Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/1-f8__C0CK7ranFsqDLcjoSQhylg.roa
File: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (raw, json)
Hash identifier: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=
Subject key identifier: F9:FF:3F:FC:2D:02:2B:BA:DA:9C:5B:2A:0C:B7:23:A1:24:21:CA:58
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0194274873663840B8CEC2B0D98638B1F3B6
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/1-f8__C0CK7ranFsqDLcjoSQhylg.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:73:66:38:40:b8:ce:c2:b0:d9:86:38:b1:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9ff3ffc2d022bbada9c5b2a0cb723a12421ca58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:f9:f4:65:cb:c3:f0:16:a2:13:5d:90:d6:
70:6f:4b:bb:b0:c6:9c:d1:b6:3e:40:85:50:7b:1b:
d8:5a:ae:15:b7:45:a0:33:86:70:56:fa:04:fa:7c:
f0:16:df:fd:c5:07:56:92:0b:29:15:e5:e1:2e:67:
e0:0e:8b:ee:08:c7:48:65:56:76:af:11:36:17:a0:
57:ac:e3:18:8a:b6:07:5f:61:e4:ca:79:61:20:39:
92:66:79:1c:c1:c8:54:41:1e:6f:4f:98:2b:43:39:
76:76:d3:8a:aa:b5:84:77:95:7b:0e:6d:5e:67:3d:
dd:c8:e4:b4:4e:a5:1d:54:b8:02:e9:07:eb:b9:a8:
0a:79:62:ea:ba:b6:a9:ca:cd:c6:3f:3a:71:b8:93:
28:da:cb:e6:28:2a:1e:2f:71:69:79:fa:4a:a8:bd:
16:70:4d:8a:44:10:55:69:f5:f8:94:84:05:35:94:
43:4d:01:86:00:a7:4f:10:a3:27:a2:b9:90:5c:22:
49:cf:56:00:e5:ac:f4:fb:df:a1:11:b5:3e:46:f4:
67:5c:be:79:be:5c:6d:f9:3d:52:e5:c6:56:dd:46:
57:bd:12:f4:fe:81:3e:93:04:e6:1c:bf:03:cf:30:
ab:c9:9f:a9:d4:8b:94:a8:02:85:ec:08:ba:9c:60:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FF:3F:FC:2D:02:2B:BA:DA:9C:5B:2A:0C:B7:23:A1:24:21:CA:58
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/1-f8__C0CK7ranFsqDLcjoSQhylg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
88:58:23:9b:6f:00:5a:29:7c:5f:9f:89:a4:dc:91:75:49:f1:
09:21:c8:8b:9b:92:d2:cf:cc:d7:c7:8c:75:dc:63:da:87:81:
02:d9:95:09:0e:e6:65:09:f7:42:65:44:be:bb:ea:2f:1d:e9:
1d:c4:be:c4:11:84:86:2b:60:eb:c5:04:aa:12:41:43:dc:38:
29:5a:f6:5d:4f:75:03:1f:bc:f1:17:c3:fe:78:48:36:e5:4d:
f2:07:05:9c:8a:35:b6:04:04:c6:50:fd:d8:01:3a:2f:8a:de:
80:47:2a:6f:72:0f:1a:34:4d:88:98:17:6e:52:2c:fa:24:e5:
6f:c7:60:fa:ff:fd:e9:fb:57:f2:88:21:7e:3c:df:3b:6f:f5:
24:89:81:2a:9c:91:ba:c3:96:09:fd:55:3b:ab:a4:90:38:19:
2c:94:a6:ab:a6:81:a2:39:c4:35:03:a8:74:75:88:1a:80:f5:
a8:41:be:78:d3:23:ad:9a:4a:80:85:2c:7e:d4:b4:20:fe:d6:
46:49:96:4f:dc:de:ca:92:ab:da:1b:25:a7:48:fd:7b:ec:a1:
2c:b4:91:70:95:11:cb:c1:fa:20:4d:f0:86:8c:b0:2a:eb:ee:
63:05:e9:69:e0:38:fa:e1:41:50:a8:99:f1:45:51:18:5a:05:
23:fb:88:84
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSHNmOEC4zsKw2YY4sfO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2
ZDlkNmUwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWZmM2ZmYzJkMDIyYmJhZGE5YzViMmEwY2I3MjNhMTI0MjFjYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5P59GXLw/AWohNdkNZwb0u7sMac
0bY+QIVQexvYWq4Vt0WgM4ZwVvoE+nzwFt/9xQdWkgspFeXhLmfgDovuCMdIZVZ2
rxE2F6BXrOMYirYHX2HkynlhIDmSZnkcwchUQR5vT5grQzl2dtOKqrWEd5V7Dm1e
Zz3dyOS0TqUdVLgC6QfruagKeWLqurapys3GPzpxuJMo2svmKCoeL3FpefpKqL0W
cE2KRBBVafX4lIQFNZRDTQGGAKdPEKMnormQXCJJz1YA5az0+9+hEbU+RvRnXL55
vlxt+T1S5cZW3UZXvRL0/oE+kwTmHL8DzzCryZ+p1IuUqAKF7Ai6nGBErwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPn/P/wtAiu62pxbKgy3I6EkIcpYMB8GA1UdIwQY
MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvMS1mOF9fQzBDSzdyYW5Gc3FETGNqb1NRaHlsZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWYvOWZlNDlmLTllZDAtNGRiMy05YmU1LTVjNjkwNDQ3YmE4
OS8xL0h3VmxobHBUTkFMQzlEUV80YTlVR2dCdG5XNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm+JTAN
BgkqhkiG9w0BAQsFAAOCAQEAiFgjm28AWil8X5+JpNyRdUnxCSHIi5uS0s/M18eM
ddxj2oeBAtmVCQ7mZQn3QmVEvrvqLx3pHcS+xBGEhitg68UEqhJBQ9w4KVr2XU91
Ax+88RfD/nhINuVN8gcFnIo1tgQExlD92AE6L4regEcqb3IPGjRNiJgXblIs+iTl
b8dg+v/96ftX8oghfjzfO2/1JImBKpyRusOWCf1VO6ukkDgZLJSmq6aBojnENQOo
dHWIGoD1qEG+eNMjrZpKgIUsftS0IP7WRkmWT9zeypKr2hslp0j9e+yhLLSRcJUR
y8H6IE3whoywKuvuYwXpaeA4+uFBUKiZ8UVRGFoFI/uIhA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:10 2025 by rpki-client