Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5iTlOOubPJODXH7vsUI7Wpq0ba8.roa
File: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (raw, json)
Hash identifier: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=
Subject key identifier: E6:24:E5:38:EB:9B:3C:93:83:5C:7E:EF:B1:42:3B:5A:9A:B4:6D:AF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B547F268956F66B7258DA371EC1E99
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5iTlOOubPJODXH7vsUI7Wpq0ba8.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42745
IP address blocks: 185.160.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:47:f2:68:95:6f:66:b7:25:8d:a3:71:ec:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e624e538eb9b3c93835c7eefb1423b5a9ab46daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:e4:cd:6b:de:8a:d2:f4:2b:f1:78:61:cb:
59:c8:ac:85:67:83:26:5a:b0:da:5b:3a:4c:41:75:
c7:f0:1a:cf:61:d9:a9:1e:9c:1e:96:0b:c0:4b:a2:
11:bb:5b:65:c6:02:5c:87:98:16:d1:04:e3:30:f9:
c4:4e:a5:7d:72:c7:77:0c:a8:bc:f3:37:8c:53:ce:
d6:63:ec:83:d7:2f:60:3c:d8:5d:e4:d3:d5:36:7a:
10:46:22:06:9a:66:0a:c7:3b:a0:e0:b5:3a:c4:e0:
a6:7a:1f:fa:a0:80:da:25:20:c2:e5:82:e0:30:f6:
ed:68:94:3b:fe:e3:e9:85:7c:38:e8:77:ae:cc:86:
50:84:dc:8a:75:81:e5:eb:b9:6f:28:9a:8f:66:36:
06:3d:f2:6b:ae:8d:dc:68:5f:aa:22:77:20:7d:95:
36:15:c5:32:ec:db:f1:20:b2:21:61:82:77:c7:df:
d0:f5:5f:f3:52:bf:f0:32:6d:92:06:5c:8c:bb:05:
ce:66:a9:23:4a:31:70:d8:21:7a:e1:c7:d1:00:85:
0c:98:58:e4:ab:b2:59:11:e3:55:95:36:e8:7b:f1:
30:0b:29:51:1a:60:0b:94:d2:37:c3:38:ca:6b:21:
7a:bf:7d:aa:67:f4:d3:df:21:8a:b8:d7:87:09:75:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:E5:38:EB:9B:3C:93:83:5C:7E:EF:B1:42:3B:5A:9A:B4:6D:AF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5iTlOOubPJODXH7vsUI7Wpq0ba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.192.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5c:36:fa:75:f3:b7:7d:69:03:ca:6b:c5:15:47:d8:77:a0:
0e:82:96:f0:b0:9e:f6:df:53:78:64:b6:84:25:05:a0:2f:50:
0e:de:42:e8:2a:04:30:7c:dc:4e:c6:59:1b:bd:20:34:80:17:
74:c8:23:cb:24:3e:17:06:3f:9b:17:4a:e1:cd:84:ab:cb:07:
6f:bd:72:66:bd:d6:30:18:2c:a4:6c:7b:b6:ce:1e:c4:59:b1:
ec:8e:05:dc:8d:58:dd:92:43:88:31:d3:0b:33:1b:87:ab:a1:
28:ca:70:0a:6b:a0:4b:20:25:5a:28:77:9b:43:db:22:e7:af:
2b:dd:5e:a9:2f:1f:dc:22:dd:57:b4:b5:32:99:69:92:94:10:
57:b8:c6:54:3e:d0:e3:9f:57:46:67:51:47:ce:14:3f:13:0d:
7e:d0:18:02:33:70:a0:3b:ba:f8:5f:c5:8c:f1:13:9a:f5:22:
90:66:6d:d6:51:64:55:6e:2f:16:ee:bf:c0:10:90:ab:f0:b2:
e9:73:76:01:52:e8:e2:00:cc:ff:4f:29:a0:1e:85:5b:47:7a:
1c:a9:84:58:40:af:49:3a:25:46:91:d3:95:e8:e6:15:74:cc:
a3:79:d3:d9:c8:a8:e7:45:91:fa:67:b1:43:18:21:69:c5:94:
71:26:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:33 2025 by rpki-client