Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa
File: ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa (raw, json)
Hash identifier: 1oNnxxsmF38W2k7eLcfUs5CR/Cu2kC+IeFK+jVllmvU=
Subject key identifier: 86:8E:E1:09:BC:3D:67:74:DD:96:D4:1D:BE:82:91:7A:66:36:05:94
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 019427B6249D060C212E1CC316644EEF25FB
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12307
IP address blocks: 185.119.104.0/24 maxlen: 24
185.119.107.0/24 maxlen: 24
2a06:8a00::/29 maxlen: 29
2a06:8a00::/32 maxlen: 32
2a06:8a07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:24:9d:06:0c:21:2e:1c:c3:16:64:4e:ef:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=868ee109bc3d6774dd96d41dbe82917a66360594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:1a:7c:09:9b:17:68:2a:df:02:34:d9:22:
dc:96:06:03:7f:01:1a:6d:46:10:57:54:be:46:14:
fd:2a:cd:98:b0:90:35:0c:ed:d2:c8:6e:20:ed:20:
fc:ea:40:77:ff:39:0f:26:15:bd:e8:0b:d9:85:84:
b8:ef:1e:20:44:11:8a:53:61:c8:84:e9:3c:7e:f3:
6b:83:0f:0d:17:23:b3:56:7c:98:61:29:fc:f8:c2:
08:a5:be:5e:96:08:f8:49:94:29:22:7c:67:30:0e:
4d:29:f1:d4:a4:c1:f9:64:2f:42:e4:89:6f:9e:dc:
57:b5:36:25:02:31:0b:af:41:ab:0e:b7:8f:42:cb:
c0:bb:87:df:7a:ef:47:7e:7a:14:04:77:50:55:80:
6e:80:2e:93:be:ae:65:d9:48:17:4e:00:e2:96:d9:
74:ee:42:0d:27:b1:fa:8e:f6:7b:33:f2:e1:13:68:
e8:2e:32:8f:05:09:f3:4c:6d:95:f8:08:78:e2:e7:
f6:ed:b1:9d:71:64:b2:43:0c:4c:81:77:23:f6:aa:
ac:ab:07:e9:8b:e7:3f:e1:f4:bb:b6:9c:e7:89:11:
45:ef:7c:e0:f0:c7:5f:28:98:12:db:d4:54:18:f7:
55:62:af:24:b2:f2:34:8b:a8:fd:03:49:25:ab:60:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:E1:09:BC:3D:67:74:DD:96:D4:1D:BE:82:91:7A:66:36:05:94
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.104.0/24
185.119.107.0/24
IPv6:
2a06:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
98:b0:ff:2d:f5:90:20:50:b4:1d:a4:69:76:49:64:61:90:94:
e1:ea:23:e0:c3:63:33:bc:6d:22:61:7d:ba:49:52:e0:39:07:
45:b4:5d:91:9d:46:ca:0c:ed:c1:e6:d6:33:ce:24:9b:87:85:
85:20:45:20:f1:0b:09:b6:21:43:47:63:ff:f6:dd:22:a5:10:
a0:5a:f4:a6:9f:77:d4:e3:6e:5f:15:bb:d8:13:3f:29:fd:35:
e2:a7:8b:89:81:2c:27:6f:19:b6:5a:e6:64:83:8c:31:4e:1e:
1c:eb:c3:04:21:52:19:af:97:18:4e:36:c1:24:8c:e9:c5:e2:
e2:8a:ee:92:cb:6e:61:90:d6:0f:f6:cf:2d:7c:54:0b:84:23:
e6:20:d2:d8:24:93:0f:94:8d:28:66:1b:25:1d:9e:06:05:d0:
67:d6:7e:3e:db:4d:44:cd:54:96:eb:ee:59:38:1b:bd:ad:a1:
22:e5:f3:9b:53:3b:91:00:8d:dd:70:0f:e6:56:46:79:5e:d0:
11:38:c4:02:4a:f0:35:b9:2e:eb:a8:61:5d:66:0d:bb:a1:79:
20:af:b6:47:8a:7f:0f:b8:1f:9a:6f:9c:1a:14:ad:59:38:0b:
8f:3a:df:7c:8f:2c:95:ec:44:c1:c4:af:18:23:bd:e5:a4:54:
82:91:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net