Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa
File: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (raw, json)
Hash identifier: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=
Subject key identifier: 45:9B:8C:77:1C:E0:B6:A7:AE:B7:C6:6C:58:88:C2:BF:17:2A:FC:75
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019424B3AC811F4B0DF4ADE5FD920CDB6DBD
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204576
IP address blocks: 185.246.88.0/22 maxlen: 22
185.246.88.0/24 maxlen: 24
185.246.89.0/24 maxlen: 24
185.246.90.0/24 maxlen: 24
185.246.91.0/24 maxlen: 24
2a10:2040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ac:81:1f:4b:0d:f4:ad:e5:fd:92:0c:db:6d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=459b8c771ce0b6a7aeb7c66c5888c2bf172afc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:c7:7e:8b:df:be:26:1a:53:91:e3:44:ae:
41:6a:12:c3:f2:5a:05:18:15:ed:63:fb:71:fe:45:
27:ce:bc:bf:40:4e:19:5c:fd:91:15:4f:48:8b:f5:
e3:97:10:d4:7c:df:5b:70:63:14:f7:a7:ed:77:ac:
e5:8d:ba:4c:ca:1e:97:56:b6:75:8e:fe:61:44:c7:
68:69:c9:b6:24:9b:29:39:22:73:8b:1a:d8:43:01:
27:30:32:1d:ea:c2:a2:76:72:b6:29:1a:b8:8e:c0:
82:64:79:2d:e8:a5:0e:bb:6f:7e:f0:5f:e8:46:47:
1d:3f:76:59:a9:51:65:2f:4f:a3:6f:fe:c5:38:e2:
70:3e:97:b2:5b:41:41:67:11:ac:6f:46:00:06:7a:
5b:30:64:8c:86:e6:1c:de:4f:a0:54:a7:7b:96:c8:
c9:44:c7:a6:92:ad:f0:b6:1b:62:59:c0:f8:8f:6c:
7e:63:1f:b9:21:d0:c7:a1:27:b0:7d:e6:a2:90:99:
23:17:87:ae:0f:43:f6:73:33:5b:2d:88:78:3d:0f:
5f:7d:8d:2a:f4:86:a9:81:bb:b5:92:78:2a:b3:e4:
df:c8:d3:e1:a1:5e:20:59:e3:64:eb:37:b5:38:88:
87:65:c7:4e:e0:68:2f:50:14:4c:b1:6f:a8:71:a4:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:8C:77:1C:E0:B6:A7:AE:B7:C6:6C:58:88:C2:BF:17:2A:FC:75
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.88.0/22
IPv6:
2a10:2040::/29
Signature Algorithm: sha256WithRSAEncryption
8f:91:1d:06:fc:23:4b:a1:b2:82:67:c6:17:60:59:a1:d4:d8:
54:53:79:2d:04:7c:bf:5d:df:d7:60:82:04:bc:47:90:88:f7:
4d:b5:33:fd:a5:52:fc:30:a6:7b:fe:60:22:d3:3c:1b:1f:3d:
29:29:f3:03:9c:7e:98:58:1e:a1:db:a4:b4:5b:ba:c3:ca:23:
7d:de:47:ef:00:f3:64:d2:f2:8e:ef:79:a7:b8:85:be:40:58:
51:c3:97:88:7d:32:b7:14:db:ee:b4:cc:7a:ca:25:45:39:92:
55:b3:a4:1f:df:ff:72:38:c9:8b:74:e7:b4:75:0e:dc:95:ac:
3c:fb:b9:3d:b8:a8:ce:89:d6:d7:92:a7:d5:29:bf:6c:1b:07:
93:ad:17:09:fb:0f:ec:6e:ab:7e:2d:33:9b:2c:f0:57:51:60:
04:aa:10:4f:60:cf:1e:b1:92:42:06:65:e2:f6:f3:cc:53:32:
16:db:e7:97:1e:8e:f5:f1:55:92:3f:2b:4e:e6:40:fb:9b:e7:
7a:79:52:2c:89:7a:4c:15:94:c6:86:83:ba:e7:f6:bd:ea:da:
ef:76:01:db:97:e5:13:69:89:a5:b0:dd:d4:ec:7a:d5:e0:a0:
b3:ba:d6:47:ee:5d:99:a8:6d:5b:56:3c:0d:95:fa:20:32:be:
9b:47:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:48 2025 by rpki-client