Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/HO5kHHVnIPEFaMxltsULzo8s2Vc.roa
File: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (raw, json)
Hash identifier: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=
Subject key identifier: 1C:EE:64:1C:75:67:20:F1:05:68:CC:65:B6:C5:0B:CE:8F:2C:D9:57
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019425FC226C4488347F4C9FE5049D73B26E
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/HO5kHHVnIPEFaMxltsULzo8s2Vc.roa
Signing time: Thu 02 Jan 2025 07:47:48 +0000
ROA not before: Thu 02 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206481
IP address blocks: 185.218.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:22:6c:44:88:34:7f:4c:9f:e5:04:9d:73:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jan 2 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cee641c756720f10568cc65b6c50bce8f2cd957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:e2:ae:17:e9:39:64:fa:76:02:43:1a:bc:
76:70:7b:b5:d2:4a:8d:5c:db:7a:66:ac:a7:f6:fa:
32:3a:e3:15:a3:d4:ed:ba:e3:d4:b0:2f:81:8c:b2:
ce:a8:31:ae:f3:4e:f0:d8:66:3c:cd:66:9c:cb:cb:
d0:d3:33:6a:0d:39:6f:20:6a:93:7f:94:df:f8:66:
40:59:1e:63:a9:37:f2:43:64:4d:ae:63:61:29:54:
04:a1:1d:9c:05:b0:a4:4e:23:ee:92:4b:c4:e2:ad:
cf:fb:42:84:ff:e0:5b:e6:7f:7c:51:17:17:ca:44:
8c:f8:44:a6:9d:75:e5:53:92:20:97:58:b8:89:74:
3a:e5:39:1d:6d:af:1e:f1:13:a6:5c:9a:af:cc:d5:
b5:70:72:42:ac:7c:fd:ae:fb:d1:fc:b5:74:a0:77:
ff:f7:ad:48:c1:a5:f2:c5:92:d4:0e:1a:e8:37:28:
e6:9c:b2:10:8b:ec:c8:63:92:02:7d:d5:99:e0:1a:
06:d2:5d:aa:ef:62:20:da:4a:50:35:10:bc:3a:87:
be:25:ba:63:bb:df:73:a6:6b:7a:64:1e:3a:5d:9d:
c5:13:b1:aa:41:ca:73:2a:4e:a2:6f:f9:4b:0c:30:
8e:8c:6f:35:99:dd:4a:80:3c:8d:4c:cb:24:12:b5:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EE:64:1C:75:67:20:F1:05:68:CC:65:B6:C5:0B:CE:8F:2C:D9:57
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/HO5kHHVnIPEFaMxltsULzo8s2Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
84:5b:9d:9f:98:75:ef:86:77:a8:e7:00:5a:29:75:f3:12:e5:
44:9e:27:eb:82:ae:a9:f6:56:d7:e3:b4:a5:fc:fe:a0:9d:44:
1c:e3:93:64:67:23:2e:50:75:06:fb:49:77:54:ac:dd:5a:f1:
1b:c1:9c:a3:36:d1:e8:c5:79:3b:ca:9d:a4:41:b3:96:3a:ac:
67:2a:d6:ac:3a:24:1d:f9:99:a5:e7:4d:d2:57:a8:86:fb:a4:
9b:7d:d7:71:e3:1e:8a:4e:42:ff:dc:e8:00:b7:f9:3f:88:94:
59:e9:5a:10:5c:60:05:de:aa:5a:91:dd:f7:ed:19:f0:81:ff:
80:52:03:c0:0d:d2:56:8f:59:1e:49:0d:8d:3c:ff:e6:22:9b:
04:78:90:bf:58:cf:82:37:10:a5:ec:62:e3:1b:a9:fb:0c:c1:
72:ef:ae:02:ee:da:13:f9:6a:d8:12:bd:d7:c9:37:d3:d7:b9:
ac:08:b1:0e:f4:26:44:a3:a5:0d:d0:60:59:e9:32:05:05:6e:
4f:9d:b4:d2:1a:98:3b:a3:ae:4f:e4:2a:e3:ff:6e:74:ed:42:
20:27:8b:90:65:4b:a6:e5:b3:85:bb:e5:41:b6:59:d6:6a:06:
87:91:6c:4c:8f:7c:60:52:c1:bb:b2:00:cf:11:b8:69:24:59:
f9:b1:57:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/CJsRIg0f0yf5QSdc7JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx
MmM0ZmUwHhcNMjUwMTAyMDc0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2VlNjQxYzc1NjcyMGYxMDU2OGNjNjViNmM1MGJjZThmMmNkOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jfirhfpOWT6dgJDGrx2cHu10kqN
XNt6Zqyn9voyOuMVo9TtuuPUsC+BjLLOqDGu807w2GY8zWacy8vQ0zNqDTlvIGqT
f5Tf+GZAWR5jqTfyQ2RNrmNhKVQEoR2cBbCkTiPukkvE4q3P+0KE/+Bb5n98URcX
ykSM+ESmnXXlU5Igl1i4iXQ65Tkdba8e8ROmXJqvzNW1cHJCrHz9rvvR/LV0oHf/
961IwaXyxZLUDhroNyjmnLIQi+zIY5ICfdWZ4BoG0l2q72Ig2kpQNRC8Ooe+Jbpj
u99zpmt6ZB46XZ3FE7GqQcpzKk6ib/lLDDCOjG81md1KgDyNTMskErVGwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzuZBx1ZyDxBWjMZbbFC86PLNlXMB8GA1UdIwQY
MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt
YzYyYmU4YTcwM2NlLzEvSE81a0hIVm5JUEVGYU14bHRzVUx6bzhzMlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl
LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudpgMA0G
CSqGSIb3DQEBCwUAA4IBAQCEW52fmHXvhneo5wBaKXXzEuVEnifrgq6p9lbX47Sl
/P6gnUQc45NkZyMuUHUG+0l3VKzdWvEbwZyjNtHoxXk7yp2kQbOWOqxnKtasOiQd
+Zml503SV6iG+6Sbfddx4x6KTkL/3OgAt/k/iJRZ6VoQXGAF3qpakd337Rnwgf+A
UgPADdJWj1keSQ2NPP/mIpsEeJC/WM+CNxCl7GLjG6n7DMFy764C7toT+WrYEr3X
yTfT17msCLEO9CZEo6UN0GBZ6TIFBW5PnbTSGpg7o65P5Crj/2507UIgJ4uQZUum
5bOFu+VBtlnWagaHkWxMj3xgUsG7sgDPEbhpJFn5sVf7
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:00 2025 by rpki-client