Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/H78piGDM9XMhN9ttfDQLjflrGw0.roa
File: H78piGDM9XMhN9ttfDQLjflrGw0.roa (raw, json)
Hash identifier: A/U1yMrz8Q8LYte4PciQEyU7L3zVOHn5gKWczBZWelo=
Subject key identifier: 1F:BF:29:88:60:CC:F5:73:21:37:DB:6D:7C:34:0B:8D:F9:6B:1B:0D
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 0194266C3772F287ECBD98199D84BE7D5D8F
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/H78piGDM9XMhN9ttfDQLjflrGw0.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208244
IP address blocks: 5.180.115.0/24 maxlen: 24
83.171.196.0/22 maxlen: 22
146.19.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:72:f2:87:ec:bd:98:19:9d:84:be:7d:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fbf298860ccf5732137db6d7c340b8df96b1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:13:6d:5c:f8:fe:90:7f:22:ee:08:a8:9a:
8c:2e:02:75:23:39:37:22:87:f4:7b:4a:86:fa:f8:
3e:0b:06:50:02:e3:9c:76:77:b8:ab:f2:26:97:83:
5c:9f:b5:9a:8f:13:84:65:cd:00:c0:c7:43:dc:9e:
0f:fe:57:16:0c:9a:a0:c4:34:15:a5:55:a6:32:62:
5f:b1:6f:93:26:da:b1:17:64:d3:f9:b6:76:d0:ce:
42:07:bb:96:0a:dd:b3:3d:b9:4f:07:30:35:d6:ea:
4c:9b:49:d3:cb:87:21:52:9c:ec:6a:51:f0:e6:19:
a6:6c:cf:31:8a:39:9a:7e:b9:57:00:5b:b7:16:00:
c2:7b:74:aa:c9:7b:71:96:14:3a:b6:0f:7a:24:aa:
37:8d:5e:4b:5e:66:41:8c:11:b0:ef:98:00:b2:a6:
cd:d4:1f:84:96:a3:2d:43:ed:6b:19:8a:92:ae:99:
34:1f:88:5f:b0:02:99:0e:41:1e:9c:0d:a2:00:4f:
1a:99:30:e8:11:d5:cf:85:e9:8a:b3:f9:c2:a1:ab:
8f:51:ee:83:6d:62:9c:52:2d:e3:30:46:6a:f5:65:
44:05:2c:a5:17:04:06:ba:d5:59:b2:e4:47:dc:d3:
95:6a:e7:62:d3:cf:43:6a:e8:a2:db:69:1d:b1:06:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:29:88:60:CC:F5:73:21:37:DB:6D:7C:34:0B:8D:F9:6B:1B:0D
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/H78piGDM9XMhN9ttfDQLjflrGw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.115.0/24
83.171.196.0/22
146.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
be:bd:bd:2b:0a:5e:5e:6f:a3:fe:cb:2a:f0:51:4f:43:d1:9a:
fa:a3:03:13:80:a9:ad:5a:9f:14:d1:ff:02:dc:64:6e:76:4f:
34:82:6a:51:12:14:a7:c8:98:ce:e0:59:50:d4:db:b4:df:35:
16:34:6f:b3:9c:9e:24:18:58:30:df:8c:4e:c9:4e:43:b1:8a:
c0:58:d4:91:22:aa:54:b2:3e:c0:10:d0:6b:98:b6:9d:eb:d9:
45:6b:74:b2:3c:01:6c:1b:4e:db:e6:d3:97:b3:b2:c0:9f:b1:
86:4e:cc:bc:cd:a8:57:97:2d:ef:e2:c4:b8:ff:d2:10:9b:aa:
e3:64:32:15:be:07:8a:1c:0e:48:c9:3e:86:0c:e6:56:a9:d4:
60:0a:99:a4:2b:93:65:6d:fc:43:03:e8:b5:ec:f9:82:20:9f:
75:07:8e:9c:63:37:1f:d9:02:1b:0b:34:c3:3a:1f:9e:c6:ff:
2c:07:f6:da:a8:d5:17:9e:11:b1:fe:09:3d:04:f2:c6:58:a5:
79:13:ed:84:5d:4f:a6:db:0d:da:b8:6c:f2:e8:ab:d8:02:2c:
c0:8c:c4:53:c4:ca:5b:82:58:2b:44:0e:95:ff:e0:c7:78:f5:
a5:1f:05:13:d6:a3:bd:bf:87:99:dc:be:5e:72:a4:1b:ef:8e:
0b:21:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net