Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa
File: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (raw, json)
Hash identifier: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=
Subject key identifier: 87:4C:3F:90:52:93:D1:7A:AF:BC:38:C5:58:DD:21:6D:D3:FA:47:42
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 01941FFA1F87B73529AAD1C19AFBFE162D8B
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205685
IP address blocks: 185.209.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:87:b7:35:29:aa:d1:c1:9a:fb:fe:16:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=874c3f905293d17aafbc38c558dd216dd3fa4742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:e7:35:c0:48:22:9a:23:cb:ae:09:09:3c:
53:27:45:00:b3:57:28:01:a8:47:67:bc:74:15:ba:
ea:26:89:4e:1a:39:f9:80:a0:71:c4:c8:38:27:c1:
b6:f8:d6:38:eb:76:a6:66:09:a8:37:7e:05:92:f5:
d8:fe:fa:94:dc:08:c7:6c:a0:ab:58:75:11:9a:30:
b6:52:5a:5a:29:09:df:01:0d:cc:c6:fc:ba:26:54:
6e:62:46:47:2b:c7:a9:77:7c:15:94:0c:11:e3:80:
f0:bd:6b:99:7e:cc:93:63:ae:0c:86:4a:10:9d:65:
92:d9:ac:c2:ea:95:1b:90:55:95:82:ad:cc:78:36:
74:46:8c:a8:4e:ce:c9:75:cf:15:b2:4b:8a:5d:a3:
06:52:c1:e8:45:6e:59:da:d7:3c:27:71:dc:9d:3c:
f7:34:3e:c7:1d:ce:8e:c2:e3:8f:ce:82:b0:03:cc:
c2:88:e5:d4:d7:e1:f2:3f:85:5f:2d:da:35:71:24:
d1:be:38:92:9b:8b:5c:42:23:10:cb:0a:64:62:d6:
7d:a3:89:22:f3:7a:c3:2e:e3:ad:0f:be:98:63:3c:
44:75:bf:b3:08:46:4b:7a:53:b0:54:a2:d1:bc:2f:
94:1e:4e:64:5d:97:ad:6e:c5:6f:14:0e:b1:ff:bc:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:3F:90:52:93:D1:7A:AF:BC:38:C5:58:DD:21:6D:D3:FA:47:42
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.68.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:b6:c8:f6:09:6a:35:4e:68:a0:25:50:0d:43:b3:31:91:31:
04:0b:98:a5:59:71:03:95:07:9d:db:54:07:46:cc:3b:53:ce:
7b:fe:6b:88:68:3a:70:45:13:a0:61:8b:a4:0e:2a:5e:be:2d:
3d:bc:70:89:58:f4:a9:40:82:b7:db:e9:fe:0f:c4:52:ab:94:
fc:36:f6:37:e6:57:e2:2b:b3:75:7b:5d:d6:78:6c:ea:34:c2:
94:5f:28:12:c4:92:b5:30:e0:88:ea:db:e9:e9:60:3d:d3:dc:
1e:ec:8b:3b:fd:30:5d:55:51:cb:c8:6e:45:2e:22:bf:47:99:
a5:11:ff:09:7e:89:67:1a:7c:4c:6d:28:03:25:bc:d4:2a:2c:
3b:83:b2:8b:c0:1e:2f:a5:bf:13:0c:71:3e:2a:3a:a6:ca:35:
45:77:57:d0:41:37:16:83:c5:53:15:d6:5c:f8:9d:13:f0:75:
0b:73:1c:16:30:8e:98:bb:44:55:77:40:29:b4:79:0a:ab:20:
22:40:97:2b:c6:43:f0:6f:48:25:ce:f9:2c:fd:4f:13:32:8b:
d2:eb:e0:41:fd:67:51:0a:af:d5:2f:00:7e:26:d2:62:ba:37:
ca:8e:9d:4e:b5:e0:3e:b9:8a:a8:1e:0d:70:65:a5:4d:79:f3:
54:b7:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:05 2025 by rpki-client