Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/HqQaQkzt1dcnxGGmGompdTfu2jI.roa
File: HqQaQkzt1dcnxGGmGompdTfu2jI.roa (raw, json)
Hash identifier: losKrV0+DOmB6mOrdznRhlMfbcag3lg+t9YI9ihggIE=
Subject key identifier: 1E:A4:1A:42:4C:ED:D5:D7:27:C4:61:A6:1A:89:A9:75:37:EE:DA:32
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 018CC7935F7BCCB2D3B2408A57CAB54346DB
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/HqQaQkzt1dcnxGGmGompdTfu2jI.roa
Signing time: Tue 02 Jan 2024 00:29:33 +0000
ROA not before: Tue 02 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212490
IP address blocks: 185.41.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5f:7b:cc:b2:d3:b2:40:8a:57:ca:b5:43:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 2 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ea41a424cedd5d727c461a61a89a97537eeda32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:38:8a:0d:8e:55:93:7c:e6:7f:9c:5e:c2:
47:dd:11:7c:0c:3f:9f:c3:c1:6b:6a:1d:ea:4c:2b:
b6:c5:10:e9:64:27:03:45:31:3f:42:7c:03:bc:78:
f6:ec:dc:3e:30:2a:fe:1b:f5:80:f4:dd:87:2d:d1:
3a:49:9d:f3:79:c9:f2:d6:e4:4f:3c:b4:ca:ae:5c:
d1:99:58:ce:c2:af:09:78:f5:dc:72:b3:8a:8d:cb:
fe:8c:65:b5:c8:8f:71:44:b3:68:96:13:b1:bb:1b:
a7:d7:9a:02:bf:dc:a1:85:69:4e:21:5e:cd:f4:89:
ae:f4:bb:82:a0:dd:68:5b:d9:21:5b:3f:56:cb:f6:
67:10:02:72:55:c7:47:1a:d9:83:f0:a7:85:8e:1e:
66:29:7e:a5:94:f7:e5:83:06:57:72:3f:65:87:3c:
ef:59:93:6e:3b:bb:6d:88:93:65:c3:39:df:7c:a8:
30:06:d4:3b:74:0f:a7:65:36:5f:29:8c:bb:7a:a8:
b8:b5:8c:9f:8d:92:a1:35:36:63:68:70:e7:87:e0:
bb:59:f5:d4:33:0c:d2:bf:cf:12:bc:59:54:87:53:
fa:2f:45:a8:d0:db:77:9a:0c:02:2f:08:2c:d5:56:
14:ad:52:85:16:52:fe:6d:58:d0:bf:eb:72:19:aa:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:1A:42:4C:ED:D5:D7:27:C4:61:A6:1A:89:A9:75:37:EE:DA:32
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/HqQaQkzt1dcnxGGmGompdTfu2jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.184.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d7:da:da:30:f4:a8:51:c0:72:49:5b:30:75:1f:7c:0c:5c:
c4:a3:7b:0d:0b:2b:a1:02:61:51:d9:53:8d:b8:3f:99:2f:be:
99:55:46:e6:de:bd:70:d2:9f:c3:6f:86:6f:7a:c4:ad:dc:aa:
83:44:2c:1b:49:59:07:e0:34:18:f9:d9:60:c0:71:a0:46:b4:
e5:c9:49:ca:e2:e9:00:0f:69:f5:56:1a:c9:31:3a:6a:a0:f1:
aa:72:b4:38:78:fe:33:cb:18:9b:0f:5a:98:a4:b8:b1:e7:90:
93:5a:93:ee:d4:35:73:bd:f1:e9:23:b6:b4:47:20:30:23:ed:
1b:9e:af:4a:ea:bc:27:c9:4e:fa:ea:76:08:0b:b6:40:bd:7d:
0a:55:f4:69:52:04:34:51:d3:b6:3d:2c:ac:ac:a5:79:0f:05:
b7:59:ce:fe:26:cf:61:5d:5b:9d:e1:ee:97:6b:05:26:59:bb:
0e:d6:27:03:a0:87:00:52:1b:28:3c:51:15:0e:3b:8e:36:3a:
81:60:2e:ef:8d:69:aa:fc:04:98:4e:b1:07:e3:a1:f1:57:5c:
ee:71:15:2d:82:ca:44:47:50:9b:e9:c7:31:ca:d4:61:21:d6:
d3:93:97:e3:b3:5c:c7:9f:86:a1:01:b4:9f:5c:f2:00:08:6b:
9c:35:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:37:04 2025 by rpki-client