Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/H27SmDR8baZpuMXqTM3iDpRfuZQ.roa
File: H27SmDR8baZpuMXqTM3iDpRfuZQ.roa (raw, json)
Hash identifier: HRHfMmSbiheBl5EWJYTnfvHlbbvdFtOGz3m90LhYcYY=
Subject key identifier: 1F:6E:D2:98:34:7C:6D:A6:69:B8:C5:EA:4C:CD:E2:0E:94:5F:B9:94
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 01941FFA372A51EAADDD126C81DF890EE59E
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/H27SmDR8baZpuMXqTM3iDpRfuZQ.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215413
IP address blocks: 185.83.155.0/24 maxlen: 24
185.206.151.0/24 maxlen: 24
188.64.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:2a:51:ea:ad:dd:12:6c:81:df:89:0e:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6ed298347c6da669b8c5ea4ccde20e945fb994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:53:92:fd:50:7e:52:df:92:a9:da:20:87:
57:74:f9:bb:bf:83:5d:a3:c9:13:72:5e:4a:2d:7a:
9a:27:57:7e:17:16:e6:ec:cc:5a:54:5a:ed:fc:31:
fc:a5:e9:53:6d:7a:94:8e:20:5b:2b:95:a6:03:7d:
94:df:a0:be:e4:ea:a1:a7:25:13:b3:fa:6b:64:42:
15:7b:6d:2a:e7:94:34:06:63:56:0b:eb:93:1b:6e:
b5:b9:4f:0f:44:08:94:a5:22:20:99:a0:89:e9:d6:
e3:5a:c0:0a:72:6e:47:54:41:b8:b0:a9:98:24:f5:
55:8c:98:19:c9:9a:40:9c:e5:41:41:03:a7:4f:f6:
55:b2:4c:53:6d:22:2b:19:33:5d:2f:fc:7f:81:64:
9f:59:d8:0c:61:37:df:47:25:e0:e1:a6:d0:a3:7e:
8d:ff:b8:84:40:11:4f:1f:eb:36:af:07:ce:b0:25:
e0:1a:88:8c:09:25:33:9a:cf:2f:55:48:66:58:d6:
85:c6:fc:ab:e1:0c:43:29:fd:92:48:e4:ac:c6:8f:
2a:32:28:5a:5f:73:f8:16:77:af:85:c4:b5:15:73:
0d:a6:72:b3:2b:e9:69:a1:1d:9c:d5:37:05:58:63:
2e:f5:78:3a:dd:f4:5d:39:b5:55:b1:d2:ba:12:f3:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:D2:98:34:7C:6D:A6:69:B8:C5:EA:4C:CD:E2:0E:94:5F:B9:94
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/H27SmDR8baZpuMXqTM3iDpRfuZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.155.0/24
185.206.151.0/24
188.64.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b6:03:41:40:c1:c5:de:cc:00:6b:c6:ae:44:2d:08:2e:6b:
93:a2:63:37:2b:6b:35:31:95:7f:af:b3:fc:2e:56:7b:e3:56:
bf:0e:9b:ef:aa:96:c5:23:e7:4c:7f:13:bd:4e:dd:c8:e5:ea:
e5:82:f5:d4:31:d6:f3:b4:92:37:ec:ad:21:35:d0:19:53:c2:
e2:4e:3e:75:2e:41:8b:ce:d2:7f:52:2e:d7:1b:57:8d:13:97:
62:bf:8b:1b:08:e0:90:e1:e0:99:36:b0:cd:02:bc:ea:9a:85:
f9:5e:8c:22:59:81:c7:a2:64:35:4c:50:d5:89:45:2f:82:61:
58:b7:2f:e2:9c:16:7c:14:9b:a6:2a:35:89:87:d8:bd:be:ac:
fe:94:f9:81:87:3a:1b:8b:3a:79:1c:b6:fa:7d:ee:bb:7c:d7:
ce:71:55:6c:5f:18:6e:18:3b:4a:2c:86:f4:d4:24:6c:37:15:
91:f0:a9:54:c5:d6:1a:86:15:d8:77:8f:b8:9c:ee:ba:ef:fa:
49:91:43:ac:f9:ab:b7:55:7d:e2:11:e9:45:82:e4:41:d0:4f:
34:6b:72:a5:2f:95:59:37:f8:65:fe:9e:7d:12:dd:3a:ed:b3:
5a:e8:1e:77:0e:6a:48:27:df:3c:1b:d5:33:da:81:79:e8:18:
8c:07:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:27 2025 by rpki-client