Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fwuRVp1YWQ8nxlwIgCWvoH_CWbI.roa
File: fwuRVp1YWQ8nxlwIgCWvoH_CWbI.roa (raw, json)
Hash identifier: VZ1hoHKdenxDjU3AXlWsvstV+2WqHgrd+jyafH8xLqA=
Subject key identifier: 7F:0B:91:56:9D:58:59:0F:27:C6:5C:08:80:25:AF:A0:7F:C2:59:B2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194A914E551BBA0749E56689877817A2447
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fwuRVp1YWQ8nxlwIgCWvoH_CWbI.roa
Signing time: Mon 27 Jan 2025 18:45:06 +0000
ROA not before: Mon 27 Jan 2025 18:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.207.135.0/24 maxlen: 24
185.229.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:14:e5:51:bb:a0:74:9e:56:68:98:77:81:7a:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 27 18:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0b91569d58590f27c65c088025afa07fc259b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:d1:ff:9b:55:0b:d1:c6:55:44:f5:7e:a1:
ed:12:5f:1e:c5:17:34:dc:e4:1a:d5:f9:af:27:1a:
9c:b5:27:d0:be:f1:81:cc:eb:50:58:21:c9:e7:26:
06:88:61:80:84:88:2e:6c:d0:9e:3f:9d:7e:68:e3:
e0:00:6e:a2:56:76:e9:41:b4:e9:30:2c:f0:f3:68:
05:18:85:44:c7:c1:f6:33:be:1b:be:4b:6d:cf:50:
0f:ea:90:bc:7b:5e:88:0c:d6:4b:b9:c2:fc:75:6b:
0f:b7:cd:f4:74:68:77:6b:88:c1:e2:56:0a:e6:70:
4a:f8:18:08:22:c3:0c:d1:23:11:30:7c:96:f0:a7:
d2:28:8b:1b:fe:36:9e:71:a7:76:c8:c7:82:54:8b:
2c:6b:9f:2a:16:56:b7:b6:40:be:8f:9d:1a:27:b0:
28:ee:1b:75:97:9d:39:9c:d5:48:d8:79:fc:e9:22:
58:09:69:cc:c2:c4:56:7f:25:58:cf:62:5e:a7:2b:
aa:98:81:b1:a4:1e:20:8a:c7:1d:10:32:87:4a:de:
22:4d:e0:90:c0:f4:3d:3c:f4:53:17:e7:27:5c:f0:
7c:87:39:c4:25:be:0b:3f:b9:e3:53:22:39:ee:9d:
16:fe:55:e0:2d:f0:46:2c:05:7e:20:6c:1e:e3:3f:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:91:56:9D:58:59:0F:27:C6:5C:08:80:25:AF:A0:7F:C2:59:B2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fwuRVp1YWQ8nxlwIgCWvoH_CWbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.135.0/24
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ef:fe:ce:a7:2f:2e:85:ca:a1:7c:bd:42:42:87:c6:16:e2:
2c:04:cb:61:36:16:9c:b7:b8:60:6c:dd:91:e9:50:03:07:1a:
cd:a9:a5:ac:a1:cf:31:95:da:08:f7:70:11:07:4f:76:1c:ce:
5b:6a:d2:45:b1:af:ae:8f:d6:a6:d5:b1:9c:d0:88:52:a2:4e:
5c:bc:94:6b:d8:8b:90:59:51:e8:78:db:9d:39:2b:9f:99:fa:
51:36:df:78:ad:ee:62:d0:f1:3a:88:94:72:d3:fc:89:ae:f6:
4a:60:e5:a8:33:0c:b1:83:c2:80:66:67:9a:3a:71:f0:37:80:
a7:29:5d:c9:a8:f9:12:d8:10:10:17:23:7a:45:a2:a3:1e:00:
80:e5:36:0d:b0:74:f2:5e:46:41:9f:6a:8a:1a:cc:c6:6d:1d:
87:14:90:7d:9b:62:60:d8:10:50:e3:7a:ec:a8:cd:84:8f:95:
c4:1a:d4:3b:c8:ac:c1:d0:a5:0e:07:22:ef:38:b0:f7:52:1e:
b7:85:f0:82:a7:28:e5:44:37:60:8c:17:c6:e6:8d:35:bd:c0:
ce:d4:be:18:7a:7f:d0:85:2d:e2:aa:b7:5c:4c:87:f0:6c:ff:
a1:3e:cb:7c:26:16:23:48:42:c0:3c:76:da:b8:b8:38:fb:a7:
bd:33:47:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZSpFOVRu6B0nlZomHeBeiRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMTI3MTg0NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjBiOTE1NjlkNTg1OTBmMjdjNjVjMDg4MDI1YWZhMDdmYzI1OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qPR/5tVC9HGVUT1fqHtEl8exRc0
3OQa1fmvJxqctSfQvvGBzOtQWCHJ5yYGiGGAhIgubNCeP51+aOPgAG6iVnbpQbTp
MCzw82gFGIVEx8H2M74bvkttz1AP6pC8e16IDNZLucL8dWsPt830dGh3a4jB4lYK
5nBK+BgIIsMM0SMRMHyW8KfSKIsb/jaecad2yMeCVIssa58qFla3tkC+j50aJ7Ao
7ht1l505nNVI2Hn86SJYCWnMwsRWfyVYz2JepyuqmIGxpB4giscdEDKHSt4iTeCQ
wPQ9PPRTF+cnXPB8hznEJb4LP7njUyI57p0W/lXgLfBGLAV+IGwe4z8fMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH8LkVadWFkPJ8ZcCIAlr6B/wlmyMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZnd1UlZwMVlXUThueGx3SWdDV3ZvSF9DV2JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuc+HAwQA
ueXcMA0GCSqGSIb3DQEBCwUAA4IBAQA+7/7Opy8uhcqhfL1CQofGFuIsBMthNhac
t7hgbN2R6VADBxrNqaWsoc8xldoI93ARB092HM5batJFsa+uj9am1bGc0IhSok5c
vJRr2IuQWVHoeNudOSufmfpRNt94re5i0PE6iJRy0/yJrvZKYOWoMwyxg8KAZmea
OnHwN4CnKV3JqPkS2BAQFyN6RaKjHgCA5TYNsHTyXkZBn2qKGszGbR2HFJB9m2Jg
2BBQ43rsqM2Ej5XEGtQ7yKzB0KUOByLvOLD3Uh63hfCCpyjlRDdgjBfG5o01vcDO
1L4Yen/QhS3iqrdcTIfwbP+hPst8JhYjSELAPHbauLg4+6e9M0dd
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:14 2025 by rpki-client