Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa
File: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (raw, json)
Hash identifier: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=
Subject key identifier: 1F:E9:10:11:A1:5F:D8:C3:E2:C2:59:0F:08:E8:16:AC:5C:02:FF:D2
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019422FC2531CFAE7CF8C3184EE4EECFE2F9
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61200
IP address blocks: 185.16.20.0/22 maxlen: 22
185.16.20.0/23 maxlen: 23
185.16.20.0/24 maxlen: 24
185.16.21.0/24 maxlen: 24
185.16.22.0/23 maxlen: 23
185.16.22.0/24 maxlen: 24
185.16.23.0/24 maxlen: 24
2a03:cbc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:31:cf:ae:7c:f8:c3:18:4e:e4:ee:cf:e2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fe91011a15fd8c3e2c2590f08e816ac5c02ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:2e:fd:b7:c1:70:18:77:a7:ac:24:28:58:
c5:a2:64:44:4c:6a:44:a4:a6:f7:df:8d:89:d9:45:
05:3e:18:77:9c:e1:2e:3f:b2:6f:42:77:89:59:7f:
bd:3a:88:5e:45:cc:7f:38:e1:5a:36:36:2c:4e:51:
70:45:59:2f:bb:e2:42:5e:a6:12:e8:ce:07:e5:f5:
c9:72:fd:c1:04:a0:35:3e:73:60:72:7e:95:6b:c9:
5e:f6:aa:8a:cf:77:46:92:c0:c3:76:69:c8:b8:da:
ee:9b:4c:ba:10:fa:f4:4a:05:4d:17:b8:ce:61:46:
7e:4d:cb:68:ba:33:03:f1:cc:f9:b3:82:36:ef:36:
cf:df:06:68:69:1b:c1:23:33:6c:8e:23:4b:22:98:
d3:8b:67:92:d7:0a:1f:57:a8:88:fe:71:25:fc:88:
8d:4b:b7:55:54:be:21:99:a1:f7:23:99:73:0b:b9:
8c:bc:99:e8:70:12:ea:cd:32:2b:1c:e6:dc:e7:54:
7e:c4:13:7c:99:14:88:11:d2:14:36:0f:b4:4c:3f:
bc:e6:6b:fa:db:8b:f5:49:8d:7d:57:38:a8:41:52:
ad:97:0b:a1:23:07:c9:c5:30:fd:a4:e1:e7:79:8f:
ce:16:1a:63:51:cf:9d:41:26:8c:d0:2f:0f:f4:b7:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:10:11:A1:5F:D8:C3:E2:C2:59:0F:08:E8:16:AC:5C:02:FF:D2
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.20.0/22
IPv6:
2a03:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:3e:4b:b9:03:ee:53:b9:d0:58:04:21:19:63:83:32:09:e6:
a8:24:75:ba:0c:de:b2:5d:c9:83:5d:7d:b8:75:bd:76:ab:79:
01:25:72:2e:28:5d:9f:fc:6a:61:52:04:1b:75:9a:0e:92:ac:
16:4c:7e:8d:6d:30:b3:67:60:2b:54:26:0d:49:6c:3e:0d:75:
19:e4:78:23:7f:ec:47:cb:23:ce:de:03:d4:d8:a7:f8:33:fa:
73:a5:9e:57:0d:c3:f2:79:82:bb:20:1c:70:c1:bf:1e:c2:40:
df:8e:f9:fa:97:79:e0:50:05:33:24:b1:f5:d5:87:a4:2d:59:
a5:63:29:f5:38:d6:17:54:0f:e5:98:7b:74:53:a4:4a:04:67:
8a:81:ff:23:a1:79:ce:ca:3a:c3:55:65:9e:b6:2c:3a:ab:c4:
0e:be:8c:ea:98:b3:3c:64:2b:57:2b:1a:fb:e0:34:a9:cf:c6:
42:17:52:b5:bd:9d:18:c3:e4:36:b9:67:0c:0f:e0:f7:bb:e9:
a3:8e:93:87:7d:89:1a:e6:4c:bb:28:65:a2:e4:67:12:fc:fc:
8a:87:92:04:3f:7e:f4:14:dc:27:2d:da:a0:95:38:7e:61:11:
a9:2e:19:51:c3:8b:67:78:ea:92:f7:ef:00:00:e9:de:12:16:
c0:30:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:47 2025 by rpki-client