Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/HyQNk5om--kwgdgzEN4xjqidIVI.roa
File: HyQNk5om--kwgdgzEN4xjqidIVI.roa (raw, json)
Hash identifier: N5ctO5GPoq2sXkQYvtemjKHP9WYEFmKI3DhjXdfOscs=
Subject key identifier: 1F:24:0D:93:9A:26:FB:E9:30:81:D8:33:10:DE:31:8E:A8:9D:21:52
Certificate issuer: /CN=d74246a8b9ff94b0fb5f7ba6015bd779b63094d3
Certificate serial: 0DDCB20A
Authority key identifier: D7:42:46:A8:B9:FF:94:B0:FB:5F:7B:A6:01:5B:D7:79:B6:30:94:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10JGqLn_lLD7X3umAVvXebYwlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/HyQNk5om--kwgdgzEN4xjqidIVI.roa
Signing time: Sat 01 Jan 2022 13:56:47 +0000
ROA not before: Sat 01 Jan 2022 13:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 185.49.68.0/22 maxlen: 22
2a01:9260::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232567306 (0xddcb20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74246a8b9ff94b0fb5f7ba6015bd779b63094d3
Validity
Not Before: Jan 1 13:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f240d939a26fbe93081d83310de318ea89d2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:dd:6d:ab:3c:2f:a8:b6:cf:05:04:16:cc:
ee:74:75:2e:84:bf:70:34:29:f4:ff:ec:b2:fc:7b:
29:f8:56:8c:a9:5a:c4:8e:6d:a4:04:74:a5:40:f8:
b6:b4:fb:ec:04:b5:ad:ab:06:59:c8:44:3f:33:85:
32:ea:c6:18:6d:af:48:63:3f:2a:42:4b:8d:6e:9d:
28:97:6a:99:df:e0:89:55:59:de:67:4b:5b:9c:a1:
e1:7f:a2:3c:d2:0f:e0:86:80:a5:a1:fa:b5:2b:0b:
34:dc:e4:9e:6d:c5:be:6c:40:9e:a9:47:84:ff:40:
a3:76:91:3d:9d:10:4e:78:1e:0f:2c:97:cb:61:50:
05:d5:ef:69:2b:d0:28:b6:52:93:73:be:35:b8:74:
28:81:2f:d6:8e:6f:ef:2d:72:89:50:b6:1a:7d:2f:
f1:8a:f7:40:8d:ec:74:eb:56:35:40:fe:1a:7d:d1:
f9:95:1f:5d:0b:97:89:67:a2:04:c0:df:94:ae:ac:
23:df:c5:a3:29:78:5e:b0:15:8e:9e:db:f3:b2:66:
f4:97:2d:d7:0f:79:cd:da:8c:b9:97:8c:d4:77:7b:
f9:f1:9e:f5:0a:a2:01:3e:1c:de:ad:de:d4:74:39:
bc:ee:1f:0d:73:d8:26:7a:2a:a0:c2:8e:70:14:e2:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:0D:93:9A:26:FB:E9:30:81:D8:33:10:DE:31:8E:A8:9D:21:52
X509v3 Authority Key Identifier:
keyid:D7:42:46:A8:B9:FF:94:B0:FB:5F:7B:A6:01:5B:D7:79:B6:30:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10JGqLn_lLD7X3umAVvXebYwlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/HyQNk5om--kwgdgzEN4xjqidIVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/10JGqLn_lLD7X3umAVvXebYwlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.68.0/22
IPv6:
2a01:9260::/32
Signature Algorithm: sha256WithRSAEncryption
6c:e1:94:f4:10:84:43:b0:23:ba:b5:ad:14:19:40:93:9f:5a:
d9:86:23:ca:74:3e:cc:de:8d:be:65:10:29:02:81:4c:98:52:
72:5c:42:1a:d0:b8:87:6d:6d:20:10:19:90:2e:45:88:c9:94:
04:f9:7e:3a:53:ad:43:61:49:94:d1:a7:93:da:97:83:9f:7a:
f4:b3:af:e4:75:9d:eb:da:98:2b:10:44:55:7a:a2:55:f3:3d:
b6:a8:f9:d9:ad:0e:94:53:a2:0c:ad:80:81:5e:1c:51:6f:6c:
21:8c:ed:42:3d:f5:29:fd:2b:a9:98:7e:96:ed:15:f6:06:ee:
a8:d8:5a:eb:31:a3:97:8f:ab:b0:0c:68:24:21:32:5f:08:f9:
1a:34:c7:97:ba:c7:c7:f6:ca:12:8e:bc:38:92:9a:20:98:c0:
9c:81:e1:59:b9:c4:a8:69:98:b4:8e:51:9b:8a:e9:42:93:4e:
48:83:25:2a:01:55:6b:12:50:3c:16:39:fb:2a:f8:c5:12:33:
11:06:98:a7:b3:6b:af:52:54:3c:a1:b5:52:92:61:d3:98:7e:
cd:89:dc:bc:93:dc:36:ce:8a:22:03:c7:d1:ca:ce:6b:ab:09:
13:0d:12:cb:2e:13:e4:d7:78:8b:64:8a:ec:83:ef:c0:d6:57:
cf:cb:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:39 2025 by rpki-client