Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa
File: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (raw, json)
Hash identifier: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=
Subject key identifier: 1D:F9:2E:6E:6E:B2:AD:61:27:EE:00:44:F7:04:8C:68:3F:C4:C5:71
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBDEA2EECDF1AD478D6F1DE25F936
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa
Signing time: Wed 02 Apr 2025 14:15:50 +0000
ROA not before: Wed 02 Apr 2025 14:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204131
IP address blocks: 185.60.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:bd:ea:2e:ec:df:1a:d4:78:d6:f1:de:25:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1df92e6e6eb2ad6127ee0044f7048c683fc4c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:59:98:e2:f7:aa:56:d3:75:51:8d:a8:8a:
90:93:f7:03:b6:fe:15:9b:6f:74:fc:25:d0:f2:e1:
17:75:15:f2:52:24:c1:e9:ac:c8:8d:83:b8:96:6b:
02:0d:3e:c7:64:66:e1:4f:7b:f3:c0:29:cd:d8:60:
af:89:67:52:7c:45:36:b6:4c:6e:e5:e7:fe:33:cc:
11:06:97:a9:b4:35:e5:d0:c3:58:2d:41:03:7e:b8:
7f:c3:cf:14:88:96:76:7b:4b:f4:97:a1:43:87:4b:
d3:b9:c3:40:af:fc:12:60:0d:8d:a0:54:38:03:1a:
73:d2:fc:16:a0:ed:a4:b1:4d:45:61:bb:52:e8:b1:
2a:d0:af:e6:c8:59:1f:cb:fa:dd:5c:d3:a6:17:1a:
06:65:26:09:b6:11:f5:43:ba:3b:32:92:36:7f:f0:
b4:95:9b:7c:a8:eb:ca:5b:81:90:2e:7f:71:85:2e:
7c:99:c1:4b:2b:dd:55:c2:9b:f7:8c:b7:17:3d:54:
13:38:46:0d:1f:8d:08:b9:e7:7e:af:86:46:47:9a:
f2:6d:64:fb:c1:e3:00:f1:8c:fa:86:4d:dd:9b:cf:
c2:58:1e:7f:9a:a1:84:31:63:ae:b3:e1:70:9b:64:
93:91:7b:2f:a9:7b:19:0b:ca:f2:5e:b0:6a:2f:46:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:2E:6E:6E:B2:AD:61:27:EE:00:44:F7:04:8C:68:3F:C4:C5:71
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.229.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4c:27:79:ba:5c:d2:18:70:ea:e6:45:32:f2:5c:6b:7f:84:
69:45:a9:d3:6c:92:cc:95:75:0b:2d:fc:9c:69:4c:d0:09:f5:
2e:30:27:8b:63:6f:72:62:97:72:85:3d:2d:57:10:8c:8a:b0:
f7:23:06:38:ea:22:ec:3c:7e:82:93:3a:0a:e7:90:f8:26:07:
ff:e4:14:f2:63:a8:cf:8a:1d:03:af:a6:17:a6:a1:5a:a2:a5:
a8:a2:8f:ca:15:bf:34:35:49:37:61:26:95:cd:da:28:a6:5a:
ef:70:9d:75:77:29:09:b4:99:3d:36:9f:0a:60:99:e4:43:9f:
30:55:ba:ba:30:cd:5f:de:a0:c9:50:f0:d3:4b:bd:e8:9f:90:
35:b7:40:81:c5:d4:cc:e1:14:8f:90:f3:8f:fd:12:2d:b8:83:
fd:8b:a1:01:92:5d:16:97:41:4f:cc:ec:2c:9e:e1:a0:ed:aa:
ce:26:c1:5e:d7:71:2a:05:11:d4:4e:6d:d9:82:71:d2:3b:ef:
5e:57:4e:31:be:d3:6b:f7:b1:1e:c6:87:f8:96:29:e8:0c:cc:
c9:a6:6d:33:14:c7:6c:4b:b8:66:23:73:57:67:a6:69:6e:31:
e0:7f:a2:f0:da:ad:7f:48:07:4c:39:cc:fe:b8:f6:56:97:a7:
cc:79:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net