Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/HSVwt--DzWDkBP5CsO5ZbjFMZoI.roa
File: HSVwt--DzWDkBP5CsO5ZbjFMZoI.roa (raw, json)
Hash identifier: T+g9fbCJgRYga5TcIizeTX1mzxsPnJwdubT6kbmuBRY=
Subject key identifier: 1D:25:70:B7:EF:83:CD:60:E4:04:FE:42:B0:EE:59:6E:31:4C:66:82
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019456C272B28E66B556945EDBB4A4149D9A
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/HSVwt--DzWDkBP5CsO5ZbjFMZoI.roa
Signing time: Sat 11 Jan 2025 19:06:11 +0000
ROA not before: Sat 11 Jan 2025 19:06:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204908
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
185.236.28.0/24 maxlen: 24
185.236.29.0/24 maxlen: 24
185.236.30.0/24 maxlen: 24
185.236.31.0/24 maxlen: 24
2a03:9000:100::/40 maxlen: 40
2a03:9000:300::/40 maxlen: 40
2a03:9000:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:56:c2:72:b2:8e:66:b5:56:94:5e:db:b4:a4:14:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Jan 11 19:06:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d2570b7ef83cd60e404fe42b0ee596e314c6682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:ad:45:7d:20:42:df:2e:38:d0:96:b7:7c:
83:72:04:b3:a8:cb:0b:14:3c:b0:1e:e7:b4:58:1d:
5d:2a:67:60:1f:69:9b:71:71:57:ce:ff:cf:74:86:
bf:af:6d:54:bc:ba:72:c4:54:4b:63:45:ae:e1:4c:
41:80:72:f9:5f:5e:fc:19:7c:37:c8:37:01:cb:25:
d7:2b:34:ac:5a:af:3d:20:bf:da:99:94:d4:32:c7:
74:94:44:40:74:53:fb:05:f1:20:6f:76:75:f1:f6:
bd:95:49:91:01:b6:b9:ff:33:ea:36:5d:6c:71:5c:
65:65:00:8f:80:cc:fd:ec:b9:06:f8:a6:e3:2d:74:
69:7f:18:60:50:6f:06:e7:7a:11:96:43:57:d5:8c:
28:a1:b7:a0:0e:d4:c8:03:93:f6:f4:0a:a3:40:3c:
ea:66:ff:36:a6:2e:ed:d7:d2:1d:c2:ea:77:84:d3:
9e:bf:3a:69:e4:79:18:aa:bc:79:9c:1b:62:4e:b7:
e1:63:4b:d9:6c:9a:11:9f:9f:51:92:0d:92:fb:21:
e9:e8:de:80:43:39:91:7c:01:04:be:d7:a1:b1:62:
ce:47:09:4d:35:f1:dd:ce:8e:6c:4f:3c:b5:43:bb:
7a:5f:44:ab:92:a3:63:42:f6:23:bd:bd:ce:47:85:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:70:B7:EF:83:CD:60:E4:04:FE:42:B0:EE:59:6E:31:4C:66:82
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/HSVwt--DzWDkBP5CsO5ZbjFMZoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/23
185.236.28.0/22
IPv6:
2a03:9000:100::/40
2a03:9000:300::-2a03:9000:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:9a:ae:b1:47:23:a3:dc:58:fb:51:4e:b4:2b:fc:23:53:2d:
e4:c3:ce:43:28:ad:1a:ed:0f:76:62:b1:aa:4d:04:d4:11:8d:
2e:19:45:37:03:10:d9:b0:23:fa:e5:33:68:ee:ed:3c:8d:d7:
2f:5d:cb:35:83:3a:9e:df:05:a1:63:45:61:d8:c5:d8:97:e8:
72:6e:8d:c3:16:58:b6:8a:0a:67:2a:47:18:c7:c2:49:f4:1b:
95:2e:6b:0d:fc:c8:83:31:46:57:6c:4d:ff:e1:07:9a:f4:82:
f1:c7:d8:17:af:06:01:b3:89:1b:b9:17:08:f7:6d:89:31:7f:
b7:bd:93:c2:1c:68:ae:9b:ef:69:0b:bc:e3:c2:0e:99:07:32:
f1:b7:1b:00:69:da:54:e5:3c:89:9a:33:31:be:a2:84:13:33:
fb:20:67:3a:f8:00:60:8e:8c:4f:e9:ed:2f:8e:79:4c:b2:4b:
99:33:f9:f4:bc:68:a6:ae:65:e0:9c:f4:ee:e4:89:2f:f0:3d:
71:3d:46:d2:2d:86:1c:ac:d4:09:f5:c3:c7:c2:e0:cf:fe:85:
3e:dc:e6:38:89:19:98:c6:d5:18:1f:f8:e3:6b:68:13:87:bc:
9f:ed:58:94:fe:22:99:4e:f8:d9:ae:d0:48:46:b8:f9:05:0e:
85:dc:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net