Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa
File: hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa (raw, json)
Hash identifier: 6C02koWDYB7dLeFI8ibJ+LhMKomu57ibOfSN2wKtslA=
Subject key identifier: 86:3C:74:F0:26:D6:35:56:FE:00:C1:9B:C0:BD:3E:E5:27:FF:89:F9
Certificate issuer: /CN=f6f4febab33760475755755122b9f20262391b92
Certificate serial: 019423D6EF811DE322EEE2293631D0B074D3
Authority key identifier: F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.249.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ef:81:1d:e3:22:ee:e2:29:36:31:d0:b0:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f4febab33760475755755122b9f20262391b92
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=863c74f026d63556fe00c19bc0bd3ee527ff89f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:f3:90:51:99:78:fd:1e:38:b8:f2:25:4c:
73:a2:67:ac:8e:17:aa:bd:f2:d3:64:04:98:f9:11:
c8:e1:80:23:f8:40:04:ce:85:18:53:92:a3:ed:76:
6b:92:2c:c2:2b:43:38:1a:f2:bf:5f:ee:da:11:95:
61:39:d9:dc:12:50:ca:4e:74:bb:08:9f:bb:0d:78:
27:f7:a6:24:00:1e:66:87:c1:db:a6:91:e7:70:ab:
a3:5a:10:12:44:4c:20:c0:05:2d:e3:81:bf:44:1f:
51:26:8a:84:44:92:ac:a7:27:75:7e:79:8e:b0:fa:
92:17:98:bd:3f:b8:e1:bc:f1:1f:ea:bc:fb:d3:1e:
4a:2f:c7:e2:65:e0:5c:8e:97:63:85:6e:60:11:c3:
01:2d:44:19:27:fb:fd:bf:55:0d:3a:6f:67:af:9a:
90:f7:61:3c:01:eb:28:e7:d3:3d:bc:28:e5:d5:86:
50:35:f7:3f:c3:c4:bd:52:7f:22:da:83:64:fb:9f:
3a:4f:ab:61:6c:58:4d:cd:7f:3c:5c:c5:fc:b0:99:
af:00:b4:7a:c4:67:28:e4:f8:d7:53:06:ff:c2:be:
90:fb:a8:12:93:be:55:02:f9:c5:a1:e1:78:2a:f8:
48:81:54:46:28:a8:ba:11:03:7d:64:f0:37:5f:12:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:74:F0:26:D6:35:56:FE:00:C1:9B:C0:BD:3E:E5:27:FF:89:F9
X509v3 Authority Key Identifier:
keyid:F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:57:f9:29:37:97:23:d8:02:e8:5b:a7:53:d0:fb:40:f1:05:
17:c7:ea:30:42:49:7b:1a:e5:f8:3d:73:bc:07:0b:cd:11:84:
37:c1:7b:41:d9:ec:02:f0:30:df:5c:7a:8e:a6:86:10:83:64:
83:fc:50:2e:d1:79:77:41:67:5d:e0:60:58:f9:31:26:e7:ca:
82:92:d8:2d:71:08:ce:77:a5:69:f4:db:f2:f6:09:75:f5:2c:
2c:04:b8:5e:da:6c:fa:6c:45:e3:eb:2d:a5:69:e5:b1:78:6a:
a2:8c:29:15:d7:c8:79:53:03:6f:e8:09:ab:bc:10:14:42:e6:
35:11:d6:9a:70:83:6d:ad:d5:2f:55:78:cb:13:d1:62:f3:d0:
e8:77:bb:1e:c6:ee:10:10:f8:3c:42:11:a6:db:3a:38:d0:7b:
51:72:3d:f1:37:8e:e2:dc:c7:5f:85:07:f6:16:cd:64:9f:c0:
db:90:c5:6e:1a:fa:1d:3e:bf:9a:7c:da:1d:48:7f:2d:2f:3f:
8f:7e:0d:b8:93:18:28:6a:47:34:9c:f4:94:74:a0:61:90:fe:
58:fb:29:ae:72:18:a0:56:be:4e:61:f0:8a:df:63:bb:30:09:
03:75:81:d1:b7:55:45:72:b7:1e:cf:0e:cc:d7:80:6e:c0:0e:
03:a0:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:25 2025 by rpki-client