Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/HUVkGsdlCFOUct2ob4-4pOtlsOM.roa
File: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (raw, json)
Hash identifier: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=
Subject key identifier: 1D:45:64:1A:C7:65:08:53:94:72:DD:A8:6F:8F:B8:A4:EB:65:B0:E3
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019422FB3570C2563AFD52CA30E33CE76B25
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/HUVkGsdlCFOUct2ob4-4pOtlsOM.roa
Signing time: Wed 01 Jan 2025 17:47:56 +0000
ROA not before: Wed 01 Jan 2025 17:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202506
IP address blocks: 185.247.160.0/22 maxlen: 22
185.247.160.0/24 maxlen: 24
185.247.161.0/24 maxlen: 24
185.247.162.0/24 maxlen: 24
185.247.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:35:70:c2:56:3a:fd:52:ca:30:e3:3c:e7:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jan 1 17:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d45641ac76508539472dda86f8fb8a4eb65b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:46:90:b1:11:28:3d:67:48:97:cd:e7:2c:
4f:10:36:ad:f7:91:83:3c:68:86:6f:fd:a9:59:ff:
e2:50:6f:cb:5d:30:8e:9a:4f:5c:3a:67:9e:fc:98:
2f:39:be:b5:fc:0c:00:6d:f4:fb:3f:1d:e8:ec:f0:
57:93:5a:44:e1:0c:25:a0:20:47:b1:82:fb:a5:ff:
fa:26:90:a5:f2:63:70:46:d0:a8:4a:57:97:9b:ee:
79:dd:9f:c2:c8:8f:d3:b7:ab:f5:56:5b:c6:54:f2:
cb:44:a8:86:86:65:42:75:6a:ab:11:cf:18:e0:04:
6d:99:d0:f1:49:1a:0f:e6:04:3b:1c:c5:8e:20:d4:
79:5b:36:8f:41:f7:2f:97:f6:cc:bf:8e:97:88:f4:
6f:fd:62:d5:c0:bd:40:5a:3a:a9:2e:6a:76:d0:2a:
d7:2b:26:54:00:6b:b2:a5:69:4e:da:bc:2f:97:2c:
3d:1a:83:68:0e:20:b8:48:73:be:9b:9b:8a:4c:54:
9a:3c:e8:e0:34:3c:ae:32:12:c5:7b:c9:13:f7:4e:
0d:db:89:44:eb:1c:85:e7:bf:bd:6f:18:a4:98:62:
bc:f7:1c:e6:49:33:80:37:d2:bd:86:ed:19:12:96:
2a:c6:f5:4a:e7:f0:01:4a:f1:c5:69:7f:0b:03:3c:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:64:1A:C7:65:08:53:94:72:DD:A8:6F:8F:B8:A4:EB:65:B0:E3
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/HUVkGsdlCFOUct2ob4-4pOtlsOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a4:ab:dc:db:b7:09:74:32:d9:be:b1:24:87:29:56:0e:26:
91:16:ae:1f:3a:83:ab:53:b4:30:26:84:03:d6:5f:99:b0:65:
3f:b0:22:c5:18:8a:89:c2:4e:f2:9a:ce:3a:e6:fd:76:b4:f2:
44:ec:a4:66:df:ee:1e:2b:1b:ef:3e:1d:cf:b5:b2:b1:c8:b7:
4e:40:f3:7b:23:f4:5b:88:4a:49:98:ff:95:aa:18:2d:44:50:
43:37:95:69:79:89:17:18:7d:65:3c:b8:ab:44:f6:44:34:89:
d3:07:d1:a2:e7:c3:04:b0:60:69:d7:4e:b2:b5:91:f4:6b:7c:
d0:22:ce:66:c7:de:b3:a3:00:68:f2:88:b4:4b:f8:28:59:e3:
7d:8b:5f:97:f1:12:fb:5a:69:a0:e8:2a:1f:a5:9b:da:cf:64:
b6:a9:5a:7e:2c:e3:98:8b:bd:5f:00:85:e7:88:d9:58:af:8c:
02:70:93:33:1d:46:43:80:74:ed:33:b0:e6:12:2a:20:b2:4b:
34:ec:0a:71:cb:af:21:33:4e:cf:a6:56:3c:1f:00:6c:76:d9:
b0:b0:dc:58:de:88:88:c6:f3:b8:09:30:ed:e5:23:b7:ad:a1:
4c:48:52:6a:a8:61:f7:e6:83:a4:84:64:e4:30:6d:21:99:21:
9d:19:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:01 2025 by rpki-client