Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/3HFMVmjL1zUPq5KfuN-_qAVx69o.roa
File: 3HFMVmjL1zUPq5KfuN-_qAVx69o.roa (raw, json)
Hash identifier: LiQd4aMgYZOOAaa0Uh8MdMvGDSd2+PFlv6Cbq/toPXo=
Subject key identifier: DC:71:4C:56:68:CB:D7:35:0F:AB:92:9F:B8:DF:BF:A8:05:71:EB:DA
Certificate issuer: /CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Certificate serial: 0173955E
Authority key identifier: 80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/3HFMVmjL1zUPq5KfuN-_qAVx69o.roa
Signing time: Sat 01 Jan 2022 13:58:29 +0000
ROA not before: Sat 01 Jan 2022 13:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213194
IP address blocks: 194.39.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24352094 (0x173955e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Validity
Not Before: Jan 1 13:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc714c5668cbd7350fab929fb8dfbfa80571ebda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:60:f4:2f:8e:a4:b9:d5:8f:3c:3c:e5:d1:
f6:e9:a0:7f:fa:a3:87:8c:02:c7:51:58:4c:f2:14:
c2:08:90:48:34:fe:e9:b6:2a:ac:31:75:e7:ad:85:
b6:f2:fd:e2:9f:86:9f:8b:ac:7d:88:33:7f:11:66:
c0:38:0c:56:86:a9:b1:b4:79:6d:d4:fa:b5:9c:38:
84:03:07:fa:9a:5d:8a:d1:63:14:b0:ed:32:fc:17:
30:79:d8:42:3d:1b:84:1f:f3:53:4c:5f:ff:10:3e:
8b:9d:69:c6:5d:fc:01:f3:23:1a:61:7f:16:41:de:
e8:93:78:90:0e:1b:f2:75:96:d4:7e:10:99:63:6a:
bf:8a:4e:52:a9:97:11:16:54:25:64:52:ec:1a:18:
d3:e6:a9:96:13:79:65:f0:6c:2f:05:3d:6b:b0:67:
ed:4a:d9:fb:ee:5f:06:c2:57:2b:ef:19:57:f3:65:
12:22:82:86:dd:28:40:e4:5c:0e:a7:6c:4c:0e:6f:
d5:dc:c4:60:8d:ed:6e:0e:9e:05:99:1e:b3:fb:ae:
e4:ec:6a:de:20:f8:d0:f4:33:fd:c5:31:b3:d1:6d:
a2:44:b4:a1:06:f5:42:3a:73:36:f3:af:18:65:0a:
19:2f:8c:d7:4f:26:de:bd:3b:77:c1:ba:d0:1a:79:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:4C:56:68:CB:D7:35:0F:AB:92:9F:B8:DF:BF:A8:05:71:EB:DA
X509v3 Authority Key Identifier:
keyid:80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/3HFMVmjL1zUPq5KfuN-_qAVx69o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d1:4b:3c:9d:49:2f:45:41:5c:a6:70:1a:86:a9:ba:6d:81:
99:0f:68:30:0e:7f:73:16:d1:5b:5b:0a:70:e6:68:6e:e0:06:
b1:ef:1d:5e:e2:64:d7:a1:c0:0a:76:1b:1b:9a:3d:30:30:c6:
fa:7d:86:04:f4:37:d3:3d:07:2e:c5:5e:65:b2:43:9f:15:e9:
4a:11:b9:b1:45:70:48:f0:3f:a7:9c:43:b5:78:ad:1a:3d:8f:
e1:40:37:e0:30:9a:64:46:d9:86:99:0c:dd:a6:d7:43:57:7a:
ab:8e:49:60:67:b5:2a:b4:a1:e9:a8:81:6b:28:11:02:ce:4e:
6f:c7:e6:4a:a2:64:60:c4:65:21:ee:fd:e7:26:cb:04:15:79:
4d:a8:cf:28:da:e3:f8:10:c0:bc:3e:de:fd:4a:c4:e3:ea:de:
99:ea:fd:23:8a:57:f7:de:52:1b:16:7c:2a:cb:02:ef:58:3f:
b3:66:de:fb:72:68:d3:4b:7d:60:a4:ff:3a:b6:98:1e:3a:75:
50:40:25:3d:b3:23:35:25:bf:2e:59:b2:01:93:50:55:22:ab:
b9:3b:21:71:8a:87:e6:e0:37:70:0a:62:6b:4f:5f:39:43:e2:
2e:34:e3:74:c2:a6:c5:38:02:ab:df:48:d2:b7:1e:21:05:32:
89:02:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:21:10 2025 by rpki-client