Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/H9dXCbHCAXGOrGOV28k8umzrLKQ.roa
File: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (raw, json)
Hash identifier: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=
Subject key identifier: 1F:D7:57:09:B1:C2:01:71:8E:AC:63:95:DB:C9:3C:BA:6C:EB:2C:A4
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 0194206877C632319E037F0CD94AF4BC0648
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/H9dXCbHCAXGOrGOV28k8umzrLKQ.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62223
IP address blocks: 185.42.192.0/22 maxlen: 22
185.42.192.0/24 maxlen: 24
185.42.193.0/24 maxlen: 24
185.42.194.0/24 maxlen: 24
185.42.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:77:c6:32:31:9e:03:7f:0c:d9:4a:f4:bc:06:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd75709b1c201718eac6395dbc93cba6ceb2ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:83:c0:b9:fd:cb:90:9f:75:ee:9c:22:7f:
6b:b8:a1:c8:da:53:55:90:92:01:40:c8:07:86:d1:
28:b9:96:25:7d:63:d6:cb:c1:98:f3:6a:52:39:d7:
86:b2:22:fb:4f:e7:97:fa:b2:1e:f7:64:6e:af:61:
a6:57:4e:27:79:3e:32:77:7b:a0:4f:ca:17:f5:2a:
83:c4:21:6e:2c:9a:0c:07:ee:b1:83:eb:35:1f:6e:
fa:49:68:66:22:33:3d:a1:bd:2b:77:e6:74:22:4c:
35:8b:64:4e:0c:dc:b3:c3:7a:d3:ae:82:de:f0:84:
2c:16:2a:73:b8:a2:90:d0:57:4b:89:51:c9:25:da:
8e:9e:db:b2:12:93:0f:43:83:11:8d:16:52:6a:1e:
80:4c:e9:5c:c5:fa:ff:7f:7f:93:50:38:61:b4:32:
0c:da:71:14:b7:6c:80:40:00:9d:f9:b3:6f:07:cd:
68:62:83:91:4d:e6:ab:59:c1:b6:1a:c9:f4:be:cf:
8f:1e:9e:ff:93:54:3a:bf:ef:2b:8b:60:34:84:30:
e5:40:80:9e:94:16:ca:a2:e6:ba:5e:e2:a4:c9:a9:
98:94:af:2b:29:a5:da:67:bf:a8:f6:b4:6d:0a:c7:
85:8f:2f:e2:6a:45:51:7d:fc:86:7b:95:92:5e:e2:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:57:09:B1:C2:01:71:8E:AC:63:95:DB:C9:3C:BA:6C:EB:2C:A4
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/H9dXCbHCAXGOrGOV28k8umzrLKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:da:5c:23:1f:7a:b0:85:88:e8:c5:02:52:8d:b5:b5:f2:d3:
fd:d2:9a:97:2b:43:51:10:01:43:d6:e8:f4:79:b8:48:fe:53:
b4:d1:55:90:e3:88:60:ef:19:56:7b:44:30:2f:5e:2e:4e:b7:
dc:a1:39:c9:11:8e:0b:c7:46:7d:fa:eb:35:77:7e:91:06:90:
53:ed:87:1b:01:3c:78:06:56:59:43:1f:e3:3d:b7:21:26:94:
b4:a8:52:da:de:17:62:95:66:25:e7:d8:c8:75:24:27:b8:19:
32:0e:d6:2e:ef:7f:50:e4:06:c5:a5:8a:d4:8d:30:bd:2f:74:
75:de:27:a6:c1:cf:fd:eb:e8:9d:db:05:c8:e5:2a:2c:78:e1:
20:33:db:e9:f7:6d:29:55:17:91:8d:ad:c8:60:5d:b2:b5:ed:
01:15:3f:33:3f:b5:f3:92:59:75:15:2b:12:88:90:b3:9d:4b:
1d:96:51:45:c7:0b:70:25:20:ee:c3:64:47:38:5e:59:e4:39:
d7:10:b5:6c:00:48:61:67:7d:65:39:08:ae:93:f3:29:2c:22:
82:3e:45:ba:e1:e3:ba:b9:8f:cd:7a:e5:06:d9:76:20:0d:01:
89:a2:8a:18:59:af:03:88:12:c8:58:68:73:0c:d6:f4:dc:90:
19:d5:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:29 2025 by rpki-client