Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/hmlDPtU43ODpSbSwKm7b72QgfNg.roa
File: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (raw, json)
Hash identifier: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=
Subject key identifier: 86:69:43:3E:D5:38:DC:E0:E9:49:B4:B0:2A:6E:DB:EF:64:20:7C:D8
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 019424454A6004D39D19166CD1D1D2B897AA
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/hmlDPtU43ODpSbSwKm7b72QgfNg.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212886
IP address blocks: 185.236.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4a:60:04:d3:9d:19:16:6c:d1:d1:d2:b8:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8669433ed538dce0e949b4b02a6edbef64207cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:43:87:05:70:3b:89:07:f3:0e:54:9e:74:
82:0e:b6:99:86:e4:a3:2f:4c:65:b4:a1:76:30:0a:
7b:5b:6e:58:dd:6b:23:3c:86:7a:66:fb:55:e3:fe:
22:61:18:f1:b1:96:09:40:95:0e:a0:c5:16:8b:83:
db:b4:96:75:ab:64:20:b8:c6:8a:b8:64:9d:f1:81:
d7:37:82:42:40:34:c7:9e:e9:55:7f:72:7e:29:f1:
6d:a1:dd:90:62:bd:e8:fc:d4:f2:bd:dc:f2:09:ea:
b2:c9:18:99:48:4d:ee:16:00:d6:df:ff:65:64:91:
c4:f1:62:d9:25:13:44:81:08:0a:b4:8c:ab:66:2f:
89:c6:8f:08:1a:68:b1:d6:3c:02:b6:20:40:da:74:
39:fe:67:88:32:e5:8e:87:83:0e:2c:d4:de:e4:0d:
a3:90:d3:ad:ae:55:97:3c:19:9f:26:87:9c:71:d5:
36:3c:e2:e0:5a:bb:0f:c0:99:6b:7a:07:51:be:cf:
75:ca:9e:a5:25:ec:e9:c7:57:1b:7b:81:10:3e:62:
92:a2:c8:b7:98:8e:3f:a5:e3:22:9c:b7:59:4d:76:
59:6a:e9:65:01:d0:5c:4d:91:b9:aa:19:f9:3f:39:
e3:ca:27:ba:ae:f2:d6:2a:1c:60:aa:e5:a9:af:d2:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:43:3E:D5:38:DC:E0:E9:49:B4:B0:2A:6E:DB:EF:64:20:7C:D8
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/hmlDPtU43ODpSbSwKm7b72QgfNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
18:73:c6:a7:01:2f:97:1f:b2:b3:5f:a6:db:e5:20:9e:1b:ae:
46:8a:9e:a0:22:f0:f5:16:54:26:40:21:3f:d9:8c:11:16:82:
76:8f:48:51:0d:9b:98:a8:c4:31:4d:9c:c3:24:bf:91:84:c7:
ed:c1:20:4c:25:98:04:bc:f9:e9:da:e5:e6:0b:8b:e6:cc:2d:
90:50:cf:9d:45:ae:70:6b:e9:79:38:86:85:b3:dd:b3:3c:59:
0c:cd:40:09:55:41:65:7a:3c:07:80:60:4b:f0:df:b1:56:f1:
d5:dc:1f:f8:90:21:fa:89:1a:28:75:be:af:74:04:64:da:37:
ae:76:23:34:15:b4:9c:c0:46:22:b6:fe:38:4c:68:1b:b0:f8:
6a:7d:a0:58:5b:e7:71:d4:55:41:90:40:70:35:b2:ae:30:66:
4a:92:d0:ed:66:f2:6b:8e:05:ef:99:fe:26:c5:6e:81:f5:a8:
0d:f5:92:ec:d3:00:77:e8:f6:91:92:6f:91:08:49:07:cb:68:
a5:8e:0d:a8:35:0d:02:7b:1e:07:bd:ad:d6:60:33:00:c8:12:
b9:95:59:1e:50:7a:c1:da:e8:8e:1d:af:aa:ce:25:f4:51:83:
90:98:6a:ad:b9:b1:b6:70:d0:a3:72:f7:87:75:ec:ef:3d:37:
ed:53:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:47 2025 by rpki-client