Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/h9060_GP774mLO77LC6My7l_Iqk.roa
File: h9060_GP774mLO77LC6My7l_Iqk.roa (raw, json)
Hash identifier: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=
Subject key identifier: 87:DD:3A:D3:F1:8F:EF:BE:26:2C:EE:FB:2C:2E:8C:CB:B9:7F:22:A9
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1AC45584B4FB5A29D79142C4C2BD2
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/h9060_GP774mLO77LC6My7l_Iqk.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57271
IP address blocks: 185.238.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ac:45:58:4b:4f:b5:a2:9d:79:14:2c:4c:2b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87dd3ad3f18fefbe262ceefb2c2e8ccbb97f22a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:55:b0:e9:77:4f:c3:43:43:42:0c:a8:7c:
1a:ab:17:c5:b7:8a:45:1c:a0:31:8a:b0:aa:c3:a9:
da:57:2f:db:6f:b0:0d:ab:68:e8:12:51:30:8f:42:
37:54:3a:f9:13:98:b2:8c:7b:9e:e4:c1:0c:b3:54:
36:9c:b7:62:5e:3f:80:58:44:1d:34:50:8c:2e:db:
47:75:b1:9c:e0:de:3d:d0:8f:ba:df:11:b1:5b:82:
d1:7a:df:a2:19:c2:47:2c:b8:1d:63:fe:ee:a8:bc:
8e:39:a1:58:e4:25:1d:cd:f7:33:6d:88:e2:b9:63:
da:6a:32:98:68:e8:2d:7f:72:94:45:61:f0:36:0d:
41:dc:b2:ff:1e:52:9c:58:3d:25:1d:c1:42:d0:44:
20:c7:d7:02:da:3d:8b:06:af:03:be:d8:00:47:9d:
98:62:4f:56:b8:01:f9:2a:30:64:4a:b8:f3:aa:b7:
95:0a:f6:45:a5:fd:ea:f4:cb:c2:14:69:8c:cd:ba:
5a:4a:9b:25:c8:ca:9a:88:16:f7:b3:f2:c0:7e:e1:
bc:ec:69:60:9f:e8:ba:96:6e:ce:48:9d:d4:15:11:
ce:a9:b3:2c:f0:dd:bd:a2:1d:cc:f9:da:6d:ba:dd:
95:d1:51:ef:39:2f:09:6e:ac:c3:2d:38:80:d7:14:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:3A:D3:F1:8F:EF:BE:26:2C:EE:FB:2C:2E:8C:CB:B9:7F:22:A9
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/h9060_GP774mLO77LC6My7l_Iqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f0:f3:15:68:39:1e:3f:9a:25:ab:25:81:2f:1c:12:85:52:
37:9a:cb:2d:03:d9:da:4c:e5:ad:1e:01:d6:7e:1b:5f:f1:62:
39:58:f9:8e:46:1a:3e:f2:9a:3f:f5:cd:2d:22:30:bf:60:2a:
eb:7b:6d:5d:1d:b7:7f:87:c7:24:77:ab:80:94:e8:f6:5a:44:
3b:61:bc:84:01:c8:62:0d:12:6b:91:b7:ec:74:9f:51:63:a8:
8b:bc:86:a8:ba:79:bb:93:c0:1f:27:2c:a1:9f:a7:0b:28:e5:
93:2f:3e:e5:a0:82:43:c9:22:df:b6:63:f7:b6:ef:bc:f8:9f:
1b:a1:dc:30:cd:6b:01:0d:44:fc:3b:a1:49:8e:d5:ed:34:20:
f5:2f:5a:2b:1f:93:0e:04:42:42:0c:5f:fc:17:cd:ed:a7:f9:
26:81:a1:74:c2:76:37:2b:65:e6:e8:9d:fd:1a:22:6d:63:6b:
a5:f4:72:45:14:f5:70:52:f0:f2:46:f5:fb:44:b9:cd:84:ae:
65:02:cc:b7:5a:96:85:36:c4:46:90:31:32:5d:48:ad:27:6c:
5c:1e:f8:4f:f6:7f:7d:2d:17:94:03:2b:43:5c:94:63:19:cc:
2d:3a:56:09:b1:67:b6:ca:1c:eb:4f:91:1a:91:50:6d:2c:46:
17:bf:1b:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsaxFWEtPtaKdeRQsTCvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUwMTAxMTE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2RkM2FkM2YxOGZlZmJlMjYyY2VlZmIyYzJlOGNjYmI5N2YyMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJVsOl3T8NDQ0IMqHwaqxfFt4pF
HKAxirCqw6naVy/bb7ANq2joElEwj0I3VDr5E5iyjHue5MEMs1Q2nLdiXj+AWEQd
NFCMLttHdbGc4N490I+63xGxW4LRet+iGcJHLLgdY/7uqLyOOaFY5CUdzfczbYji
uWPaajKYaOgtf3KURWHwNg1B3LL/HlKcWD0lHcFC0EQgx9cC2j2LBq8DvtgAR52Y
Yk9WuAH5KjBkSrjzqreVCvZFpf3q9MvCFGmMzbpaSpslyMqaiBb3s/LAfuG87Glg
n+i6lm7OSJ3UFRHOqbMs8N29oh3M+dptut2V0VHvOS8JbqzDLTiA1xQ+pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfdOtPxj+++Jizu+ywujMu5fyKpMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvaDkwNjBfR1A3NzRtTE83N0xDNk15N2xfSXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue5bMA0G
CSqGSIb3DQEBCwUAA4IBAQDJ8PMVaDkeP5olqyWBLxwShVI3msstA9naTOWtHgHW
fhtf8WI5WPmORho+8po/9c0tIjC/YCrre21dHbd/h8ckd6uAlOj2WkQ7YbyEAchi
DRJrkbfsdJ9RY6iLvIaounm7k8AfJyyhn6cLKOWTLz7loIJDySLftmP3tu+8+J8b
odwwzWsBDUT8O6FJjtXtNCD1L1orH5MOBEJCDF/8F83tp/kmgaF0wnY3K2Xm6J39
GiJtY2ul9HJFFPVwUvDyRvX7RLnNhK5lAsy3WpaFNsRGkDEyXUitJ2xcHvhP9n99
LReUAytDXJRjGcwtOlYJsWe2yhzrT5EakVBtLEYXvxsm
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:25 2025 by rpki-client