Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa
File: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (raw, json)
Hash identifier: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=
Subject key identifier: 36:7C:EB:6B:A3:20:32:3C:08:3D:30:48:39:92:24:68:A3:07:E9:A6
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 019423D71C81ACFA4644838EE21F58475867
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200547
IP address blocks: 160.238.112.0/22 maxlen: 22
160.238.112.0/24 maxlen: 24
160.238.113.0/24 maxlen: 24
160.238.114.0/24 maxlen: 24
160.238.115.0/24 maxlen: 24
185.95.236.0/22 maxlen: 24
185.95.237.0/24 maxlen: 24
185.95.238.0/24 maxlen: 24
185.95.239.0/24 maxlen: 24
185.236.52.0/24 maxlen: 24
185.238.148.0/22 maxlen: 24
185.238.149.0/24 maxlen: 24
185.238.150.0/24 maxlen: 24
185.238.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:81:ac:fa:46:44:83:8e:e2:1f:58:47:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=367ceb6ba320323c083d304839922468a307e9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:f9:8a:4f:37:d1:c0:2d:a6:8c:08:42:98:
8d:49:93:fc:b3:2a:c5:70:7d:5d:d0:e9:c4:e5:e5:
72:a8:c3:58:ba:ad:2d:64:25:7d:91:cc:9f:44:65:
0f:5c:45:cc:83:e7:94:f8:7b:00:3f:42:0a:28:83:
20:36:10:a5:89:0a:dd:8d:be:31:ce:98:ad:7c:8e:
99:ee:c1:38:4d:6b:ed:75:51:c1:40:16:a5:d7:a2:
e9:f2:90:15:32:94:8e:39:b8:59:02:4c:97:20:e9:
bc:43:20:e9:f8:2c:f9:15:87:79:54:79:72:a6:70:
af:81:53:79:1d:72:3b:8c:bc:43:a7:69:c9:ef:63:
07:30:ce:57:72:3b:71:e0:38:17:a5:a0:d3:f7:d3:
38:f3:ae:87:bd:3a:52:b0:c6:d1:99:33:f0:37:d3:
5f:65:6c:98:a0:97:3a:f8:f4:b6:52:77:41:d7:06:
c9:48:cf:df:eb:33:c6:0d:65:c5:8e:ec:a0:33:0d:
6d:db:6d:96:3d:83:87:9e:5d:a7:5b:53:f7:22:fe:
85:dd:51:5f:8f:ca:6d:b9:e9:36:72:26:d8:44:c3:
ce:63:8a:27:99:5c:17:70:65:6b:e1:8c:d8:7b:30:
d6:51:bb:69:86:48:dd:b7:e0:3d:dd:96:cf:e5:f4:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:EB:6B:A3:20:32:3C:08:3D:30:48:39:92:24:68:A3:07:E9:A6
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.112.0/22
185.95.236.0/22
185.236.52.0/24
185.238.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:54:62:bc:af:43:d8:66:a0:99:b6:1a:bf:81:21:d8:06:74:
e4:2c:c0:22:76:e6:08:62:51:91:f3:81:07:2a:6a:2d:6d:6b:
56:91:9f:6f:a3:c3:4c:7e:b7:62:62:da:7b:06:a9:b7:de:39:
6e:f7:c2:bb:39:df:49:db:1c:c3:6e:6e:1a:9c:f7:bd:9b:bb:
84:b9:25:94:4a:0d:37:f0:95:45:5e:62:78:44:ad:de:e3:7c:
1a:b6:41:87:57:1a:d6:8b:76:e5:09:a9:13:42:99:df:f8:4a:
e5:8d:74:1c:36:0b:62:43:3d:27:5a:bb:81:c9:7a:52:06:a0:
4d:c5:f2:f1:39:3b:bb:22:21:5e:ed:8d:d8:1d:24:20:19:1a:
c0:84:45:08:51:39:df:3a:2c:63:de:80:e3:65:50:ca:39:d8:
3c:21:53:7a:01:ec:4b:8e:57:39:56:49:e3:de:61:23:93:a5:
71:2f:1d:76:25:87:45:90:d5:9f:f8:c0:15:1a:5e:fc:e5:ae:
f5:99:93:a3:c9:ba:5f:c1:90:32:76:15:97:ca:4f:0a:00:99:
87:01:54:1e:2f:d3:84:a3:8e:75:dc:7b:b3:24:87:84:af:1e:
61:0a:e0:11:3e:73:ba:82:ec:65:17:86:f8:6f:a0:71:20:3e:
98:8b:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net