Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/aQpN_AazwsYK521EYwQJi9M2iSk.roa
File: aQpN_AazwsYK521EYwQJi9M2iSk.roa (raw, json)
Hash identifier: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=
Subject key identifier: 69:0A:4D:FC:06:B3:C2:C6:0A:E7:6D:44:63:04:09:8B:D3:36:89:29
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 01942144406C9975323C998BB031794C1C8F
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/aQpN_AazwsYK521EYwQJi9M2iSk.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205389
IP address blocks: 185.192.80.0/22 maxlen: 22
185.192.80.0/24 maxlen: 24
185.192.81.0/24 maxlen: 24
185.192.82.0/24 maxlen: 24
185.192.83.0/24 maxlen: 24
2a0c:1a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:6c:99:75:32:3c:99:8b:b0:31:79:4c:1c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690a4dfc06b3c2c60ae76d446304098bd3368929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:0f:08:1a:92:9a:b7:b9:a4:3d:3f:0c:05:
d6:84:ad:89:45:c7:25:a4:da:c4:89:6c:ac:e8:57:
0d:9e:63:10:da:1f:b0:d6:53:58:69:59:54:b9:e0:
5e:b4:f6:c7:57:ce:b3:b4:6b:b3:ec:d6:65:80:e1:
08:9c:3a:2c:52:5e:f9:a8:a8:4e:3a:be:ba:42:52:
e6:3e:41:b2:a0:40:52:e8:0b:05:23:c3:2f:db:37:
d9:5c:b8:2d:4f:e8:f7:ec:97:7c:3f:32:88:f1:15:
32:ba:be:0f:e6:d0:3d:d4:f6:b9:ae:5d:39:0d:94:
ef:7a:88:ff:7f:5c:3f:e2:a7:51:12:ba:cf:7b:b1:
2e:6b:e2:d9:aa:f7:79:7c:67:d6:0c:3e:cd:0a:00:
84:b4:b3:b4:0e:54:30:1a:b6:39:ec:82:ff:02:7a:
9b:b3:47:f0:92:7e:a8:85:fb:f9:68:c2:4e:8b:8a:
d4:9b:c5:09:c3:a2:47:f0:4b:cb:f0:68:d8:5d:78:
6e:f4:10:b0:1f:a6:b8:fb:e3:3e:68:16:11:fd:e9:
5e:11:8a:b9:ad:fa:a0:37:18:a3:a1:e3:16:a7:4e:
1f:d4:22:0e:e2:a9:b3:6c:30:16:df:d8:48:20:42:
56:df:da:7d:6e:20:d1:0a:96:de:10:a7:e9:3a:13:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:4D:FC:06:B3:C2:C6:0A:E7:6D:44:63:04:09:8B:D3:36:89:29
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/aQpN_AazwsYK521EYwQJi9M2iSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.80.0/22
IPv6:
2a0c:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
ba:23:27:2b:1b:d2:0d:27:90:cc:de:59:ff:7a:bb:de:8a:44:
ba:83:be:09:42:85:f3:b1:9c:33:65:79:22:72:07:7b:24:f4:
e5:41:39:64:89:e0:bb:b6:0c:d8:07:2b:4e:f8:ee:05:a5:d0:
40:95:98:f9:33:97:46:0d:de:82:21:a9:7a:b1:44:ae:b9:a3:
00:ae:2e:24:f9:99:57:a9:39:fd:27:48:f9:85:4c:b1:d1:a5:
32:f0:ca:3f:e2:b7:ca:a2:46:93:a2:be:ae:e7:30:cf:e1:f6:
ad:2c:8f:e1:6c:16:fb:79:ca:9f:55:8a:3e:9b:a1:46:64:31:
67:50:62:42:b7:43:f2:c3:46:85:5f:09:4a:ac:d8:e0:ad:f7:
f1:2e:3b:ae:37:2a:e2:b9:8b:26:a9:74:4d:c4:b6:a1:a0:17:
63:05:d4:1e:8f:fe:b2:84:ce:b4:29:06:91:74:15:4c:b7:6b:
85:cd:c6:25:95:1a:36:9e:b2:5b:8a:39:e7:c5:e5:bd:f4:e3:
43:19:ba:4f:bf:32:4d:1a:62:12:3d:a0:c3:9b:43:d2:be:24:
a2:91:3b:7f:7f:0b:c8:ea:6a:23:4e:e2:f8:c0:33:56:8d:a0:
9c:87:ba:57:70:cb:a8:82:a2:6e:f8:51:e5:fb:ee:70:05:cd:
c6:12:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:26 2025 by rpki-client