Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/HyOxfsfCg8-tkufuXac7nvkK01o.roa
File: HyOxfsfCg8-tkufuXac7nvkK01o.roa (raw, json)
Hash identifier: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=
Subject key identifier: 1F:23:B1:7E:C7:C2:83:CF:AD:92:E7:EE:5D:A7:3B:9E:F9:0A:D3:5A
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0194228E2E4BC9C1FF2BB4AC2500F1325D1A
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/HyOxfsfCg8-tkufuXac7nvkK01o.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43212
IP address blocks: 185.11.68.0/22 maxlen: 22
185.11.68.0/24 maxlen: 24
185.11.69.0/24 maxlen: 24
185.11.70.0/24 maxlen: 24
185.11.71.0/24 maxlen: 24
185.59.112.0/23 maxlen: 23
185.59.112.0/24 maxlen: 24
185.59.113.0/24 maxlen: 24
185.83.196.0/22 maxlen: 22
185.83.196.0/24 maxlen: 24
185.83.197.0/24 maxlen: 24
185.83.198.0/24 maxlen: 24
185.83.199.0/24 maxlen: 24
2a03:9080::/32 maxlen: 32
2a05:9e40::/29 maxlen: 29
2a06:e080::/29 maxlen: 29
2a0b:3000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2e:4b:c9:c1:ff:2b:b4:ac:25:00:f1:32:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f23b17ec7c283cfad92e7ee5da73b9ef90ad35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:80:ed:4f:74:c3:13:0a:8a:4c:df:03:9e:
45:f3:52:d5:e2:86:f0:16:cc:06:a9:9f:36:fb:67:
dd:1a:94:62:4d:4f:12:fb:65:1b:b4:b9:20:58:6b:
13:93:73:61:be:8f:e6:3c:cd:fd:5e:48:b9:5c:23:
8f:33:9a:5c:15:15:ae:2d:18:49:f2:54:6b:b1:c3:
20:f2:f4:91:98:79:7e:b8:6f:2d:a8:4f:8a:ea:82:
6d:c9:f0:f5:f2:e6:d7:14:76:4d:c4:0a:0a:5b:b2:
3e:e7:0f:fc:9b:da:05:9c:ed:00:2d:ea:8d:ad:87:
a3:10:b9:19:35:df:b9:5a:e9:1a:da:00:17:a6:8a:
dc:1e:64:4c:87:59:ed:37:e7:3c:35:5a:17:0e:51:
1f:f5:42:7b:d4:f9:f7:9d:68:93:1e:40:bc:e3:e7:
c3:10:16:3e:a1:aa:3e:07:56:bf:cd:5d:1b:7e:f4:
f3:16:be:f1:f2:bd:90:86:2e:77:5a:84:6d:af:96:
d1:99:99:da:d1:b5:77:80:80:27:48:ce:65:22:bf:
2f:b8:d3:8e:8e:f5:c9:8c:1b:33:45:5b:a8:97:27:
31:a3:64:8d:5d:bd:2c:82:c9:ad:39:cd:d6:18:98:
41:2a:ca:6f:f0:aa:b5:ce:74:28:31:84:74:dc:37:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:B1:7E:C7:C2:83:CF:AD:92:E7:EE:5D:A7:3B:9E:F9:0A:D3:5A
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/HyOxfsfCg8-tkufuXac7nvkK01o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.68.0/22
185.59.112.0/23
185.83.196.0/22
IPv6:
2a03:9080::/32
2a05:9e40::/29
2a06:e080::/29
2a0b:3000::/29
Signature Algorithm: sha256WithRSAEncryption
a1:af:66:66:1b:e0:93:c0:6e:21:aa:56:4c:fe:4c:1f:39:46:
16:45:4c:85:36:73:d1:b8:9e:56:08:39:cc:76:57:58:43:2f:
f8:8b:55:0c:0b:f8:78:67:16:87:b4:a0:b6:26:ac:56:22:a9:
81:71:d9:fd:4c:0e:88:cd:31:1f:51:51:79:4b:78:12:73:15:
64:26:9c:d8:b2:cd:5e:29:fc:e6:93:f9:c1:cc:03:9a:eb:86:
6f:69:f5:d7:d9:7d:11:40:55:5c:04:c5:8b:49:89:98:eb:bf:
0e:7a:bb:b7:90:33:5b:51:2d:ff:0c:75:0c:ce:d2:92:ab:fe:
2c:53:81:7f:f8:22:1d:f7:6c:26:ab:8c:f9:3c:39:42:b2:41:
5f:db:7e:42:78:dc:9a:34:e8:00:6e:ad:cb:3d:c7:80:f3:33:
f8:1f:c4:2b:bd:df:10:f2:3e:dd:66:fc:7b:51:9a:9c:e3:89:
57:ca:f8:7d:b1:da:6c:90:90:f2:09:ac:2e:ea:3f:cb:3b:4c:
c4:19:70:f9:0b:e6:f1:5d:df:7a:48:97:27:09:3d:d3:dc:a9:
1e:08:b0:78:05:68:d7:f8:26:17:8f:17:c8:5b:01:29:a7:3c:
e9:64:56:be:2d:4d:fc:c4:bc:60:04:14:7a:46:03:57:78:62:
c1:ba:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:14 2025 by rpki-client