Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa
File: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (raw, json)
Hash identifier: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=
Subject key identifier: 1E:83:73:5E:14:FC:97:1E:EF:C3:B2:65:31:70:CB:0F:6A:89:0B:8A
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194228D631F9CDC1B9F1ECB62804B8D6B81
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56443
IP address blocks: 185.105.58.0/24 maxlen: 24
185.128.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:1f:9c:dc:1b:9f:1e:cb:62:80:4b:8d:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e83735e14fc971eefc3b2653170cb0f6a890b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:6d:92:a7:9a:ea:a6:5e:22:13:55:ff:a5:
b3:ef:53:bf:0c:a6:5e:f1:db:34:6d:ab:9c:f3:67:
31:8b:da:2a:a4:f4:12:14:ed:a1:4c:82:a1:b4:22:
53:4e:c0:25:dc:44:f4:59:9d:cd:d5:3e:89:55:3b:
21:dc:e2:1b:37:00:01:99:5b:50:37:94:8c:45:bd:
d6:3d:1c:8d:3c:2f:8b:58:a6:85:6a:15:3c:8a:f0:
2b:fe:7f:df:46:5b:87:ed:9a:09:db:89:79:0d:7f:
00:a0:93:7e:3c:03:54:21:55:86:54:92:a0:94:13:
fb:aa:6f:fc:72:20:15:41:e1:1b:fc:30:98:fc:56:
63:65:68:c4:a5:a1:0b:41:0d:3a:87:d5:58:c9:1c:
96:ac:b8:e0:21:93:d2:cd:0d:9b:ae:de:56:3b:d1:
f9:38:d0:c6:83:51:dd:7d:1e:52:af:0c:58:6e:5a:
6b:25:d6:77:b4:bc:9c:fc:3a:27:f4:6e:14:12:22:
8e:c3:3c:cf:cf:2d:f5:69:95:bc:cd:24:03:32:2a:
5a:9d:9a:2c:2f:e7:d6:93:44:fa:f0:4c:bc:5c:56:
04:8b:06:be:22:35:52:7d:be:8b:dc:b1:01:69:9b:
57:fa:17:6d:a6:c2:21:1d:f3:6e:47:cf:01:48:48:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:83:73:5E:14:FC:97:1E:EF:C3:B2:65:31:70:CB:0F:6A:89:0B:8A
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.58.0/24
185.128.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:64:35:33:f3:31:e0:84:6c:ee:bc:22:15:d0:87:88:0e:6d:
6d:0b:6a:d8:9d:36:88:f9:15:e5:96:db:3f:96:51:a8:71:23:
eb:93:0c:e8:e4:bb:c6:9c:c2:90:41:98:2c:34:a2:a7:4c:a9:
5b:98:a1:3d:93:4e:0f:a0:1a:13:ea:d9:77:da:0b:04:a4:6e:
77:d4:04:9c:9d:c8:29:5c:f1:af:9f:bf:e8:47:1a:18:41:a1:
39:3c:dd:b7:19:d9:08:4e:0c:6d:c6:fd:b6:fe:b8:d2:6e:2d:
98:7b:98:3d:e5:87:19:2a:b9:6c:95:77:f2:19:2e:bd:15:f3:
43:85:4a:bc:0b:6e:b9:d0:c8:fc:2f:f0:04:d5:d8:29:2d:bb:
cb:3a:ef:86:99:a7:0c:90:90:e8:9f:be:02:37:de:0a:72:89:
77:f9:46:38:b8:51:28:ce:c1:3f:6a:aa:0a:14:30:b8:3e:49:
b0:e9:c8:9f:69:f4:73:01:ed:db:af:bd:4c:b0:cf:dc:21:83:
97:26:68:37:6b:21:de:5d:d9:e0:e1:07:b1:77:3c:14:65:6b:
d0:43:09:dc:52:1e:da:77:24:be:4f:08:5e:55:66:cc:f1:53:
39:12:be:d9:b5:a9:f5:a0:83:73:59:f9:38:5b:0d:8d:11:da:
c2:18:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:18 2025 by rpki-client