Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa
File: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (raw, json)
Hash identifier: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=
Subject key identifier: 86:6B:D2:E2:70:CF:4F:15:96:EA:46:1F:0D:BA:FC:8F:4C:9F:AA:C0
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019420D5E97E42CBBA331ED7AB9A35DF51AB
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50300
IP address blocks: 185.104.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e9:7e:42:cb:ba:33:1e:d7:ab:9a:35:df:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866bd2e270cf4f1596ea461f0dbafc8f4c9faac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:ab:84:62:a6:b2:1d:6e:d6:a9:65:42:4e:
1a:37:dd:e8:77:7b:29:93:bc:72:58:57:4a:33:ec:
dc:0a:30:4e:d8:d5:53:d4:1d:77:eb:62:8f:1e:b9:
b7:28:08:97:7e:ec:0c:cd:4e:32:9e:c3:d7:7d:4d:
5a:b9:41:0f:58:f5:75:e7:42:94:08:5a:81:0c:8e:
88:61:3d:f2:2c:dd:b7:2f:c6:ad:0f:6b:24:21:74:
c4:bf:74:ea:ec:99:08:e6:ca:18:f4:ba:66:15:a1:
f2:fa:02:b5:30:94:5f:17:62:02:3b:e6:cb:cf:19:
ac:2e:04:ff:21:59:0c:d2:3d:ab:05:6e:0a:c3:6c:
f4:8c:cb:47:00:0b:38:72:11:0f:d7:a0:63:52:ae:
00:b3:9b:26:d5:f4:8e:bb:d3:da:43:54:a9:1c:84:
bc:11:61:90:46:a1:97:f8:5c:3b:db:ff:7d:c1:79:
94:57:e0:d8:4c:8a:44:0d:8e:18:18:b9:0c:e8:03:
35:ee:39:3f:d8:b4:2e:4e:2d:aa:6c:bb:5c:f4:ad:
7b:25:b2:49:a0:4d:9a:3b:d6:f8:b9:5a:10:6c:ba:
70:40:43:c7:f4:d8:a9:89:b3:42:85:e2:44:f4:01:
49:fa:ae:df:2c:f2:a5:9c:09:36:a9:90:c4:2f:3a:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:D2:E2:70:CF:4F:15:96:EA:46:1F:0D:BA:FC:8F:4C:9F:AA:C0
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.136.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8e:ab:93:59:68:4a:d3:2e:51:ce:3a:a3:61:87:5a:23:10:
18:a8:58:0a:8b:8a:89:54:f5:c1:93:21:9c:32:b9:68:e8:5e:
35:3d:ab:e0:b2:16:6c:2b:ca:78:60:be:98:f2:8a:69:d5:7a:
83:c6:8d:e3:38:b4:a8:13:8f:cf:aa:5d:06:7f:2a:37:6f:72:
eb:52:d3:ca:a4:e6:2e:52:84:17:6d:a2:2c:eb:89:99:bb:69:
1b:86:8d:86:9c:71:05:55:96:a2:96:36:cd:5b:92:b9:35:05:
91:2f:a0:1e:e3:30:2d:f3:6d:91:d2:37:2a:01:83:bb:df:b9:
09:b4:c3:5b:93:76:e1:c2:f4:cd:2e:06:69:30:ec:01:a3:e8:
09:cf:1a:d8:eb:d6:6c:db:fd:8f:44:16:cd:ed:4d:b0:e4:4f:
ec:86:87:9e:e7:85:f9:cc:9b:0e:f7:5c:68:1c:ed:40:da:0b:
e1:ae:a0:6f:66:db:84:f0:78:03:23:68:b9:ef:60:a3:d2:aa:
05:d4:9f:e7:21:f5:e7:58:31:c3:ad:5d:54:4d:e8:cb:2a:97:
f0:bb:44:b8:12:33:78:cb:44:9a:bf:b1:01:38:40:c0:5d:03:
8d:a4:bc:3c:de:86:8b:17:e5:1e:9a:ef:f2:ed:cf:fe:ca:dc:
bf:55:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:32 2025 by rpki-client