Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa
File: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (raw, json)
Hash identifier: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=
Subject key identifier: 7C:04:CA:31:7A:0E:18:9D:8A:6E:D4:5C:5A:23:29:D1:AD:7D:81:9F
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 019422FB135381CB2AD0044A21EA3E65711F
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201105
IP address blocks: 185.83.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:13:53:81:cb:2a:d0:04:4a:21:ea:3e:65:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c04ca317a0e189d8a6ed45c5a2329d1ad7d819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:a3:3a:85:15:54:15:50:76:75:4e:96:20:
fe:bd:0c:bf:e5:73:80:54:33:06:34:ce:55:00:be:
bb:2f:89:0b:9a:3d:41:07:d6:71:8f:b7:32:f2:df:
61:67:f4:8a:dc:a7:43:b9:d1:dc:a7:3e:5e:23:b3:
83:fd:86:02:c8:19:54:10:cc:1d:73:cc:4c:e2:3b:
89:6b:42:e0:54:72:75:fa:c6:ef:e4:e0:7f:57:3a:
2b:07:66:f3:ce:f8:3c:ba:80:5d:30:df:38:7f:8f:
a2:d2:09:ec:64:9c:49:9d:9b:4a:7a:f1:8e:10:84:
6b:3e:64:77:a6:1c:5d:e1:70:1e:69:dd:eb:74:d3:
fc:4b:02:5c:5f:95:f5:0e:14:63:25:dd:cf:3c:97:
7e:d3:26:38:69:16:89:67:5e:2d:2f:4a:64:56:88:
d5:34:f4:0f:91:df:8c:17:41:0e:21:fb:39:0a:56:
22:d8:1b:0a:23:cc:28:b0:82:8b:af:37:51:48:df:
15:fa:5c:c1:8d:b8:97:1a:60:d2:c6:57:83:2e:7e:
e4:5b:ea:7a:0d:bb:58:2e:11:95:04:4c:54:ad:ee:
96:b4:99:43:b2:48:cb:cc:36:53:9f:35:13:01:0a:
7c:53:85:ed:bf:d9:3c:72:af:7d:85:d4:3e:f6:5e:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:CA:31:7A:0E:18:9D:8A:6E:D4:5C:5A:23:29:D1:AD:7D:81:9F
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.160.0/22
Signature Algorithm: sha256WithRSAEncryption
77:ea:c7:43:53:08:63:b0:a2:e7:5c:8a:ef:34:30:68:19:5b:
23:07:c6:e2:b8:00:fd:10:23:cb:ee:38:92:2a:cb:28:75:cb:
eb:40:cc:de:fc:ce:7d:01:be:a0:1c:f7:02:0e:b6:af:74:40:
81:64:0b:38:a3:61:27:aa:d5:e5:dc:f1:a8:45:de:8e:1e:9b:
a3:8a:55:6b:c2:d5:21:64:60:cd:c4:2a:74:68:9d:a1:6b:bc:
22:01:e2:89:b3:e1:28:50:40:e7:a7:58:e6:c8:5f:d9:1e:e2:
59:0d:c3:9b:fc:1a:5f:c5:bc:9f:82:a5:79:c7:7a:f6:1e:36:
4b:d8:72:c9:9b:a1:fd:1f:c1:73:24:02:a9:04:92:ec:c9:4d:
1e:ca:0a:fe:73:29:6d:f9:b3:2e:19:67:5f:20:9e:60:4c:69:
5f:dd:8c:da:e7:8c:ed:92:7b:e0:fa:a8:b0:b4:e9:66:f7:40:
bf:14:26:f2:a5:60:fd:3b:e8:cc:70:7b:b8:5d:42:00:44:8d:
9c:fe:e8:89:f8:0a:c6:68:f2:a5:f2:71:96:f7:9f:d0:db:2b:
50:07:7a:5a:e2:ed:bc:c6:c5:71:26:7a:a9:a5:b4:e0:cb:be:
31:04:a0:1d:14:d7:39:7e:56:95:7a:12:cf:18:c1:68:b5:6f:
00:35:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net