Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/h8SfwRbK368oFi78rR2XGkZPbNU.roa
File: h8SfwRbK368oFi78rR2XGkZPbNU.roa (raw, json)
Hash identifier: ElvtvstD0BwuDb1nmTO7s+WuDPXQ9LdclByOZIKOkfU=
Subject key identifier: 87:C4:9F:C1:16:CA:DF:AF:28:16:2E:FC:AD:1D:97:1A:46:4F:6C:D5
Certificate issuer: /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial: 052917
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/h8SfwRbK368oFi78rR2XGkZPbNU.roa
Signing time: Thu 03 Feb 2022 16:44:55 +0000
ROA not before: Thu 03 Feb 2022 16:44:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 185.112.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338199 (0x52917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Validity
Not Before: Feb 3 16:44:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c49fc116cadfaf28162efcad1d971a464f6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:48:6e:f7:07:09:69:1e:98:08:ca:0b:d8:
36:1d:67:a8:c4:a4:5f:bb:8d:a1:72:55:69:c6:45:
ad:dd:7d:af:4e:6e:f2:68:2a:15:84:fb:72:e2:dd:
90:4c:b2:99:4a:ea:54:a0:96:e1:d2:62:0b:dd:57:
f3:50:82:2d:fc:a6:55:86:bf:e4:bd:a5:23:b6:61:
45:ed:e2:86:2e:5e:01:ce:40:30:2b:a0:b8:43:53:
bf:66:81:25:79:a3:88:49:16:f4:0e:ea:5b:29:09:
81:97:63:62:ab:e0:6c:06:41:12:fb:c4:e0:2b:b3:
42:09:f5:43:34:fa:79:f1:b8:4d:08:e5:b8:ec:01:
f2:b8:07:14:86:0b:e4:f4:d4:e2:08:78:16:d1:91:
1b:7f:41:b2:d9:4a:85:09:67:3e:13:34:c0:61:d1:
c5:03:94:dc:60:f4:a3:7d:fd:93:84:9e:a2:e3:cb:
92:48:aa:4a:03:95:1c:d9:aa:ce:3c:c0:25:20:c1:
3b:cb:7b:70:c5:7b:88:7c:c5:7a:e1:dd:c0:1e:51:
83:cf:cc:bb:a6:bb:5d:87:8a:fc:9b:9e:8e:49:9f:
0e:25:ee:75:49:26:60:9d:fa:42:d2:8b:77:cf:7d:
d5:26:51:45:a2:cc:46:5c:ad:ed:f3:0a:f2:07:f7:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:9F:C1:16:CA:DF:AF:28:16:2E:FC:AD:1D:97:1A:46:4F:6C:D5
X509v3 Authority Key Identifier:
keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/h8SfwRbK368oFi78rR2XGkZPbNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:29:57:59:96:b0:a9:0d:fc:f8:54:e1:af:5b:99:d2:7a:71:
30:0e:c1:5d:c7:8c:9b:f3:ad:91:ec:b7:6a:6d:a0:90:33:38:
4e:bd:9c:78:32:f1:8b:86:a9:70:36:8d:b3:79:c6:06:ff:c9:
45:96:d8:ae:3f:9f:01:65:c3:df:44:52:7b:00:97:59:a4:d7:
d3:f1:e1:16:dc:d5:82:b6:24:ff:f3:df:83:f5:13:2a:ad:fc:
0b:44:71:f8:4f:c1:f1:d9:d5:43:02:7b:ab:88:c6:af:b4:ff:
f3:3a:7a:e7:c8:a0:80:2c:de:5c:72:ac:7c:09:43:cc:a1:d7:
48:78:2c:a2:37:97:81:ab:51:cd:7a:d7:3e:b2:03:a3:79:99:
57:44:ba:51:ee:f0:c4:95:3d:67:0f:e9:73:99:74:74:66:af:
86:3a:a8:5b:7b:08:48:4e:f4:5b:5a:a3:21:2b:25:70:df:94:
ae:ab:0f:aa:b4:e4:8c:9d:99:21:7b:e8:9e:10:6f:ed:56:22:
c3:26:25:06:02:ca:e5:10:df:9b:2b:05:00:3c:ae:e7:cc:11:
2a:0c:10:89:08:96:ce:f7:01:73:30:45:ad:bb:d2:f4:9c:5e:
95:a9:b0:62:74:50:62:a6:cc:4a:96:21:26:f6:70:34:c5:43:
f1:3a:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:54 2025 by rpki-client