Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa
File: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (raw, json)
Hash identifier: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=
Subject key identifier: 1C:78:0E:0D:93:58:69:69:A7:03:3B:B9:63:93:4D:73:EB:CF:AE:72
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 01944FD5FDEDA9E55CFB8BBA6F2C0D147624
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa
Signing time: Fri 10 Jan 2025 10:50:11 +0000
ROA not before: Fri 10 Jan 2025 10:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199174
IP address blocks: 185.81.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:d5:fd:ed:a9:e5:5c:fb:8b:ba:6f:2c:0d:14:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 10 10:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c780e0d93586969a7033bb963934d73ebcfae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:cc:10:0b:55:4b:35:de:07:b1:b0:28:95:
94:cb:02:c3:3d:6e:8b:ad:8e:53:c6:80:e6:70:6b:
cb:ef:74:cf:82:e1:05:6f:f2:36:24:37:94:d8:ef:
9a:9b:5c:c9:f9:50:90:51:e5:14:ba:a2:7a:2b:88:
96:3a:ae:f4:0e:75:ab:4a:8d:eb:40:99:dd:6e:67:
c0:c7:b6:d7:c1:4a:42:75:b1:3b:a3:db:6d:28:06:
27:10:9a:da:c0:b7:3f:84:c0:ff:5e:19:a1:5d:f7:
ee:a1:70:09:9f:4a:c8:51:35:4b:cf:83:4a:fb:5c:
54:3e:4b:eb:7c:88:d5:91:81:1e:a2:df:67:4a:c1:
da:90:9e:d7:bf:51:51:02:b2:11:ca:b7:dd:b0:07:
27:d7:01:3d:c9:ad:26:50:ae:9e:91:c1:ce:a3:32:
45:5f:ae:0e:5a:78:ca:8f:bd:5c:02:30:de:b4:a0:
3d:79:de:e0:df:65:05:0c:30:59:f9:a1:e8:02:7a:
19:dd:5f:e1:33:d5:aa:7d:17:10:53:d1:ac:cb:55:
46:c1:fc:26:7e:3a:4c:e3:38:80:63:89:04:91:97:
01:cd:cc:99:06:b4:4f:ea:18:6a:e6:3b:1b:2e:29:
58:9f:7d:22:55:19:a1:47:ed:a6:e4:51:17:c6:75:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:0E:0D:93:58:69:69:A7:03:3B:B9:63:93:4D:73:EB:CF:AE:72
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.121.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1b:5e:23:57:ae:39:98:cb:ff:42:05:95:43:40:66:18:fc:
4e:6b:93:fb:b2:fd:cb:a9:86:59:22:95:16:2b:58:c2:ff:d8:
cc:62:1a:53:81:ca:e2:fc:d1:f1:ed:7e:82:db:67:48:b0:30:
7b:0c:51:0f:72:fb:32:42:d8:60:42:1a:3f:9b:05:3c:11:ab:
a5:30:92:08:12:06:cf:16:10:3a:1a:3f:fe:79:3a:26:d3:56:
4d:6e:32:3a:48:0f:08:1f:1b:1d:58:71:d3:09:30:7e:35:48:
e9:6b:6f:c6:d5:f1:8c:94:25:d1:f4:9e:b1:5f:f0:ae:ee:35:
2f:07:28:41:fa:52:f5:b2:e3:38:f3:36:37:ed:ab:8f:af:50:
99:12:37:7d:f7:24:85:67:fd:d6:89:49:d1:e8:85:c0:80:39:
6b:45:a4:2f:23:5f:28:a5:79:fc:ab:2a:e4:f5:96:70:40:e5:
ba:49:86:70:32:17:ab:0a:35:79:e5:25:35:48:f0:d1:8e:cb:
6a:44:fc:b6:fb:98:d4:a4:46:ad:51:bc:30:1d:14:27:98:01:
f6:5a:11:05:4d:83:5b:c2:5a:b6:e4:0d:8d:50:a4:28:88:b8:
da:76:c1:cd:7a:93:28:5a:58:b9:49:cf:59:60:ac:46:8b:fa:
f5:6e:76:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net