Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/HZvB7g_l8SY_iiuwOnlclM5bEWc.roa
File: HZvB7g_l8SY_iiuwOnlclM5bEWc.roa (raw, json)
Hash identifier: k6yM9kAd+91UDcsZAuZGpKI1b5349naXW6WcKbg/eBI=
Subject key identifier: 1D:9B:C1:EE:0F:E5:F1:26:3F:8A:2B:B0:3A:79:5C:94:CE:5B:11:67
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 01941FFA89556B77180BD314BD06ED8403A3
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/HZvB7g_l8SY_iiuwOnlclM5bEWc.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203916
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:55:6b:77:18:0b:d3:14:bd:06:ed:84:03:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d9bc1ee0fe5f1263f8a2bb03a795c94ce5b1167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:c0:b6:2f:34:1e:3a:89:c2:14:e0:36:ef:
db:3f:33:e8:cc:a9:dd:71:58:7e:f9:8e:c3:2f:8c:
47:59:33:91:be:f8:ea:a6:91:09:86:3f:65:d4:61:
56:f0:12:41:fe:8b:4a:60:20:b1:91:96:e2:62:2e:
38:07:62:10:54:9e:9a:90:95:83:72:59:c0:f2:aa:
8c:7a:de:f3:c5:01:e9:47:c0:5e:5d:c7:fb:48:6e:
58:06:f3:a4:f4:6e:18:49:5c:29:02:d0:3f:aa:57:
69:0a:31:d8:90:b5:a9:a9:95:49:72:fb:55:87:39:
2a:58:02:df:2c:a5:6f:73:cd:8d:1b:bc:5e:bf:d4:
2f:66:b7:f5:b3:ca:3e:c7:40:aa:9e:5a:d9:c0:14:
ca:b1:c7:46:bd:52:5c:19:65:53:e0:9f:aa:7c:c6:
2a:c6:4e:ab:de:3b:af:6f:62:4d:14:d4:00:2d:a7:
e2:14:37:cb:28:5e:c3:63:c4:cd:e8:bf:06:5d:8e:
9c:80:b7:89:31:d3:4b:d1:6b:8f:b6:30:a7:3f:2b:
ba:bb:75:76:5e:09:46:23:5a:e1:5f:61:e2:86:65:
d9:69:1d:4e:2f:c6:61:12:9e:de:74:b1:f3:9a:ee:
f3:4b:87:c4:b2:6f:b6:15:b3:45:db:d7:c0:62:6f:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:C1:EE:0F:E5:F1:26:3F:8A:2B:B0:3A:79:5C:94:CE:5B:11:67
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/HZvB7g_l8SY_iiuwOnlclM5bEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:67:17:c6:04:9a:a0:44:9f:93:58:8c:72:c0:1d:54:e5:
03:c0:af:0f:de:3c:24:9f:8b:dc:d9:8c:4b:73:d8:5b:97:82:
cd:31:be:06:c5:33:7e:2f:cc:c4:c3:89:6b:de:19:3a:d8:ef:
18:40:21:9a:d8:55:79:ec:80:4a:88:6c:e3:28:eb:07:fc:0c:
67:fe:cf:73:df:a4:fe:58:56:76:ff:92:22:91:bc:a2:5c:dc:
22:d2:e6:e5:69:d5:fa:5a:c4:9e:ff:24:3f:82:d7:03:ec:ad:
28:d3:cd:96:ce:e1:37:94:c0:f2:93:93:bf:eb:c2:3f:78:74:
15:a2:3a:85:61:36:c8:d3:34:4c:e2:4f:69:bf:88:37:81:af:
60:cc:f5:7b:64:0a:d2:0f:4b:7a:05:7e:7b:e3:dc:78:df:c5:
f0:59:73:52:56:08:72:7a:0f:f0:cd:d1:8a:4b:79:cf:e3:7c:
f2:c5:2e:7c:b6:51:15:c8:e8:8d:d8:d7:a7:07:c6:dc:95:37:
e4:d9:70:56:dd:80:4d:fd:ca:eb:e9:96:66:fe:c2:86:cc:b6:
78:11:66:9e:f4:be:e9:aa:68:e9:c3:9b:f7:75:be:2b:07:1d:
ab:66:8e:c6:5e:20:e9:ab:ec:6a:52:7b:0e:6d:94:5a:b3:f6:
25:fc:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:30:30 2025 by rpki-client