Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/0WB7Bx7_enfl066TmQSfosTy_eE.roa
File: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (raw, json)
Hash identifier: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=
Subject key identifier: D1:60:7B:07:1E:FF:7A:77:E5:D3:AE:93:99:04:9F:A2:C4:F2:FD:E1
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 019422FB142963775C09A5C0ECD50649F692
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/0WB7Bx7_enfl066TmQSfosTy_eE.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 271986
IP address blocks: 185.83.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:14:29:63:77:5c:09:a5:c0:ec:d5:06:49:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1607b071eff7a77e5d3ae9399049fa2c4f2fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:41:2d:56:9c:f9:9c:e4:f6:8f:a0:c1:d6:
94:fc:cf:ad:30:cf:76:f5:d9:23:14:72:70:23:0c:
ba:9a:ce:11:11:d5:92:38:cc:4b:8a:a6:98:ad:b3:
ba:23:a4:a1:73:ba:e2:76:aa:c8:a8:c4:ce:1d:40:
12:7d:53:c4:3b:70:0f:eb:35:6c:63:a8:0e:47:65:
74:94:b6:a1:bd:a5:9f:06:a2:98:db:7a:3d:1e:48:
19:55:39:7b:66:88:d1:51:80:6a:f6:9e:06:66:74:
43:50:3d:eb:8a:c5:9b:f5:6d:fc:c3:12:63:73:96:
47:e0:2f:ee:40:8a:a9:91:f9:4a:4b:77:e9:e2:55:
e2:6d:38:b4:a9:b9:1f:78:de:07:8d:7d:aa:33:a0:
c2:d4:e6:0e:ac:81:2f:ea:97:72:a1:58:48:40:a5:
7a:83:6e:1e:cf:86:73:3e:dd:f4:a4:68:aa:ed:51:
32:b1:65:b9:79:b8:7a:95:51:6a:da:8e:90:1f:2f:
61:1f:4f:83:16:46:24:8a:ed:e8:90:b3:2f:be:41:
5e:1a:58:e7:f5:77:1b:b6:b2:52:60:d4:2d:0d:ae:
0d:27:5a:8d:5b:5d:7a:30:83:ff:b7:7e:08:9a:21:
a7:34:2a:e1:ab:2a:8b:61:4d:8f:fd:c6:91:db:eb:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:7B:07:1E:FF:7A:77:E5:D3:AE:93:99:04:9F:A2:C4:F2:FD:E1
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/0WB7Bx7_enfl066TmQSfosTy_eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fd:2a:60:8c:ed:af:48:57:28:14:56:35:67:18:8b:4c:ec:
01:16:8d:54:fd:2c:0d:74:af:57:c7:01:fb:cf:b5:62:2e:0f:
0f:1f:71:03:11:9e:81:97:7a:d4:4f:79:12:f8:74:63:94:a1:
2e:58:59:0d:5a:66:94:e7:4a:dc:6b:41:c6:ed:85:26:63:19:
90:6d:fc:8b:1d:10:8b:33:9f:e3:4c:35:32:26:0e:27:a8:15:
b2:8f:bc:28:5e:1e:de:a6:05:45:8c:1d:7e:0f:67:67:a7:dc:
64:e5:ea:09:15:3a:35:8b:f1:79:50:db:ee:18:bc:20:e7:01:
aa:2e:17:72:9c:40:f4:28:41:06:62:15:93:ef:a4:6f:ff:be:
90:1f:5d:e0:92:54:07:64:95:5b:ea:be:05:ee:62:ff:77:dc:
0b:a6:9a:ca:c0:c3:76:52:5d:49:1d:c1:9e:66:dd:34:a9:29:
6e:19:96:8a:ac:75:6e:57:c0:16:77:94:7c:79:0b:b4:e8:c9:
09:41:72:43:67:9a:0b:67:95:d8:41:13:93:3d:cd:f4:92:1c:
4f:33:2b:a5:da:e4:03:cd:b8:a8:61:2b:5c:f4:f0:a6:86:42:
42:99:54:70:54:b0:12:b5:41:a5:5b:fa:59:db:ec:cb:03:41:
57:90:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net