Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa
File: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (raw, json)
Hash identifier: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=
Subject key identifier: 7F:F8:6E:B4:E6:C9:54:AC:F3:E8:39:55:E5:9D:0B:96:8E:F1:F4:CA
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019421B242CA6148B2A03C270D04681E132E
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57231
IP address blocks: 109.105.159.0/24 maxlen: 24
185.149.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:ca:61:48:b2:a0:3c:27:0d:04:68:1e:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ff86eb4e6c954acf3e83955e59d0b968ef1f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:d8:56:dc:a3:ff:18:c5:60:b6:08:8c:cc:
f2:26:57:8d:cf:79:7a:96:46:5e:6d:97:c4:f6:a6:
7a:7c:12:4d:77:97:79:b6:ff:8f:27:38:f6:9e:cb:
c7:1b:74:4f:33:69:0a:96:1f:54:10:6b:d5:7e:14:
77:9f:97:4a:e1:e1:89:b2:f5:32:a6:1a:49:a6:f9:
87:b0:af:a9:7b:26:05:f9:9b:b3:5f:ad:c1:dc:73:
37:e1:cd:6e:47:76:b5:06:84:d8:68:0d:a4:9b:77:
c1:b0:df:c4:da:2e:6c:7d:e1:12:f4:36:66:38:4d:
be:84:e5:17:03:73:f0:4e:4e:d3:96:3a:ff:3e:d2:
ab:26:c9:8d:99:19:cc:8f:8a:80:35:04:40:18:62:
74:22:c2:33:16:ec:70:46:1f:75:e7:27:62:08:cb:
4d:66:19:0d:aa:0a:e8:03:22:18:87:73:49:cc:01:
f1:2d:79:fc:18:cd:54:39:51:e7:41:41:f4:90:01:
3b:64:34:b1:73:89:34:d7:9c:17:0f:92:8f:18:a2:
13:64:cc:72:be:31:97:05:be:7c:ec:e3:ca:4f:67:
96:de:23:68:4f:ce:1a:cd:4a:aa:83:e9:9b:1f:61:
f0:ea:a7:d9:d2:df:ff:16:e0:cc:4a:a9:95:84:d6:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:6E:B4:E6:C9:54:AC:F3:E8:39:55:E5:9D:0B:96:8E:F1:F4:CA
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.159.0/24
185.149.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0d:96:ae:cc:1b:da:0c:44:2f:76:bb:d4:b1:b1:47:fa:22:
c7:ee:b3:13:8f:d9:bc:8b:85:11:c0:82:fb:f1:58:ef:c2:6b:
dc:28:51:99:c9:65:c8:8a:bd:e7:28:29:9c:ea:1b:2d:55:e0:
9b:39:9e:36:3b:26:40:ba:96:90:c7:ea:c5:86:3b:3c:5d:80:
00:24:5a:c1:82:dc:61:b0:64:aa:21:1b:4e:96:be:da:29:e1:
f6:09:6c:50:c9:f1:f6:21:3d:86:40:18:48:4e:d1:69:a0:7f:
ba:3e:9e:ae:d0:21:9d:f9:5a:e5:23:36:a0:fc:b7:48:ee:11:
52:9d:11:8e:0f:91:4f:4a:d7:7c:83:f3:46:9b:26:38:e3:a2:
84:b9:1f:fd:13:67:86:4d:7f:e0:7e:42:80:9a:20:9a:5f:6e:
20:48:db:3f:5b:64:be:6c:fa:cb:b4:e0:b1:a1:4b:83:06:78:
39:20:76:07:40:6a:b7:fa:cc:6a:bf:a5:db:33:e2:6f:4b:0a:
a4:88:19:de:c8:23:ee:25:cb:16:6d:66:67:d6:2b:08:57:5e:
52:8f:ac:4c:ba:0f:14:0c:34:3c:09:0e:8c:d6:54:42:51:ec:
cd:db:53:87:da:95:25:5a:66:37:17:73:02:08:a4:30:89:1c:
4a:b5:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net