Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/fewPOq5Sy5alJvzpYZYieD6pmV8.roa
File: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (raw, json)
Hash identifier: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=
Subject key identifier: 7D:EC:0F:3A:AE:52:CB:96:A5:26:FC:E9:61:96:22:78:3E:A9:99:5F
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 01941F8C9A2DAD711B9A54DC0EE5AE8C15C8
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/fewPOq5Sy5alJvzpYZYieD6pmV8.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35681
IP address blocks: 185.160.68.0/22 maxlen: 22
185.160.68.0/24 maxlen: 24
185.160.69.0/24 maxlen: 24
185.160.70.0/24 maxlen: 24
185.160.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9a:2d:ad:71:1b:9a:54:dc:0e:e5:ae:8c:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dec0f3aae52cb96a526fce9619622783ea9995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:48:7d:76:6b:bf:c7:9d:66:c2:b6:45:d8:
48:2a:e9:c2:12:35:76:37:0a:1b:04:1b:c0:b9:07:
ea:c6:2a:e4:67:20:99:78:02:b7:09:2a:1b:ec:d9:
cb:29:91:1d:1d:77:68:4f:d7:0f:a3:70:7e:22:6d:
bd:7a:53:51:2d:ee:b2:9b:00:47:85:d1:c0:f1:f6:
06:a1:29:54:96:a7:09:5a:18:83:19:54:ec:a5:04:
69:cc:6a:07:c5:ee:18:dd:b2:79:02:28:9d:41:d6:
3e:4a:e7:80:78:70:08:f4:1e:b9:a4:88:df:33:99:
8b:7c:f7:2c:c3:76:fa:2d:ab:95:bd:af:b0:06:c5:
d0:d9:78:2f:21:d1:0a:42:74:28:23:07:e3:11:d7:
4b:6e:89:e5:bc:fc:2d:e0:b4:d5:da:3c:ba:12:d6:
af:3e:80:86:b7:b1:9b:eb:aa:86:10:27:ee:ad:1b:
de:f3:2e:ae:6d:ee:fa:10:ae:aa:1e:1d:79:48:d4:
3c:ea:6f:4e:90:1a:53:cc:2f:cc:4b:f6:83:b7:94:
bb:c3:92:d2:ca:f0:4c:6b:98:a4:8b:61:be:cc:df:
74:b7:58:a3:b9:06:16:93:7f:c7:c7:f4:63:ad:00:
dc:df:e7:f4:69:1d:30:20:e0:a5:23:77:ad:e2:93:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:0F:3A:AE:52:CB:96:A5:26:FC:E9:61:96:22:78:3E:A9:99:5F
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/fewPOq5Sy5alJvzpYZYieD6pmV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:f1:d7:a9:f4:ba:96:af:9c:4a:f3:09:70:bb:2a:c2:18:c2:
5a:93:c2:94:1f:e6:97:4d:25:2c:84:b0:3e:1a:5b:1b:63:95:
63:36:ac:d5:3b:79:55:61:f8:c2:c2:50:db:9a:03:00:89:43:
81:89:3a:ac:33:63:39:d4:46:b1:dc:2f:8a:e8:a6:2b:31:2f:
92:4b:40:31:e7:ee:ea:43:b1:5e:14:91:19:1d:7d:53:3d:bc:
f9:51:88:6a:7d:07:c6:a7:3f:7a:e0:5b:a7:47:ba:07:ad:4a:
8d:75:42:b8:7a:ad:f6:19:ec:ae:db:7c:35:ac:d9:a1:7f:e5:
87:47:7a:bf:65:7a:f2:54:6e:74:70:98:a0:9e:8a:0a:12:17:
e1:04:3b:a7:97:83:cc:e5:b1:2f:22:5c:ef:97:ec:35:28:52:
fe:fe:3e:55:9f:c3:db:03:5d:1b:2b:aa:8d:8b:3d:47:0a:96:
9a:c2:a8:cf:f3:b7:b4:2f:46:9f:0c:41:a3:3d:57:f9:fe:46:
4d:e1:58:61:eb:fa:cd:4b:8b:4f:cd:ef:31:81:a1:dd:49:fb:
0b:79:fc:ca:58:ce:bf:23:55:01:91:f2:29:47:08:17:62:38:
28:0d:4b:4d:78:83:29:ba:a9:e2:2a:0f:68:4e:6f:db:34:be:
b0:30:a2:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJotrXEbmlTcDuWujBXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWY1MTBjNzJjZTBiNzljMjg5OWIzNTg0NWZmZTM2NzA2
OTNmMDUwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGVjMGYzYWFlNTJjYjk2YTUyNmZjZTk2MTk2MjI3ODNlYTk5OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBhIfXZrv8edZsK2RdhIKunCEjV2
NwobBBvAuQfqxirkZyCZeAK3CSob7NnLKZEdHXdoT9cPo3B+Im29elNRLe6ymwBH
hdHA8fYGoSlUlqcJWhiDGVTspQRpzGoHxe4Y3bJ5AiidQdY+SueAeHAI9B65pIjf
M5mLfPcsw3b6LauVva+wBsXQ2XgvIdEKQnQoIwfjEddLbonlvPwt4LTV2jy6Etav
PoCGt7Gb66qGECfurRve8y6ube76EK6qHh15SNQ86m9OkBpTzC/MS/aDt5S7w5LS
yvBMa5iki2G+zN90t1ijuQYWk3/Hx/RjrQDc3+f0aR0wIOClI3et4pMsdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3sDzquUsuWpSb86WGWIng+qZlfMB8GA1UdIwQY
MBaAFMhfUQxyzgt5wombNYRf/jZwaT8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEt
YjhjOWEyYTlkYTQ2LzEvZmV3UE9xNVN5NWFsSnZ6cFlaWWllRDZwbVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEtYjhjOWEyYTlkYTQ2
LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaBEMA0G
CSqGSIb3DQEBCwUAA4IBAQDF8dep9LqWr5xK8wlwuyrCGMJak8KUH+aXTSUshLA+
GlsbY5VjNqzVO3lVYfjCwlDbmgMAiUOBiTqsM2M51Eax3C+K6KYrMS+SS0Ax5+7q
Q7FeFJEZHX1TPbz5UYhqfQfGpz964FunR7oHrUqNdUK4eq32Geyu23w1rNmhf+WH
R3q/ZXryVG50cJignooKEhfhBDunl4PM5bEvIlzvl+w1KFL+/j5Vn8PbA10bK6qN
iz1HCpaawqjP87e0L0afDEGjPVf5/kZN4Vhh6/rNS4tPze8xgaHdSfsLefzKWM6/
I1UBkfIpRwgXYjgoDUtNeIMpuqniKg9oTm/bNL6wMKJU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net