Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/V60g_4Hl1O4ws6xObJRepK5WbCI.roa
File: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (raw, json)
Hash identifier: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=
Subject key identifier: 57:AD:20:FF:81:E5:D4:EE:30:B3:AC:4E:6C:94:5E:A4:AE:56:6C:22
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 01942521B2800336C2EB7F8C5DAA1B1DAF0E
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/V60g_4Hl1O4ws6xObJRepK5WbCI.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60167
IP address blocks: 185.192.48.0/22 maxlen: 22
2a0a:22c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b2:80:03:36:c2:eb:7f:8c:5d:aa:1b:1d:af:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ad20ff81e5d4ee30b3ac4e6c945ea4ae566c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:bd:4e:b9:9c:c9:bb:fe:90:61:49:31:56:
72:cc:4f:13:cf:59:2e:6c:58:f3:ba:be:2e:fa:ef:
da:b2:16:93:39:b9:3a:ee:10:8d:d1:81:53:d3:d4:
10:3a:63:d8:28:65:0e:80:06:5a:7c:11:dc:71:25:
f5:27:c4:58:a4:b9:35:b6:d6:6c:ed:b8:8d:c9:52:
91:ee:71:72:71:5f:b2:81:80:58:df:76:23:f1:1f:
57:3c:da:e3:2b:9e:15:de:55:bb:25:28:d9:f2:f5:
44:3e:29:82:b9:0b:b5:e0:4e:6b:dd:0a:9e:2d:9a:
80:d5:58:0f:be:6f:46:3f:a9:ea:8c:d9:4c:4f:85:
1a:f8:84:ed:9a:4f:21:1b:bc:c3:f7:2b:bd:fe:70:
13:b2:ad:f7:b2:9c:46:99:6e:70:8b:b6:fa:96:95:
2d:e6:2e:25:f5:73:8d:09:1c:f2:32:0d:ed:82:9a:
9b:6e:4e:e6:f5:29:9a:c1:d3:0e:61:d4:e2:41:54:
0f:fe:1a:48:f1:41:66:59:4a:8e:00:69:52:b8:30:
22:6d:78:21:cd:ab:c6:e7:a0:75:eb:7d:05:9d:6f:
53:c2:b3:1f:72:f9:2f:04:9f:fe:93:13:7b:d0:b7:
04:9d:ec:0f:8e:21:a6:28:c1:a1:ea:0d:6f:1f:50:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:20:FF:81:E5:D4:EE:30:B3:AC:4E:6C:94:5E:A4:AE:56:6C:22
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/V60g_4Hl1O4ws6xObJRepK5WbCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.48.0/22
IPv6:
2a0a:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:7e:7d:43:5a:5c:50:e4:a6:be:ab:7b:12:ee:a1:83:29:91:
fb:0d:3a:f2:57:fd:e5:e0:37:ff:c1:e2:94:18:19:5e:54:05:
eb:f9:81:06:79:9e:db:a9:73:2d:de:9c:53:fb:1d:a9:87:3f:
f0:10:83:b1:70:bd:5a:a7:57:e3:ee:27:c5:e0:15:48:6e:43:
8d:cb:95:f2:93:ea:6e:88:cc:06:04:fd:4a:3a:b7:1f:73:b4:
8e:21:4f:31:57:6c:65:5d:6e:61:13:96:06:08:17:e4:19:b0:
a4:7f:12:23:65:31:cf:f6:ea:1b:10:80:23:f4:31:52:4b:cb:
a0:7e:28:37:c7:77:d8:2a:70:dd:97:29:60:86:5a:81:88:90:
0d:7d:10:85:cd:aa:e3:d1:0f:d9:5c:0b:59:39:be:46:d7:89:
7d:d4:1a:9c:d1:88:a0:22:9f:e6:90:41:0b:1d:8f:cc:49:5b:
82:69:3d:72:aa:58:a3:77:db:c4:93:fa:c2:5f:05:57:99:b0:
52:c0:5a:87:bf:8b:d4:a8:f0:06:a2:df:12:49:bb:f0:ac:74:
46:8a:71:56:02:aa:29:84:5c:1c:d9:1f:84:8d:1b:02:22:50:
c2:ae:7a:e0:f3:c1:62:44:08:4a:ca:b4:61:c8:e8:55:d2:58:
76:52:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:47 2025 by rpki-client