Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/us-HW4s2s7PQinUWIKsg_XmhRDY.roa
File: us-HW4s2s7PQinUWIKsg_XmhRDY.roa (raw, json)
Hash identifier: IsxrUZ5UDQ6xM/h248DT3wQpA+TEst3OLJtlukVhMoM=
Subject key identifier: BA:CF:87:5B:8B:36:B3:B3:D0:8A:75:16:20:AB:20:FD:79:A1:44:36
Certificate issuer: /CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Certificate serial: 01856D0A8A691C7C08C027F3512075C4BF6A
Authority key identifier: CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/us-HW4s2s7PQinUWIKsg_XmhRDY.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 85.118.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8a:69:1c:7c:08:c0:27:f3:51:20:75:c4:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bacf875b8b36b3b3d08a751620ab20fd79a14436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:7c:e8:a9:73:5a:af:83:21:2f:15:e0:4e:
61:7b:33:d7:e7:89:c9:a9:51:26:8b:db:ec:4e:51:
5e:76:bb:ce:c4:ef:fb:d7:8e:4d:67:77:7d:37:bd:
f4:31:8e:9b:c3:a9:bb:2f:b2:33:99:7b:47:e6:89:
94:5d:9a:29:d6:ae:77:81:94:f7:d2:db:6d:e0:db:
49:4b:5b:57:47:1c:50:a3:64:f7:a4:bd:ab:95:db:
76:66:47:ed:d8:fd:65:26:af:84:1f:89:07:dc:e4:
08:f7:68:5f:24:27:7a:a4:c3:9b:83:60:96:6b:a2:
14:ea:e1:07:56:81:27:8c:15:c7:82:7b:12:9a:54:
7a:98:df:02:5b:ce:6a:73:55:f2:c2:9d:69:ef:16:
79:24:50:43:5c:6e:90:84:84:56:de:e5:5e:92:40:
7b:b7:90:3d:9a:fb:6a:75:0a:ff:d1:94:c5:83:81:
44:0b:d0:af:dc:64:07:7b:04:66:f7:f0:2d:45:16:
be:4d:f8:fb:83:02:2e:3f:bc:87:5e:38:a8:54:3d:
dc:d0:fd:f2:9d:22:67:5e:b5:df:ad:6c:12:61:72:
55:dc:c1:25:db:f1:51:0b:5c:2a:53:58:40:10:eb:
f0:6a:3b:d7:03:51:22:a9:0c:21:3b:30:e5:42:81:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:87:5B:8B:36:B3:B3:D0:8A:75:16:20:AB:20:FD:79:A1:44:36
X509v3 Authority Key Identifier:
keyid:CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/us-HW4s2s7PQinUWIKsg_XmhRDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.216.0/21
Signature Algorithm: sha256WithRSAEncryption
38:53:a2:dc:db:d6:12:3a:ca:d9:e3:95:45:ec:21:ff:d6:a1:
02:b0:bd:40:25:ef:e8:ad:bf:1a:41:ec:7a:d6:dd:02:c2:2d:
95:ab:ba:b1:79:3e:63:9a:a2:d2:e3:78:03:5e:f9:a2:96:75:
d3:d1:3b:24:52:1a:0b:33:5a:db:03:f1:f7:41:74:46:57:23:
a2:65:72:fe:9e:fd:e0:82:45:e1:cd:7f:dc:22:85:8c:c3:db:
61:41:ce:b7:3b:ab:22:d9:fc:56:bc:20:b7:6f:ab:57:95:e2:
e2:fd:61:f9:7e:5f:7e:37:01:c5:0d:98:54:8a:2c:28:b1:94:
69:6f:85:44:80:78:d5:be:72:08:2c:2a:61:39:f0:9a:ac:14:
74:19:5e:df:df:d9:da:71:73:83:23:19:fc:54:3d:1d:22:ed:
48:2f:8e:62:36:5f:a9:f1:47:0b:3e:32:22:e1:d4:60:2f:f4:
c8:4a:d7:3f:f7:87:6c:ba:23:19:db:8e:e3:73:25:ee:aa:ef:
c1:d6:84:2d:2f:42:73:f6:2a:18:86:af:87:e3:b4:73:58:05:
4b:49:7b:5f:67:1e:a5:81:77:82:0f:36:27:e8:d6:56:78:21:
92:26:da:2f:db:cd:fd:25:67:a1:41:cf:3b:35:cb:dd:eb:1c:
c1:77:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:16:56 2025 by rpki-client