
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa
File: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (raw, json)
Hash identifier: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=
Subject key identifier: 86:A6:BD:87:42:DF:13:E3:83:4A:6E:9C:2F:B6:D5:5C:39:C2:0E:E5
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01941FFA06F581DE9F1AE69BEF2038CF42DD
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.138.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:06:f5:81:de:9f:1a:e6:9b:ef:20:38:cf:42:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a6bd8742df13e3834a6e9c2fb6d55c39c20ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:06:1d:b4:7b:ad:67:94:a1:16:0a:27:ce:
c0:a1:59:a5:c0:48:b4:3e:2c:b1:42:af:55:f2:09:
b7:79:94:d5:a6:67:e4:57:a7:91:59:77:89:12:23:
57:77:41:8f:5e:0c:23:a4:c1:28:e6:15:3c:b4:eb:
40:a1:58:e2:89:07:fd:f7:0c:2b:79:f7:d5:6d:64:
a2:92:80:5b:1e:04:39:25:f2:93:72:a2:35:c5:13:
5e:2b:ef:86:85:60:bd:53:7e:2f:21:bd:cb:5e:c9:
c9:db:d7:88:b5:f5:b3:32:ee:be:a0:1f:33:18:21:
f9:37:fb:88:6d:23:41:3e:df:eb:3d:46:37:09:79:
c7:ae:0c:40:f7:8f:4c:5f:a5:3f:3c:b1:14:30:9f:
71:67:31:b3:dd:63:18:0e:d4:2d:25:d3:c7:61:17:
b3:67:e1:f5:ba:84:01:ff:18:b9:1c:a1:6e:7f:b1:
4d:7b:e5:68:42:e4:bc:73:9c:ba:be:b6:bb:4e:88:
16:34:96:a3:ca:c9:29:a3:89:6f:90:51:2f:cc:6b:
4d:7a:38:02:e2:cf:f2:e4:f9:6b:e0:54:87:2d:79:
c6:2e:16:2d:7f:4d:9b:05:19:07:11:84:3a:8b:b4:
fa:a2:44:9b:76:9f:01:00:48:cb:0f:74:e1:00:10:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:BD:87:42:DF:13:E3:83:4A:6E:9C:2F:B6:D5:5C:39:C2:0E:E5
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.234.0/24
Signature Algorithm: sha256WithRSAEncryption
11:52:91:61:ea:9c:58:aa:ea:f6:6e:80:18:4d:c1:ad:fc:19:
a8:49:e8:ca:eb:e2:c3:33:bc:56:12:c6:d9:1b:94:d8:e2:29:
89:9a:48:95:93:e6:5a:1d:8b:a0:f2:aa:5f:1b:f7:b9:f0:b9:
33:c0:10:c9:5c:0e:9e:b5:41:ff:55:5b:d1:89:2b:73:79:23:
db:af:94:23:f6:fa:da:45:7c:88:37:af:c3:dc:87:e4:52:dc:
e6:02:cb:d4:d9:5a:5d:0d:6e:12:c4:40:65:08:2a:f6:bb:a9:
2c:2e:eb:74:4a:40:10:da:89:54:a9:cb:c2:00:a9:57:2a:00:
a2:2f:2d:48:c6:04:6b:ba:b3:b6:26:f3:df:41:58:ef:9a:3f:
c9:59:a8:e1:f4:92:e6:90:1c:62:30:a7:13:e1:dc:03:8c:71:
93:ba:0f:c8:1e:2f:e9:3b:fd:5b:93:7c:0e:38:ca:89:e4:72:
92:03:0e:f5:4f:11:d0:89:53:a2:c1:ac:6c:68:80:82:68:a3:
60:82:39:d5:b3:f9:95:2d:ab:9c:11:c0:78:aa:fd:69:e9:5d:
ba:ed:54:cf:17:a9:5f:14:c2:fe:c6:e4:ef:ed:3e:84:3c:ba:
c1:94:a0:6f:d0:1c:93:d4:62:c0:81:f6:2c:7e:33:41:b1:8a:
e9:14:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 18:24:23 2025 by rpki-client