Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa
File: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (raw, json)
Hash identifier: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=
Subject key identifier: 1F:CF:8F:3B:01:E2:CE:49:81:71:5F:D0:27:FD:3E:27:1C:B3:C3:91
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 019425FC481B987C085B18F5337A025298CE
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198349
IP address blocks: 185.19.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:48:1b:98:7c:08:5b:18:f5:33:7a:02:52:98:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fcf8f3b01e2ce4981715fd027fd3e271cb3c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:97:36:bb:1c:b0:aa:f9:10:1e:ef:1e:10:
9b:25:13:4a:e9:0c:e7:b8:b0:2f:47:9f:f2:6c:74:
3b:77:1c:2b:c5:d0:7f:03:67:8e:f4:4e:87:be:89:
ab:3f:d3:96:25:94:8b:9c:41:fa:2f:c2:7c:f6:e2:
63:a7:ea:4d:bf:bf:58:02:8b:4f:95:bc:c2:65:c5:
25:0c:c3:8e:23:3b:43:ac:7d:0f:a5:d5:50:07:1d:
d8:9e:57:93:25:f8:3a:ee:d3:43:35:2f:32:27:6a:
5e:fa:81:ce:e7:1e:76:9e:5a:6d:a0:40:51:1c:8b:
b0:77:cb:6d:f3:22:a3:f3:7c:e4:1f:db:b4:f8:48:
85:bc:22:e6:ca:68:e7:ec:c1:ec:97:f7:7a:9d:ac:
a1:fd:44:d5:0f:a4:98:97:f2:43:0a:f9:ee:4b:fc:
73:e8:f2:bd:ec:ed:57:57:2e:c6:77:11:d4:ed:19:
cb:ae:cc:d1:ee:a8:0b:2f:aa:f0:4b:a9:06:2d:ea:
2e:3b:be:ed:6f:62:1a:6e:e5:96:fa:c7:36:27:83:
d5:a2:15:b1:50:7a:f4:2b:06:48:71:a9:6a:81:ef:
81:35:a6:44:68:bb:f8:ff:02:60:2d:f2:87:18:57:
a3:3c:88:07:31:ac:be:3a:9e:04:15:84:61:ef:d7:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:8F:3B:01:E2:CE:49:81:71:5F:D0:27:FD:3E:27:1C:B3:C3:91
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.140.0/22
Signature Algorithm: sha256WithRSAEncryption
06:39:0e:2d:c4:a8:a4:ef:0d:e4:56:0a:2c:8c:c3:97:d8:6f:
ea:22:06:f8:f5:eb:7e:94:18:82:cf:c3:e8:27:07:7a:c6:55:
4e:63:9c:7a:e5:20:9b:34:d5:22:01:08:2f:7d:cf:3d:92:95:
c3:e9:3f:f3:96:96:d3:f4:c4:f8:c8:ef:1a:8c:af:35:60:b2:
dc:20:c4:53:59:34:3c:10:c3:8e:b0:be:64:ec:21:9b:08:db:
e7:22:3c:ec:62:fd:0f:a5:b5:83:67:3b:0f:eb:cf:f7:05:0c:
38:b8:81:1b:09:00:ad:c1:37:c1:9c:b3:01:cf:ca:26:94:3e:
f1:30:01:2b:df:94:e7:b3:01:20:d4:03:65:6e:ad:cd:e1:ba:
01:dd:56:34:89:a3:6a:68:44:e9:e2:5f:56:c0:20:08:9c:a2:
b8:9e:ee:8b:e2:a5:c6:fe:c5:02:79:95:0d:b8:72:3d:cf:43:
f9:42:ed:9a:9a:ff:01:36:4f:98:a7:06:2f:bc:55:24:31:91:
97:71:bb:8c:a1:ed:3f:84:ee:e4:4a:22:a3:9b:37:bb:02:36:
6c:8c:35:79:57:d8:f5:7e:3d:67:88:f3:5b:e2:ce:98:78:9a:
45:b2:68:af:c7:af:4f:5c:bb:a2:ee:5f:e3:8e:e4:bb:83:35:
a4:a0:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net