3ANk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:76:91:b3:c3:af:2f:ee:66:06:6e:ee:06:d3:4a:ab:36:5a:
e4:84:1e:22:23:b7:2a:92:e2:03:db:87:8a:1c:a0:2c:ef:4c:
7a:a2:77:78:19:b7:27:cc:4f:b6:32:26:b0:0a:20:b9:06:b0:
46:b3:92:1f:ac:b1:e6:34:90:c9:dc:df:7f:63:8f:df:71:71:
7e:4f:e4:27:2e:96:11:95:07:35:5d:e0:31:4b:0b:77:18:3d:
e1:0f:06:ea:f3:2c:5d:84:90:8f:c6:c9:54:db:46:6a:de:9c:
49:10:ac:2e:71:9d:7a:6d:a4:81:e2:18:75:81:5e:0e:e8:38:
7b:e0:6d:c5:90:da:ed:d1:f8:8a:1f:32:60:fe:c6:10:f1:20:
fa:1d:6e:b4:ae:de:bc:6a:b9:4e:79:a2:83:44:25:4a:be:64:
67:74:c3:62:43:ad:05:36:1e:48:bf:c3:c0:2a:8c:8b:ea:81:
6d:2e:ee:24:68:93:c6:93:2c:f5:3a:b3:e8:96:43:b0:aa:49:
df:6f:b6:41:1d:ff:7b:d1:d6:95:6e:0b:dd:1a:e4:39:23:07:
5b:f5:6a:04:db:92:1a:38:fa:6f:4f:8b:c5:f2:52:fb:59:db:
9f:ed:f2:30:2e:ff:ae:b0:7a:f6:99:ee:cc:96:0d:0f:01:47:
44:00:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:07 2025 by rpki-client