Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3jkyEgeUwHuLrsjz6T_ObqcY74c.roa
File: 3jkyEgeUwHuLrsjz6T_ObqcY74c.roa (raw, json)
Hash identifier: JoJ/5W4dG3D9w6kILiihWs6cJdsEqCFWaxmLM7gkMSI=
Subject key identifier: DE:39:32:12:07:94:C0:7B:8B:AE:C8:F3:E9:3F:CE:6E:A7:18:EF:87
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 01941FFAACEAA5692BE583D548E0D04B9318
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3jkyEgeUwHuLrsjz6T_ObqcY74c.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212257
IP address blocks: 185.160.96.0/22 maxlen: 22
185.160.96.0/24 maxlen: 24
185.160.97.0/24 maxlen: 24
185.160.98.0/24 maxlen: 24
185.160.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ac:ea:a5:69:2b:e5:83:d5:48:e0:d0:4b:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de3932120794c07b8baec8f3e93fce6ea718ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:cf:30:11:e3:93:84:8b:a6:93:d2:62:c8:
94:a1:37:2e:f0:16:03:61:6a:2e:58:86:5b:59:2e:
1e:39:a5:8d:6b:48:f4:fe:b7:26:8c:40:73:1b:8c:
d8:3d:8e:2f:b6:72:14:36:56:36:82:29:3f:25:8b:
e9:21:03:24:8a:c4:4c:fa:af:66:93:b4:8b:f6:41:
b4:9f:55:91:76:f2:cb:21:c0:f0:db:a7:fb:4b:30:
9a:9a:c1:e0:ba:b9:9b:18:bc:e8:5b:7c:96:58:fd:
80:d1:fb:fd:3d:11:53:b5:f3:ca:50:4d:06:15:e7:
41:73:b3:c3:cb:0c:9f:37:57:8b:e3:53:a9:3d:14:
4d:a6:ce:7f:e5:2a:f5:8b:79:e2:ba:54:38:8e:20:
e1:93:dd:91:9a:32:5b:af:dd:ac:c3:e6:06:aa:d3:
6f:ca:c1:91:47:db:39:62:df:95:c0:fc:f4:75:f9:
37:91:5a:19:b4:b1:06:e1:57:9c:b3:4b:48:95:42:
13:cf:bb:23:74:cf:be:e7:c9:f4:47:e2:ca:59:b1:
26:01:52:3f:a7:75:2e:df:84:64:13:ae:6e:98:4c:
fb:41:a0:8a:5e:3c:de:f1:3f:32:f5:bd:62:95:d3:
ca:d8:3b:84:da:c0:62:20:0e:8f:e4:23:0d:cb:7e:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:32:12:07:94:C0:7B:8B:AE:C8:F3:E9:3F:CE:6E:A7:18:EF:87
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3jkyEgeUwHuLrsjz6T_ObqcY74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:9e:7a:af:61:f5:2a:71:9f:1d:c6:c8:24:d9:73:f4:f3:fa:
35:0d:a8:cc:0b:e0:25:64:80:fe:b3:93:c6:96:32:e9:31:2e:
e2:59:b5:ec:c2:37:03:10:f5:74:89:0e:62:2d:9d:1e:60:47:
cc:95:b1:51:bb:e8:25:95:76:43:88:e6:eb:83:e3:9d:bf:c2:
8b:fb:52:c9:7d:89:f5:da:a5:da:79:0c:3a:bc:3c:d9:ba:2c:
5c:86:e4:66:58:60:ca:94:00:ce:ff:cb:53:bf:c2:3d:72:45:
33:25:f7:de:5b:81:31:df:98:17:b1:55:e8:06:79:3e:f1:28:
38:08:b8:3a:3d:bb:3d:01:cd:9d:a1:4e:29:91:a5:dd:65:21:
33:99:27:97:3b:cd:d8:e7:5b:9d:8d:cd:1c:69:0a:43:4a:9d:
f1:38:5c:86:84:e4:b4:62:6d:b9:ea:47:54:84:f0:9f:3b:b1:
ec:8a:87:d3:43:66:06:bd:19:7a:c0:2b:b3:a3:81:f7:14:93:
c9:e0:67:ea:ac:f5:74:a7:b0:8e:7e:78:54:ef:65:c8:aa:90:
06:ad:4f:cb:ad:4e:a3:e4:2b:1d:2e:7e:b9:ed:dc:4e:57:b7:
dd:a2:a5:81:a7:0f:26:cc:2b:7d:a8:52:f1:49:cd:16:64:fa:
67:78:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net