Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/HSNefFgXaRWCGcIv1fjoOpFklrI.roa
File: HSNefFgXaRWCGcIv1fjoOpFklrI.roa (raw, json)
Hash identifier: cKpMHes+RehvKJ31+pA2N64A397k3fGtWACpN0dogjA=
Subject key identifier: 1D:23:5E:7C:58:17:69:15:82:19:C2:2F:D5:F8:E8:3A:91:64:96:B2
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 01942067C4736DD1B8BF93058D5D20C2676E
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/HSNefFgXaRWCGcIv1fjoOpFklrI.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209348
IP address blocks: 85.208.228.0/24 maxlen: 24
85.208.229.0/24 maxlen: 24
85.208.230.0/24 maxlen: 24
85.208.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c4:73:6d:d1:b8:bf:93:05:8d:5d:20:c2:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d235e7c581769158219c22fd5f8e83a916496b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:85:4a:82:f3:30:0d:31:92:43:49:14:5d:
2e:d0:3c:c8:d4:9a:ff:27:fc:08:ef:23:30:a3:5a:
3f:d6:b8:35:ef:47:c8:30:40:a0:12:16:47:ab:59:
c6:40:3d:5a:e5:a9:e2:5a:22:e3:89:1d:cc:af:39:
70:c9:9e:11:a6:48:df:45:d9:58:c6:16:30:98:1e:
72:9d:9d:bf:64:86:f3:7a:74:bb:f4:66:69:b3:6c:
0f:04:8c:7d:c7:bb:9d:22:22:75:36:2e:52:f8:a1:
62:dc:c1:bb:6d:ea:81:ea:1b:c9:cc:ab:c9:c6:2e:
34:96:5c:3e:03:0c:09:69:1c:66:d9:e8:58:aa:cc:
02:5c:ee:e6:32:49:5f:9e:f9:9c:53:3b:e8:60:fb:
e3:b7:14:fb:98:c8:a7:6a:ee:6b:75:ee:51:e2:b7:
a0:c9:3d:98:ae:66:9c:2b:4f:b1:32:ea:cb:3b:7c:
80:dd:33:32:ab:9c:1b:bb:59:3e:6a:24:cf:6c:53:
b3:09:f8:52:26:be:22:1e:e7:95:4c:30:cf:fa:67:
14:ff:40:cb:fc:57:ed:7b:ed:6d:13:dd:3d:bd:86:
8d:9e:d2:96:d0:41:d3:b6:0f:64:3c:46:f4:f0:0a:
c0:fe:2f:69:08:dd:17:32:c2:d0:d3:65:3a:53:bc:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:5E:7C:58:17:69:15:82:19:C2:2F:D5:F8:E8:3A:91:64:96:B2
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/HSNefFgXaRWCGcIv1fjoOpFklrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:30:e3:4b:b6:72:e8:90:de:d8:6a:c8:23:4f:5d:1c:73:70:
6e:89:97:26:27:e1:8f:4d:4a:d4:63:3d:68:e3:61:a8:73:eb:
e9:88:28:75:f7:60:8d:2c:d6:55:e3:e7:78:84:20:2d:f9:38:
82:24:53:74:9b:e8:34:b0:32:f8:b1:f9:1d:53:cb:1f:61:d2:
6a:d4:54:12:88:2f:6e:5e:c3:39:9f:8c:16:d8:fc:57:fb:07:
1a:49:9f:37:33:0c:3c:15:b1:61:77:5a:3f:1f:7c:f1:ab:dc:
8d:e2:f3:ea:9d:27:cf:be:0e:b6:20:74:24:a5:e6:6f:9b:a5:
dd:ca:3b:64:27:d9:05:88:e2:49:2a:b7:b8:83:27:cd:b0:da:
e9:bf:0e:e4:5c:4b:4f:ae:fe:85:89:53:f1:ea:36:0a:12:b0:
82:63:22:2e:3a:ef:96:38:7c:72:01:04:3e:93:70:21:52:77:
26:dd:aa:66:1d:64:c4:c2:2c:17:09:14:6e:0e:c9:74:28:e6:
32:a1:18:69:27:26:1c:45:4a:cb:a2:e5:1e:0c:c6:52:32:02:
59:5f:41:cc:4c:6e:27:75:9b:0e:f4:53:04:dd:e9:55:3e:cf:
ff:b7:25:89:20:a1:50:2c:fd:b2:25:bd:28:10:ae:c8:47:c9:
a1:a3:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net