Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa
File: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (raw, json)
Hash identifier: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=
Subject key identifier: 1E:14:B1:40:40:1C:B7:F1:E2:96:69:F8:4B:C1:2A:E8:3B:EB:2E:F2
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019420D65C8785D7F2C440433559D68AF427
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199753
IP address blocks: 91.223.151.0/24 maxlen: 24
185.89.56.0/22 maxlen: 22
194.117.254.0/23 maxlen: 23
2a05:d580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5c:87:85:d7:f2:c4:40:43:35:59:d6:8a:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e14b140401cb7f1e29669f84bc12ae83beb2ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:2e:ed:dd:1c:a7:dc:d3:fc:51:79:df:d9:
1d:22:36:e3:ea:9e:4c:38:71:13:5c:da:23:4f:7a:
76:aa:fc:b8:85:9b:7c:ba:c6:d7:48:c4:68:7f:43:
53:22:99:80:7d:80:25:39:f3:c1:5f:b1:21:70:7a:
a0:62:25:1c:a4:64:5f:2b:f8:08:87:6f:f4:cb:e2:
f8:db:79:ab:5a:e2:74:9f:d4:c9:96:2d:a5:a9:ad:
42:df:b9:ef:70:98:cf:5c:4d:39:2a:1c:30:0e:f3:
5c:6c:bb:48:bd:82:37:04:bd:d3:c6:74:ef:17:c8:
fb:59:a3:15:70:83:73:8d:0d:e9:fd:18:2b:8f:27:
0b:21:5f:a0:a0:fb:ae:ed:58:41:f3:23:0b:92:54:
a0:ff:7c:38:f8:a9:ac:80:1d:85:04:b4:15:8b:e7:
d6:a7:05:6f:5a:ba:68:b2:20:c8:99:e2:99:c1:7a:
f6:0c:62:12:45:ad:34:40:71:bb:e3:d9:5e:c2:14:
dc:8e:5b:cc:4a:75:44:6b:75:15:d4:5c:d6:a3:9f:
22:c5:41:15:df:4f:f2:05:b9:d8:09:82:87:55:8a:
f6:6d:bd:70:e5:b8:93:e8:c6:bf:5c:a4:ae:f5:f2:
d2:be:9b:11:31:5e:13:d5:37:44:ad:14:6a:1f:56:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:B1:40:40:1C:B7:F1:E2:96:69:F8:4B:C1:2A:E8:3B:EB:2E:F2
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.151.0/24
185.89.56.0/22
194.117.254.0/23
IPv6:
2a05:d580::/32
Signature Algorithm: sha256WithRSAEncryption
0e:be:8b:ff:72:22:53:99:f4:a2:5c:07:4c:ca:fb:fb:8d:53:
3a:5a:20:26:ce:a6:e2:0b:26:ca:5c:af:5e:ff:9f:e7:ef:7e:
dc:4e:95:35:5d:a3:48:a5:4b:45:00:b3:b2:c4:41:b5:44:6a:
16:8b:7c:46:28:a3:a4:58:57:6b:a8:f3:bd:87:c4:fb:15:ee:
3f:99:08:b5:43:55:2f:f2:86:66:c4:c9:3e:1f:7a:76:2b:f8:
43:2c:03:0d:d4:94:d2:65:37:b3:04:77:e3:e7:27:46:e4:35:
d0:ed:56:b3:9b:8d:70:8f:ad:e7:48:d3:7a:c3:53:37:21:09:
e4:e8:3f:ef:b3:67:8b:79:25:7a:3f:84:2d:51:27:26:2a:c2:
7d:ff:a8:19:c7:18:2f:34:bd:b9:14:1c:e1:b1:7b:ee:87:ef:
60:e0:57:0b:ab:f8:76:db:6b:25:19:b4:e1:03:c1:51:4c:72:
33:ca:42:ac:36:36:89:8d:e4:b8:13:66:0b:bd:5d:bd:3f:31:
65:3a:53:bd:66:bc:35:33:a6:e7:d1:58:00:2b:74:7d:30:81:
e5:dc:39:ba:a2:4a:ae:a4:56:37:b8:8c:b6:75:43:ff:7e:0f:
4f:7a:ba:31:23:0d:c5:63:f8:37:e8:dd:52:eb:69:3d:8b:39:
b4:95:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net