Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/H2ciew030YT_ZKL58SNBSDs0iQc.roa
File: H2ciew030YT_ZKL58SNBSDs0iQc.roa (raw, json)
Hash identifier: dr7FPAyraTf1nqxR0HjlvGsow4ZxkGibDCSpB0tZ3CU=
Subject key identifier: 1F:67:22:7B:0D:37:D1:84:FF:64:A2:F9:F1:23:41:48:3B:34:89:07
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 01941FFA6AD29C8B26362CC42F6B1F53F520
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/H2ciew030YT_ZKL58SNBSDs0iQc.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30873
IP address blocks: 185.80.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:d2:9c:8b:26:36:2c:c4:2f:6b:1f:53:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f67227b0d37d184ff64a2f9f12341483b348907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:10:34:43:55:47:73:0c:7e:bc:b1:90:5c:
72:ad:bc:70:9c:4b:e4:ac:dd:36:84:78:d1:8f:60:
5e:0c:c4:64:dc:a5:1b:76:c4:0b:fb:10:d8:ae:c8:
18:dc:54:f5:d0:47:c1:a3:9f:ac:ca:a9:24:f3:aa:
f2:6d:37:70:82:b1:dd:55:0b:e2:d8:5a:2c:15:d2:
f5:a0:d1:29:ca:56:75:a7:19:16:ec:f4:fe:fb:06:
42:a6:b4:ed:e2:99:43:42:8b:74:5c:fe:3d:9a:96:
50:84:31:d3:76:70:4a:f0:9b:c6:35:b7:b3:3e:69:
dc:19:e1:78:0e:51:e2:73:ad:98:6e:91:9f:13:e4:
28:56:2a:d7:5d:d1:10:52:a3:47:32:8e:a3:72:69:
7d:15:b1:53:92:6c:44:9e:fe:69:3a:00:01:64:93:
d8:8e:26:c9:bf:90:75:fa:9d:95:20:a9:18:62:d6:
68:72:b2:ff:84:5d:e3:0e:0a:91:ca:d5:66:1d:f3:
71:8f:da:89:1a:ae:1c:9a:07:7c:e0:1c:7d:87:a9:
64:ef:18:2d:33:94:80:3e:fc:9a:06:39:73:27:d9:
e6:78:58:df:80:f9:7b:7c:cf:9d:75:6c:20:f9:a7:
f3:e7:fe:95:23:6d:ef:5a:ab:bf:e0:cd:97:e6:4e:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:22:7B:0D:37:D1:84:FF:64:A2:F9:F1:23:41:48:3B:34:89:07
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/H2ciew030YT_ZKL58SNBSDs0iQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ad:75:13:83:e2:48:9e:47:37:ff:4d:ae:14:a4:9c:4a:c0:
53:81:05:4f:8a:5a:45:3f:86:58:66:56:9b:19:83:3e:e0:aa:
ba:09:79:17:2e:dc:c6:2f:35:b6:6f:0a:bb:04:38:dd:1e:f3:
d9:58:ce:90:64:74:98:e8:25:81:62:fc:57:77:1c:5a:c9:f4:
f1:20:f7:ca:09:a6:68:51:bc:0a:74:b5:3a:32:d7:94:31:a5:
40:75:a6:94:45:c8:cc:c7:8b:04:8b:98:bf:b5:17:c3:6f:86:
57:8f:bc:61:bc:9b:98:e3:ac:94:ee:5c:4d:5f:50:99:8f:fc:
2c:8a:bb:cd:76:ab:f8:d4:75:7c:59:b0:2d:5d:e4:7a:2e:bb:
a1:4d:8e:b9:79:82:25:09:b7:9d:ea:c6:4b:00:f7:e7:e3:ce:
95:ff:07:d3:b2:fc:64:5c:99:7f:58:17:3a:15:6a:89:03:e7:
fa:92:79:2a:76:90:4f:05:9d:53:dd:29:85:49:b1:74:10:eb:
bd:e3:6f:e7:56:2b:57:16:7a:ba:43:c6:2f:2b:bd:62:cd:37:
a7:43:0f:fb:a7:c3:2b:2b:22:1c:e4:69:a9:82:a3:cd:29:89:
ee:cd:d0:ce:75:90:99:d8:80:91:52:79:9c:46:16:7c:d8:a8:
52:97:59:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mrSnIsmNizEL2sfU/UgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDFlN2Y2NzgyM2VlZjUyYTE5ZmUxZGM4ZTBlNmE3ZjQx
Yzk0MzMwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjY3MjI3YjBkMzdkMTg0ZmY2NGEyZjlmMTIzNDE0ODNiMzQ4OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMcQNENVR3MMfryxkFxyrbxwnEvk
rN02hHjRj2BeDMRk3KUbdsQL+xDYrsgY3FT10EfBo5+syqkk86rybTdwgrHdVQvi
2FosFdL1oNEpylZ1pxkW7PT++wZCprTt4plDQot0XP49mpZQhDHTdnBK8JvGNbez
PmncGeF4DlHic62YbpGfE+QoVirXXdEQUqNHMo6jcml9FbFTkmxEnv5pOgABZJPY
jibJv5B1+p2VIKkYYtZocrL/hF3jDgqRytVmHfNxj9qJGq4cmgd84Bx9h6lk7xgt
M5SAPvyaBjlzJ9nmeFjfgPl7fM+ddWwg+afz5/6VI23vWqu/4M2X5k7OUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9nInsNN9GE/2Si+fEjQUg7NIkHMB8GA1UdIwQY
MBaAFKZB5/Z4I+71Khn+Hcjg5qf0HJQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtIbjluZ2o3dlVxR2Y0ZHlPRG1wX1FjbERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wYWMyMWMtYzcyYi00NzE5LWEwODUt
MDc4OGY3OTIxODUyLzEvSDJjaWV3MDMwWVRfWktMNThTTkJTRHMwaVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wYWMyMWMtYzcyYi00NzE5LWEwODUtMDc4OGY3OTIxODUy
LzEvcGtIbjluZ2o3dlVxR2Y0ZHlPRG1wX1FjbERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVAsMA0G
CSqGSIb3DQEBCwUAA4IBAQBQrXUTg+JInkc3/02uFKScSsBTgQVPilpFP4ZYZlab
GYM+4Kq6CXkXLtzGLzW2bwq7BDjdHvPZWM6QZHSY6CWBYvxXdxxayfTxIPfKCaZo
UbwKdLU6MteUMaVAdaaURcjMx4sEi5i/tRfDb4ZXj7xhvJuY46yU7lxNX1CZj/ws
irvNdqv41HV8WbAtXeR6LruhTY65eYIlCbed6sZLAPfn486V/wfTsvxkXJl/WBc6
FWqJA+f6knkqdpBPBZ1T3SmFSbF0EOu942/nVitXFnq6Q8YvK71izTenQw/7p8Mr
KyIc5GmpgqPNKYnuzdDOdZCZ2ICRUnmcRhZ82KhSl1lw
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:49 2025 by rpki-client