Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/HaoSTp4y3eBMBVhTl4gDqxZF8Is.roa
File: HaoSTp4y3eBMBVhTl4gDqxZF8Is.roa (raw, json)
Hash identifier: 7j7//spY+JghhGLBi091Q+zF10lxyC60NOyMfN4cyY8=
Subject key identifier: 1D:AA:12:4E:9E:32:DD:E0:4C:05:58:53:97:88:03:AB:16:45:F0:8B
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 0193A8BB883CB0780B4AFB89D6C2E4F2403C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/HaoSTp4y3eBMBVhTl4gDqxZF8Is.roa
Signing time: Mon 09 Dec 2024 00:04:42 +0000
ROA not before: Mon 09 Dec 2024 00:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a8:bb:88:3c:b0:78:0b:4a:fb:89:d6:c2:e4:f2:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Dec 9 00:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1daa124e9e32dde04c055853978803ab1645f08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:b9:52:6e:57:60:75:23:0f:85:44:a7:78:
ab:15:5f:52:68:e7:24:a2:f3:dc:6d:df:f8:69:04:
6b:ae:b5:0e:18:bd:f9:51:ae:b6:3c:80:6c:e2:1e:
84:0d:b6:4c:e4:d0:0e:0b:54:70:eb:c5:7a:68:25:
cd:43:f8:b9:fa:c8:45:3b:3d:c7:54:27:b7:66:9c:
c3:06:1c:13:ec:55:c5:41:b2:82:55:1c:96:1d:69:
07:26:2b:2e:1b:66:3d:cc:0b:ab:1f:25:35:98:de:
e7:9b:06:d3:c4:84:20:f2:48:67:5d:9c:98:a1:50:
fc:f5:3d:a7:c2:47:ae:2a:e7:e5:1e:80:4c:79:6c:
5c:bd:0b:94:ff:0f:9c:7d:b2:d7:18:78:86:87:7a:
5f:49:1e:93:17:96:e8:85:6d:fa:3f:e8:d2:85:2a:
92:bf:2b:4d:2d:2e:f3:ce:bc:9c:5a:5b:f2:d4:09:
e5:8b:ff:0d:b1:50:9f:15:20:f7:d8:8a:3c:48:55:
d7:29:8b:39:6d:64:02:fe:ed:88:25:e4:75:1e:14:
0d:08:09:5e:0e:5b:16:0c:39:66:3d:e0:0d:b4:76:
1d:8b:e5:54:76:79:11:9a:42:13:72:8b:c7:b5:54:
fa:67:d3:fa:a5:a9:6d:20:b1:d7:fe:f9:ae:65:38:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:12:4E:9E:32:DD:E0:4C:05:58:53:97:88:03:AB:16:45:F0:8B
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/HaoSTp4y3eBMBVhTl4gDqxZF8Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9a:63:6c:c6:fc:36:26:06:cc:27:bc:c7:7e:e4:f6:e0:b3:
23:97:de:ab:93:f5:7b:1e:a4:38:0e:10:a6:76:b9:ae:67:05:
45:17:2a:9a:1a:bf:cb:87:14:35:5e:56:93:0e:20:fb:98:84:
f8:0e:8e:4b:13:04:71:fa:27:9f:88:30:ce:76:56:68:27:89:
f8:b9:05:fb:d0:f7:51:19:b7:73:33:8f:8d:b5:b5:fb:16:d0:
28:f4:eb:a4:95:94:89:8f:ed:14:33:6a:9e:bd:f0:f6:0d:dd:
eb:1c:ae:e6:8c:21:a1:b0:53:52:46:32:2a:b2:20:8d:54:6d:
36:4d:83:31:4d:5c:23:ea:c5:29:b4:d9:c5:2f:d1:ac:4b:40:
f6:c7:cc:ad:94:e0:04:b5:36:37:ef:5d:6d:ec:f5:89:89:bc:
44:01:49:95:19:d9:7e:78:a4:93:e8:0a:5e:50:65:b0:29:18:
e4:33:75:25:42:dc:7a:c9:99:40:69:6f:01:46:b2:bf:ac:18:
6b:91:56:12:0f:86:2e:42:ee:dd:f2:08:b2:25:2e:54:df:68:
4c:eb:62:19:61:f9:f6:ed:65:67:84:3f:e0:ed:ed:93:ba:32:
54:90:a4:64:0a:f5:2a:3d:c1:a4:94:3e:51:8d:65:43:0c:24:
0d:ba:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:27:50 2025 by rpki-client