Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa
File: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (raw, json)
Hash identifier: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=
Subject key identifier: 1E:E4:16:97:C0:AF:CD:B0:91:C4:DA:70:E4:76:34:8C:28:F7:4E:84
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 019427480A5794AC059BCB5170DD08DC490D
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204814
IP address blocks: 88.218.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0a:57:94:ac:05:9b:cb:51:70:dd:08:dc:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee41697c0afcdb091c4da70e476348c28f74e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:11:6e:bf:10:04:f0:08:3d:5a:25:e9:77:
b2:f2:36:b0:f6:52:e2:3f:97:b4:00:a5:26:18:d7:
cd:cf:ae:2d:51:a1:19:b0:d1:30:64:ff:0f:51:79:
3a:43:e0:c9:d3:9f:d4:f6:12:6f:d3:f3:95:9c:51:
31:2e:05:92:f0:a8:bd:b2:6a:0f:2e:0a:9b:14:ba:
4c:45:5b:02:52:5b:7d:b1:aa:f4:39:21:e5:0e:c9:
14:35:a5:9d:e7:f1:e7:4f:b3:3e:79:0b:53:68:cb:
6a:46:76:87:b6:91:9c:d6:b2:86:2c:96:e3:b4:87:
2d:7b:0b:41:26:0d:fa:71:4c:5a:73:5b:f1:62:59:
d4:b4:dd:b8:b9:0a:62:d9:84:e7:2c:07:54:7d:8a:
47:09:4a:ae:24:25:81:88:53:02:f9:77:67:15:b7:
56:fb:aa:d6:91:68:de:f5:2b:b7:85:1e:21:bb:f0:
b3:73:35:2c:64:77:30:ed:d2:35:47:30:26:5e:d9:
cf:d9:3f:e2:04:4c:da:60:9b:7e:c5:ba:3c:d6:41:
3c:fb:e3:33:ae:06:b3:f7:49:02:03:cf:a6:76:83:
17:e6:d6:94:54:c1:37:f3:eb:fc:9e:b2:40:db:c5:
30:b8:bf:6e:9e:62:76:23:28:fb:54:4c:c2:b4:a5:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:16:97:C0:AF:CD:B0:91:C4:DA:70:E4:76:34:8C:28:F7:4E:84
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0e:80:25:99:1e:ac:cc:da:05:c8:b1:c6:3d:6d:89:71:72:
60:c2:4c:57:5a:4c:f1:ab:4a:ef:28:30:64:a0:ec:36:9a:d0:
db:78:e9:25:05:ab:89:32:43:68:e7:c7:3e:8d:bc:37:67:ce:
6a:57:92:11:41:c8:1e:2a:34:27:25:53:56:d1:4b:c4:93:86:
bd:b0:02:af:69:be:d3:23:83:1d:05:cb:18:f2:d2:7f:d1:67:
53:4b:ca:63:38:37:14:89:8b:4a:b7:36:f4:51:3d:7c:c2:c4:
2e:64:5c:f7:dd:c6:d4:cd:62:1f:5a:86:98:24:87:b6:44:33:
a0:e5:32:6c:fd:8e:35:dc:a7:bc:93:e5:62:33:54:02:1f:e0:
30:19:4f:75:47:44:88:6c:e8:9c:72:a6:ba:29:72:ba:b2:25:
b7:9f:dc:f5:53:35:a3:3b:04:6e:ed:03:ec:d5:46:27:88:9b:
de:ce:4e:32:fb:ea:0a:7f:ec:22:48:6f:0f:41:eb:08:70:23:
60:b6:2d:97:b4:43:86:44:0d:9f:74:fe:70:6b:b3:41:7b:e3:
4f:80:5d:92:6e:7d:bd:b0:23:bb:44:c9:9f:2f:9d:5c:b7:c9:
2b:ad:18:63:1d:be:c0:c8:56:84:c0:be:3e:2b:9f:d4:67:b5:
a6:a6:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:20 2025 by rpki-client