Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/hvfjiAD64cA7L9D8OrPaqton6c4.roa
File: hvfjiAD64cA7L9D8OrPaqton6c4.roa (raw, json)
Hash identifier: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=
Subject key identifier: 86:F7:E3:88:00:FA:E1:C0:3B:2F:D0:FC:3A:B3:DA:AA:DA:27:E9:CE
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 01941F8C0AA3B5001A7E56EAB8BC9EB6AB62
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/hvfjiAD64cA7L9D8OrPaqton6c4.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207021
IP address blocks: 185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0a:a3:b5:00:1a:7e:56:ea:b8:bc:9e:b6:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f7e38800fae1c03b2fd0fc3ab3daaada27e9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:1e:7d:bf:89:37:7e:bb:21:65:44:80:a9:
f9:4e:f1:a7:1a:34:27:b1:43:3d:c3:99:84:ff:da:
e3:a9:b8:fb:f9:f9:57:25:70:3b:b0:aa:ae:27:9b:
eb:9e:f1:2e:dc:e6:34:45:fc:38:04:9f:65:b2:35:
85:25:9a:06:a5:59:3e:59:da:75:bf:9d:96:42:e2:
bc:43:56:3f:d0:23:0a:fd:e1:2f:5f:9a:4c:1a:76:
05:10:57:fb:e6:97:c9:a9:d0:d2:ef:cb:21:10:ad:
ce:33:1a:80:eb:0f:cc:e1:ba:b6:5e:2f:f4:51:b4:
e1:ca:11:c4:17:dd:54:34:21:97:fb:7f:a7:70:bc:
a1:e1:be:09:fa:86:fb:4c:97:fb:a3:5d:c7:78:7b:
d3:45:4d:d3:56:01:75:27:a7:b4:fd:75:e1:44:32:
35:8c:7a:11:d2:0b:12:10:84:2a:1b:67:09:df:69:
f1:fe:35:4c:3d:84:25:3f:60:8a:6e:52:c3:df:aa:
00:1e:3f:c1:57:d8:3a:4d:9d:1b:cb:68:4e:bc:b2:
69:9e:4e:e4:2f:74:66:e2:3d:7c:c9:4d:1a:74:b8:
35:f8:f0:ca:67:f8:7b:40:9d:d8:cc:06:00:dd:29:
30:68:7c:bc:e3:7a:82:14:7d:9e:ed:9d:e1:2b:35:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:E3:88:00:FA:E1:C0:3B:2F:D0:FC:3A:B3:DA:AA:DA:27:E9:CE
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/hvfjiAD64cA7L9D8OrPaqton6c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
90:24:d9:82:60:5d:f1:eb:a6:e2:1a:e7:48:05:0a:bf:d5:1e:
9a:d8:7a:20:f7:92:96:69:94:09:71:d8:03:dc:92:68:b6:60:
3b:26:f5:54:63:a2:32:8e:81:f2:63:dc:e8:bf:ed:17:6b:c2:
d2:e8:b5:9f:92:66:41:0e:8f:a5:f9:f1:1b:ba:26:41:39:7a:
7e:cc:3c:60:b6:9a:ea:c9:68:ab:50:2d:45:f2:68:7f:0a:8f:
5b:b8:9f:bc:05:02:0a:f0:ff:d3:2d:34:cb:10:cd:4f:e5:0b:
1f:cc:54:fd:a0:86:53:05:0c:ff:22:b2:7b:86:76:a4:bf:73:
6c:ce:67:cd:3a:33:99:49:47:76:9c:bd:e3:02:fd:d0:75:dc:
77:ca:b9:a2:ae:96:bb:79:75:06:64:8e:24:47:7b:3c:2f:58:
22:f1:b2:29:5f:d1:d0:dc:73:1b:a9:0f:f7:80:56:a4:97:5b:
6a:b2:56:1c:18:a9:de:30:a2:c7:c0:95:cc:d1:41:eb:53:1a:
27:12:19:f3:bc:87:c1:78:2a:d0:ec:89:19:9f:f0:d0:a5:b8:
5b:b8:54:cd:77:61:9a:bf:84:91:32:64:b8:f2:5d:37:74:01:
1e:b2:fb:ac:82:7b:21:35:81:3a:c8:81:9a:74:1e:ef:3b:8b:
49:27:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:10 2025 by rpki-client