Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HtQDHIujVjXfH6zsj6Bl0SXlHh4.roa
File: HtQDHIujVjXfH6zsj6Bl0SXlHh4.roa (raw, json)
Hash identifier: zJOAO8M7wAK3hPBZk2CPY8KfOSZ5iNbLfzSj9s2DwIM=
Subject key identifier: 1E:D4:03:1C:8B:A3:56:35:DF:1F:AC:EC:8F:A0:65:D1:25:E5:1E:1E
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019423D6A779E2A99E79AF4964EA3141DC27
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HtQDHIujVjXfH6zsj6Bl0SXlHh4.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273133
IP address blocks: 185.217.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a7:79:e2:a9:9e:79:af:49:64:ea:31:41:dc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ed4031c8ba35635df1facec8fa065d125e51e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:f5:8e:4a:c5:d8:fa:1a:60:25:80:07:a9:
13:11:3d:ff:dc:ca:17:39:59:da:1f:8b:11:d0:1d:
e7:22:d7:d4:13:eb:6f:f8:92:9f:a7:c7:f6:08:ce:
1a:95:40:bf:a9:43:9b:3b:48:54:0e:ae:4c:45:46:
22:08:e7:fa:f0:6c:56:33:8e:2a:b6:6f:2c:01:7b:
84:87:f8:75:fc:de:62:fc:ae:f2:28:86:a8:4c:43:
c6:ba:7c:0f:7f:4c:45:a0:2f:6a:9b:25:c9:96:66:
e2:17:f2:18:6b:4a:fa:00:a4:14:3b:0f:41:b0:ae:
47:a6:50:77:bc:7f:dd:e1:48:b6:11:a6:1e:58:af:
fe:6a:5e:a5:b3:79:13:29:06:d4:38:12:fc:3f:0e:
dc:66:dc:27:e6:34:ab:3b:ed:37:d1:de:a5:e6:96:
b1:ba:e9:58:6c:20:e0:98:00:ac:a1:45:9a:ac:83:
79:b2:fc:5c:88:bc:ed:5e:23:27:a8:7d:74:76:90:
26:51:92:33:85:32:9f:5f:8e:b9:23:79:07:42:a8:
df:d2:b3:c6:ab:29:dd:2b:fc:6b:1b:45:5c:51:00:
ec:b0:63:91:b0:91:64:cd:85:fb:cd:37:30:c7:d9:
cf:47:a4:b6:62:0e:10:67:16:a6:a1:d2:5d:c6:f9:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:03:1C:8B:A3:56:35:DF:1F:AC:EC:8F:A0:65:D1:25:E5:1E:1E
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HtQDHIujVjXfH6zsj6Bl0SXlHh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fc:93:5d:79:66:8e:b3:50:12:16:c3:28:ea:18:7e:a0:a4:
e4:6b:2a:a3:31:80:59:71:d3:9a:8b:b4:60:02:9f:63:ab:9e:
74:5b:eb:a1:c3:c5:35:f8:e2:07:51:a1:80:ac:7b:cd:65:a7:
f0:16:3c:5a:11:fe:af:cc:ea:ba:41:22:81:b8:71:56:50:1e:
17:22:3e:41:4e:fb:0a:af:05:89:d9:5b:dc:b8:84:16:35:3a:
b3:9d:97:c3:b2:a8:ab:37:47:ea:79:74:f7:c3:df:aa:7c:ac:
74:95:5c:5b:a6:ad:08:1a:8a:31:dd:d0:af:60:02:c4:e8:df:
5c:f5:ed:09:d8:9a:a7:9e:a5:0c:83:8e:38:63:d5:0d:7b:e6:
f5:66:d8:7a:18:03:c5:87:6e:e8:57:f8:0c:4f:e3:8e:23:0a:
e1:a8:09:4a:ce:92:5a:be:75:96:5c:6a:12:59:2d:4d:3c:16:
27:6c:45:45:3e:19:21:91:5c:1f:9e:e3:92:e3:d1:be:72:11:
e2:b2:39:9d:51:79:25:8a:f3:58:9e:b2:95:ba:d3:b2:b6:6e:
6a:65:f9:f7:2f:ec:d2:a0:78:bc:9e:d1:c0:04:d9:0e:9f:5b:
67:31:00:04:ba:f2:00:3e:c8:27:9a:1d:12:5a:e5:4d:37:b8:
5b:8f:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:35 2025 by rpki-client