Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa
File: JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa (raw, json)
Hash identifier: PHwjXpxNa4Nxa9fqZhKBs8iq8segIku/HFSGGt3kNbU=
Subject key identifier: 24:78:ED:47:A7:4F:1D:95:C5:06:C2:0E:67:0D:2E:EB:15:8F:F8:10
Certificate issuer: /CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Certificate serial: 01942748774A3AB5CFA97DD64DFD3375AC6E
Authority key identifier: 5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 185.149.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:4a:3a:b5:cf:a9:7d:d6:4d:fd:33:75:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2478ed47a74f1d95c506c20e670d2eeb158ff810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:7c:14:1b:bc:09:52:fb:13:7e:23:8f:4f:
2b:cc:d1:37:a6:26:b0:21:62:b7:08:f2:75:67:76:
43:6d:43:1c:5d:c6:a5:dc:4c:dd:cc:28:f4:b9:28:
37:a4:9e:4f:bd:ff:4c:39:86:de:b3:5a:d0:6a:2f:
48:0b:61:a5:96:d4:e4:f3:36:bc:58:44:67:05:1f:
cc:b8:73:00:8c:72:76:3e:12:80:87:30:7f:15:ee:
c5:bf:2e:c0:1f:92:75:fd:1a:5e:bc:6c:fd:4d:e6:
2e:51:ef:cb:03:99:17:ae:75:64:99:87:ef:c6:70:
43:1b:43:56:71:30:7a:7a:41:cf:21:1e:28:ec:27:
cd:f4:b3:86:4e:3e:64:82:e6:cf:50:f9:0d:37:16:
9c:9f:ea:10:a7:6b:ac:bd:fb:4d:58:13:76:25:6e:
94:71:9d:bc:0c:e4:65:f0:72:2c:ce:49:14:5e:03:
fd:e2:5c:3c:58:e3:7e:76:61:b6:d3:7a:bc:ae:38:
a6:e5:7d:e9:d1:f0:6b:23:a8:ae:a9:08:d9:19:53:
bf:b9:e2:7f:b5:fc:ed:9e:1a:b1:aa:1e:ba:1f:e7:
97:eb:56:11:f6:62:19:5e:b7:41:8e:1e:9c:ee:d3:
10:44:db:f7:fe:11:36:94:ca:81:0a:ec:b9:91:0e:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:ED:47:A7:4F:1D:95:C5:06:C2:0E:67:0D:2E:EB:15:8F:F8:10
X509v3 Authority Key Identifier:
keyid:5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.193.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e2:1e:59:65:65:14:b7:34:af:15:c9:cb:19:69:1c:e1:42:
a8:fb:50:8a:6d:b6:98:7e:d8:aa:61:5b:74:f8:cd:00:69:95:
6d:9a:c5:65:c8:3e:2c:01:51:4c:49:cd:db:5f:84:28:6b:ef:
a8:be:fc:bb:a5:c4:a1:bb:e8:8b:cf:37:da:82:f5:f4:9e:e5:
70:fa:6d:91:7b:e0:0d:b1:f5:64:62:ea:0e:20:92:4b:49:78:
ce:cf:76:4e:16:d8:40:ea:5b:3f:6b:cc:16:f7:85:7e:e3:de:
be:0e:e0:fd:63:92:a9:9e:bc:7f:cf:81:73:40:3d:4d:a4:04:
ab:39:a7:93:67:64:69:39:5e:3a:46:d8:91:b0:59:bd:1d:76:
48:e0:54:9f:77:18:23:54:f3:74:ac:f3:ab:c4:9f:3b:df:42:
4e:c2:b5:36:66:56:5b:a5:e9:7f:99:6c:7a:3a:dc:f8:fb:ba:
5a:78:7d:29:db:ea:9c:4d:14:92:ea:2f:2f:b5:66:c2:e8:63:
a5:3f:23:0d:20:b6:6f:8b:0b:07:3d:52:03:8d:ef:13:50:0c:
79:96:dc:7c:f3:a6:af:c1:3b:07:88:12:d4:ab:59:84:9a:3b:
70:f9:4e:ce:6e:55:11:23:09:f3:85:94:c6:f9:fa:a3:10:b1:
a1:83:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:32 2025 by rpki-client on console.sobornost.net