Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/HJ-iqyp8teDCa24eSjr0pAbwkBg.roa
File: HJ-iqyp8teDCa24eSjr0pAbwkBg.roa (raw, json)
Hash identifier: lnw5bEWTbPAdCDf8VKUMFjHVqBkUiE14EUeYCxyEPy0=
Subject key identifier: 1C:9F:A2:AB:2A:7C:B5:E0:C2:6B:6E:1E:4A:3A:F4:A4:06:F0:90:18
Certificate issuer: /CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Certificate serial: 018C57DE1379057EF697B1666171D7D68BD0
Authority key identifier: F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/HJ-iqyp8teDCa24eSjr0pAbwkBg.roa
Signing time: Mon 11 Dec 2023 07:53:40 +0000
ROA not before: Mon 11 Dec 2023 07:53:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206265
IP address blocks: 185.188.210.0/24 maxlen: 24
185.188.211.0/24 maxlen: 24
185.188.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:de:13:79:05:7e:f6:97:b1:66:61:71:d7:d6:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Validity
Not Before: Dec 11 07:53:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c9fa2ab2a7cb5e0c26b6e1e4a3af4a406f09018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:73:7c:1e:18:7a:ca:e5:d0:d8:08:37:29:
22:9a:06:68:66:74:d6:73:02:dd:dd:c8:4d:d3:fa:
5e:6c:6d:59:bf:8b:4b:a3:62:fc:4b:b2:84:48:00:
2c:2d:4b:a4:2a:a6:43:91:ba:19:29:30:d9:2b:de:
13:23:f6:6c:fe:70:02:28:b9:73:a7:a6:1a:cc:65:
af:43:e7:24:d8:58:e4:0b:b1:f5:b0:1a:96:f2:df:
1f:b8:ef:38:bb:ad:a7:e4:9d:00:fa:c3:c7:67:f1:
4f:c1:e5:fe:b0:c0:9c:ce:5d:8d:81:5f:75:46:b5:
60:c6:d1:ab:04:ed:9e:01:27:22:5f:d2:8e:fd:5a:
db:60:a0:3a:56:e4:c8:21:29:c7:49:e8:fa:a6:73:
e7:f8:9d:ce:9a:81:77:ea:25:ee:df:3d:5c:24:d4:
07:d9:1b:7e:29:63:a0:b3:49:33:c7:3b:b4:f8:b4:
d7:51:70:e2:77:6b:18:13:d0:c2:34:1c:81:aa:fd:
68:35:e9:62:6d:59:43:4f:b1:56:9f:91:eb:5f:e9:
8a:29:c8:15:61:e4:21:00:f0:78:9c:1d:2d:44:5a:
28:ee:d0:54:fa:72:cb:8a:22:58:79:4a:ca:b9:6b:
6a:42:3a:16:4e:4c:23:bf:ec:07:dc:58:e2:44:3c:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:A2:AB:2A:7C:B5:E0:C2:6B:6E:1E:4A:3A:F4:A4:06:F0:90:18
X509v3 Authority Key Identifier:
keyid:F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/HJ-iqyp8teDCa24eSjr0pAbwkBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.208.0/24
185.188.210.0/23
Signature Algorithm: sha256WithRSAEncryption
35:5e:3f:7d:e2:be:57:88:7b:4c:96:3c:27:bd:e8:7a:c3:b2:
61:85:6e:9f:36:4d:bf:bf:3e:25:ab:59:76:e2:b2:4c:f3:e9:
b2:a4:5a:f6:95:8c:90:08:83:ba:3d:6f:fe:1a:59:4e:53:ac:
d6:88:9e:db:b3:1a:20:d5:38:10:69:2c:70:92:c8:b3:68:4e:
13:73:6f:b5:e5:73:06:20:95:ec:0a:4c:03:65:d5:13:d6:b2:
0e:df:d3:12:8b:51:97:42:19:03:0a:8e:96:d4:60:8e:00:7b:
86:20:11:d6:1a:8b:ad:03:e1:d9:0a:de:0f:ba:15:29:d5:43:
c4:0e:05:a5:ec:ae:b4:f0:c2:7f:09:1a:dc:7f:7b:d5:18:28:
f8:4b:d6:64:09:58:f4:ab:fa:55:96:99:3f:86:3d:1c:0d:78:
e4:53:3f:09:b6:31:ae:8b:a8:64:8b:70:64:ed:87:78:5b:db:
5e:85:b9:95:29:8e:fb:9a:ee:82:fe:c6:de:90:89:e3:f3:a5:
2b:19:0a:76:cf:a5:1a:cf:23:98:22:9f:a4:ff:e9:d7:47:c0:
ff:8f:58:c5:04:16:84:eb:f1:2d:6f:ec:40:e6:40:c7:9e:6a:
21:6d:fb:f5:71:c6:f8:00:7f:e7:15:bb:c2:ea:e4:ff:a6:50:
a2:bd:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:34 2025 by rpki-client