Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/hrGvSdLkJyoD3ZMtvao-M__6pbs.roa
File: hrGvSdLkJyoD3ZMtvao-M__6pbs.roa (raw, json)
Hash identifier: 6UHWZ2yt7HBCXCOPrR1TZg8AMD6PQq6q04hXZuTRNOc=
Subject key identifier: 86:B1:AF:49:D2:E4:27:2A:03:DD:93:2D:BD:AA:3E:33:FF:FA:A5:BB
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01962F37AB622FCDFD114DF420768CACF42A
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/hrGvSdLkJyoD3ZMtvao-M__6pbs.roa
Signing time: Sun 13 Apr 2025 12:54:59 +0000
ROA not before: Sun 13 Apr 2025 12:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.49.105.0/24 maxlen: 24
185.49.107.0/24 maxlen: 24
185.118.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:37:ab:62:2f:cd:fd:11:4d:f4:20:76:8c:ac:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Apr 13 12:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86b1af49d2e4272a03dd932dbdaa3e33fffaa5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:dc:c6:54:b1:59:a4:18:d3:ec:9b:40:2b:
ee:f5:4b:7a:dc:58:13:f9:db:c1:fd:62:5a:d3:f7:
99:0f:a4:62:18:b6:6f:2c:89:8c:69:04:11:1f:ed:
f1:68:9d:1b:04:55:b3:f7:ff:b2:7a:a5:13:c8:80:
a7:31:f6:5e:71:34:86:f6:54:b4:c0:b0:ba:b5:c9:
72:b9:63:d7:46:69:af:de:c1:41:e0:3b:e0:08:c7:
82:28:97:98:6b:d6:f2:d0:5c:70:be:13:a4:f3:fd:
eb:fc:08:b3:1a:57:8b:92:6b:18:e0:69:de:0d:97:
fc:d6:b9:cb:a3:9c:e9:f1:d8:a8:0f:68:f3:98:76:
c5:23:8a:cb:aa:65:ef:77:18:4b:26:62:b0:d4:c7:
3b:c9:41:06:09:8a:6b:bd:ca:9d:75:8c:c0:88:f5:
8e:9f:c2:7e:9e:9f:59:64:68:5b:7c:9b:a7:d0:70:
de:08:46:ce:92:4f:c6:7d:12:3a:6e:6c:32:03:34:
bc:48:f3:35:82:6e:48:4a:d6:b4:f2:44:a3:d6:58:
90:06:03:8f:0a:01:41:41:ab:4b:f7:d1:28:dd:03:
d3:eb:93:d8:ce:f2:b4:57:5f:7a:22:d8:2a:ee:32:
e1:36:81:bf:98:ba:55:8a:b8:c6:d7:e2:55:43:1b:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:AF:49:D2:E4:27:2A:03:DD:93:2D:BD:AA:3E:33:FF:FA:A5:BB
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/hrGvSdLkJyoD3ZMtvao-M__6pbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
185.49.107.0/24
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6d:1b:df:b5:19:1e:b6:0f:15:d7:8f:12:d8:43:02:98:af:
3b:29:c1:66:59:a3:7f:be:22:f2:ff:76:04:b6:c6:2e:56:ca:
52:6b:cb:1b:bb:e9:12:cb:4c:08:21:56:a5:ff:e0:cb:75:cf:
11:58:85:f1:92:af:89:5d:e7:58:66:b5:3e:6d:7a:7f:1a:3a:
89:41:5e:27:b2:49:8e:ac:51:fc:e8:ac:54:2a:cc:f5:4d:47:
42:ec:9d:36:4f:8d:c0:a0:20:29:49:ac:e5:97:ed:33:ae:21:
8f:15:71:58:89:34:79:a6:75:40:b9:2d:56:19:c0:66:36:9a:
ad:43:59:b8:ab:6b:5d:8c:fa:b2:8c:46:35:1f:f8:42:90:f3:
eb:ef:93:44:04:10:9a:67:f4:c8:2e:6f:18:c4:a1:1e:fc:b4:
88:e1:e4:a2:77:0e:29:0f:c9:8f:20:a5:85:12:98:7c:0b:dd:
4b:11:3d:b9:e9:de:78:ee:98:bb:b1:22:ae:64:c9:db:92:57:
0d:51:21:2b:78:0f:6e:7c:5e:83:83:90:cc:62:fc:6c:7e:c7:
04:71:c1:31:b8:3e:a5:ec:a9:8b:c4:e8:89:a5:f5:2f:a8:67:
3a:eb:4d:0b:50:6d:93:97:f3:e5:81:23:b8:ea:f2:e3:d4:c1:
34:2e:31:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net