Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa
File: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (raw, json)
Hash identifier: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=
Subject key identifier: 1D:FC:19:1F:ED:0B:BF:A4:F2:DD:BF:89:C9:A9:D4:5D:17:11:BF:83
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01942067CF7EE8A8219969D73C3CB19B9FD4
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34458
IP address blocks: 185.80.40.0/24 maxlen: 24
217.150.80.0/24 maxlen: 24
217.150.81.0/24 maxlen: 24
217.150.82.0/24 maxlen: 24
217.150.83.0/24 maxlen: 24
217.150.84.0/24 maxlen: 24
217.150.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:7e:e8:a8:21:99:69:d7:3c:3c:b1:9b:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dfc191fed0bbfa4f2ddbf89c9a9d45d1711bf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:d7:bf:da:fb:48:9c:29:98:8c:67:b7:76:
25:5c:54:68:ed:d3:29:8d:25:86:cc:92:3d:1a:ac:
53:ac:99:11:e8:99:7b:55:ce:0f:22:f0:2b:b8:78:
27:6b:7d:b7:79:bc:52:1e:d0:e1:91:ea:60:d5:75:
6f:20:83:dd:ba:c1:ae:91:ef:36:85:c4:74:51:be:
57:b8:00:ca:fd:39:6e:68:b5:ee:17:fc:16:43:6f:
c2:3c:3a:f0:35:ea:ce:07:c2:6c:f3:58:c9:3d:d3:
a5:b8:1e:4c:8d:a5:ab:47:d2:34:99:1e:1f:95:b0:
46:57:86:4c:85:07:7e:f6:29:5c:32:b6:9b:9a:4b:
96:f3:4b:ac:d6:24:35:ce:0e:e7:62:d9:bc:df:70:
1f:22:44:30:66:60:de:9b:22:e6:2c:ce:8f:c6:65:
45:1d:be:42:bf:1f:c5:73:c6:16:ed:9b:8c:e8:2d:
81:bd:3e:23:3e:66:2b:24:bf:69:58:f2:d1:92:f0:
e0:ff:2f:0a:62:be:25:6e:ae:1e:11:5b:0e:78:b6:
25:09:f7:09:6e:70:85:5a:8e:34:dd:e6:31:02:bf:
22:45:f5:a2:f2:02:cf:8d:91:a7:d0:d4:b0:d9:20:
bc:04:ae:d7:b5:ac:3e:90:7b:34:e7:a9:fc:b0:56:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:19:1F:ED:0B:BF:A4:F2:DD:BF:89:C9:A9:D4:5D:17:11:BF:83
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.40.0/24
217.150.80.0-217.150.85.255
Signature Algorithm: sha256WithRSAEncryption
bc:c5:bd:3a:4f:c1:d8:bb:4a:e0:18:45:7b:ed:12:b7:18:64:
26:23:36:35:b3:52:92:c8:f0:ba:8e:ad:b3:69:ff:89:f8:f4:
1a:8f:13:51:59:ac:ac:ab:8e:60:20:d7:4d:cb:8b:63:ae:6f:
64:4d:25:47:7f:2f:7e:7e:f6:94:ca:f2:78:b6:14:24:fd:90:
ee:6e:5d:79:09:8d:b2:34:08:ab:aa:e3:63:a2:e1:31:c7:5e:
e6:45:c0:09:b5:d7:f0:f6:ed:87:1b:ee:f0:b2:57:64:ce:f7:
66:cf:95:c4:76:ea:78:c5:14:aa:67:7e:25:bb:23:a8:6a:01:
b2:ae:c2:af:2a:87:fc:b2:01:ef:25:f0:8c:48:58:a8:70:69:
a5:4a:46:3a:4e:89:54:85:e3:af:68:44:56:d7:c6:20:48:6f:
6e:95:e1:8e:63:bd:d6:2d:f8:2c:64:6e:f0:f3:d3:c9:bb:bf:
e3:a6:7b:a8:86:3c:af:f3:aa:95:34:39:9d:92:f3:e6:d9:93:
33:cb:43:5a:19:99:c8:9f:80:84:39:99:65:16:51:13:2d:40:
c2:cc:d1:cc:a4:a1:ad:d9:82:45:a6:2c:9b:f5:2c:93:3d:61:
d2:39:80:99:a5:97:81:9e:87:a9:af:ba:5f:e1:1b:d2:4e:af:
3f:e3:8e:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:22 2025 by rpki-client