Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HcF-xY-sl6j1mmhUxPpqxzvGOio.roa
File: HcF-xY-sl6j1mmhUxPpqxzvGOio.roa (raw, json)
Hash identifier: Erq71FXEpVhwk+ISXPkMfBglsMMwTljjw2tbpR1Pn8I=
Subject key identifier: 1D:C1:7E:C5:8F:AC:97:A8:F5:9A:68:54:C4:FA:6A:C7:3B:C6:3A:2A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01955CBD38B2C6F95CE10D0F1829CD34EF00
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HcF-xY-sl6j1mmhUxPpqxzvGOio.roa
Signing time: Mon 03 Mar 2025 16:00:59 +0000
ROA not before: Mon 03 Mar 2025 16:00:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205591
IP address blocks: 185.133.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:bd:38:b2:c6:f9:5c:e1:0d:0f:18:29:cd:34:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Mar 3 16:00:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc17ec58fac97a8f59a6854c4fa6ac73bc63a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:8d:5b:f7:07:94:dc:b0:41:51:5b:c1:80:
fd:bc:ba:ff:88:ea:ac:54:ec:bf:6e:89:11:18:43:
cb:df:67:51:f8:c3:05:70:c2:d5:c6:8d:9e:48:14:
39:8c:51:37:e7:05:8e:79:f2:7c:74:bf:ff:03:dc:
08:94:76:b5:46:73:af:af:a8:e8:ee:99:b3:01:01:
34:d9:92:13:f2:37:56:ee:33:73:16:39:84:0a:b2:
45:b2:3a:16:9a:6b:b1:87:1d:54:72:e6:f3:0c:c1:
96:ba:38:2b:a9:31:3f:18:b5:75:d1:bf:61:69:46:
0e:20:5a:2c:cc:55:22:21:84:88:a5:27:62:95:0d:
07:86:88:cc:0f:c2:4e:25:9e:c5:30:95:ba:fb:86:
cc:9f:10:65:1c:f3:1b:6e:40:86:a3:1d:cc:d1:ca:
32:05:72:48:c3:e7:cb:d3:4a:1a:48:c0:b2:7a:eb:
78:1c:c1:20:80:b2:2b:79:6a:33:e8:7d:eb:bb:cc:
ea:f7:b1:d6:50:cb:c0:90:a9:8a:2f:75:50:83:1b:
71:63:6c:a4:c2:f6:de:1a:b6:5a:f4:d1:f2:42:6b:
92:70:30:79:99:bf:84:14:12:80:ad:0f:b8:48:36:
e9:16:50:09:80:da:55:65:b7:ce:dd:ff:b5:9c:00:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C1:7E:C5:8F:AC:97:A8:F5:9A:68:54:C4:FA:6A:C7:3B:C6:3A:2A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HcF-xY-sl6j1mmhUxPpqxzvGOio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:72:71:ce:21:57:cd:8f:c6:07:42:9c:01:e4:8a:24:98:ae:
12:48:f4:ab:09:f2:80:0e:77:86:08:6f:e1:53:48:73:6e:65:
18:62:aa:4a:de:2e:9c:64:47:8d:45:18:e2:35:d1:7c:75:29:
53:a2:43:20:5c:aa:d3:52:33:03:6b:2c:ec:17:f0:4f:53:5a:
17:ae:0f:96:2a:b2:de:4c:87:41:b9:a5:94:17:fa:ce:36:65:
80:37:5f:a3:bc:01:63:b2:9e:1c:2f:38:9b:da:a1:3a:49:d4:
bd:71:82:1c:cc:8a:4d:dd:8d:83:1d:f2:f1:d1:d7:a0:67:8e:
d2:dc:40:36:07:01:ea:d3:8e:cc:7c:08:a7:ba:43:9f:d7:42:
c7:ec:9b:77:5b:ba:7f:98:34:54:cb:5e:78:3c:b4:95:3b:5c:
1c:7b:fb:49:3f:f8:10:39:39:0a:40:33:95:fe:63:dd:9a:85:
05:c2:c9:a6:d4:cb:6c:4c:f4:f7:23:0d:4a:69:26:97:ff:31:
df:3e:bd:d7:18:b3:8a:54:9d:e2:92:b7:c6:9e:b2:6c:2b:bc:
71:32:4d:99:91:03:f7:e3:db:82:e2:2c:bd:80:13:1e:71:e3:
14:35:be:f6:c5:3c:ca:07:71:50:1d:c2:91:62:3f:eb:68:41:
cb:7d:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:20 2025 by rpki-client