Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa
File: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (raw, json)
Hash identifier: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=
Subject key identifier: 86:E5:70:31:ED:58:07:92:6F:A4:8D:15:83:0C:BF:F3:E4:DD:F4:C9
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01941F8C7513DAF3382F3EAB7AD4AC2C4F19
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1449
IP address blocks: 185.97.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:75:13:da:f3:38:2f:3e:ab:7a:d4:ac:2c:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86e57031ed5807926fa48d15830cbff3e4ddf4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:95:c6:a1:eb:8b:b2:96:e2:47:69:70:32:
64:43:47:70:88:7a:57:ce:89:d9:f1:ca:44:62:f3:
1e:d2:f9:09:27:63:01:e7:6f:de:6e:bf:4f:8e:ce:
7b:ff:08:87:a9:d9:60:b3:6d:7d:e0:a6:53:39:1d:
78:13:ab:d5:3c:42:7b:11:e8:b6:18:e0:4c:d0:04:
d8:1e:d5:33:41:4a:e4:d4:7d:1b:0b:90:e4:13:40:
aa:a2:6c:35:09:7c:4e:53:86:ef:d9:66:39:85:c5:
ef:fc:c0:96:d9:0f:cf:90:07:a6:e0:71:49:5e:c9:
ff:31:37:2d:96:f7:33:a9:22:40:b7:eb:3f:d5:dc:
7a:2e:63:6f:f2:b2:05:ca:af:bb:b4:09:99:9a:66:
9c:11:d9:25:31:1c:e3:a6:aa:23:6f:23:2d:2a:d4:
b3:e4:2e:a5:ad:b3:23:56:25:39:aa:6a:d8:c4:63:
62:0f:48:26:be:5e:96:87:c1:5c:86:2f:4d:aa:75:
2f:af:6f:fe:e8:80:8c:ca:47:8f:6a:53:fe:e2:7d:
7c:d2:cd:b5:30:e2:99:87:3d:09:4d:db:9a:f6:3a:
c7:5f:ba:a7:89:62:6a:93:d6:16:31:1d:b6:48:ad:
f3:3b:db:dd:ce:3a:3b:79:66:5d:81:cd:b9:59:d8:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:70:31:ED:58:07:92:6F:A4:8D:15:83:0C:BF:F3:E4:DD:F4:C9
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.80.0/22
Signature Algorithm: sha256WithRSAEncryption
27:3d:17:73:62:6f:b6:62:e4:b0:5a:89:33:21:29:e2:26:c5:
f3:e3:ee:06:3a:93:fe:5b:f8:05:e2:24:79:89:18:95:64:81:
a1:aa:0e:a1:75:04:69:cb:44:7c:ae:87:0a:fc:f9:c0:c0:37:
34:e7:a0:07:86:34:c4:01:03:92:60:24:15:3a:ca:cb:a5:2c:
7a:0e:73:e8:4d:f3:8d:bb:f6:11:e9:0f:28:db:ae:5d:46:e4:
04:fd:4d:c8:c7:f8:18:10:34:c3:4b:16:06:aa:d6:72:9e:b2:
bd:b0:7f:df:33:27:85:a0:0e:8b:d3:dd:9c:e4:cd:c1:d7:79:
7f:07:c4:a7:05:83:80:5f:a0:60:69:50:d8:16:55:41:bb:fb:
3c:36:64:7c:ae:85:87:dc:d8:45:61:58:ea:d4:50:3c:fc:68:
58:8e:67:d6:da:4a:8a:dd:ba:66:cd:74:b9:df:18:7b:b0:1f:
fc:d1:aa:60:59:14:43:cc:73:a3:0a:e2:f3:ac:a0:e5:07:c0:
7f:ca:b9:b2:44:ef:2d:d4:b4:36:92:e3:a8:8a:66:7a:f7:54:
80:8a:92:6c:33:53:79:31:2f:08:43:c1:69:01:8c:de:a4:90:
18:51:a3:d8:c3:d7:9a:66:88:45:1e:da:a7:de:8e:e9:be:d7:
cd:4a:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:37:07 2025 by rpki-client