Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ot1seKuPr0VWOzaiRtogA4gk2L4.roa
File: ot1seKuPr0VWOzaiRtogA4gk2L4.roa (raw, json)
Hash identifier: qGNUCx3dvdHGEqP5qtWndFudBrst3InkEgLzxymjhhY=
Subject key identifier: A2:DD:6C:78:AB:8F:AF:45:56:3B:36:A2:46:DA:20:03:88:24:D8:BE
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019426D9EEB7EC5C654E26C2312E2552CB57
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ot1seKuPr0VWOzaiRtogA4gk2L4.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216445
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:b7:ec:5c:65:4e:26:c2:31:2e:25:52:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2dd6c78ab8faf45563b36a246da20038824d8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ea:a2:d6:9f:26:1f:67:5a:63:79:10:8c:
fd:d9:3d:fd:cb:8a:b5:83:aa:a4:1a:50:85:1b:6a:
02:09:43:8e:1c:0c:d9:26:38:3e:6e:4e:9e:1d:22:
69:63:a8:14:df:c9:6f:19:16:2e:43:c9:a6:c5:92:
30:29:b6:4b:93:73:1f:f8:5f:16:0c:ea:97:98:b3:
3d:59:9a:67:26:8e:0e:0c:6b:48:11:4a:f4:27:f2:
c0:dc:e8:5d:8e:e5:8f:74:fa:a9:8a:a9:3c:e3:8e:
41:0d:a8:67:69:8a:a8:1e:9b:b5:45:81:7c:6b:75:
64:72:fa:7a:e9:4e:de:a9:dd:93:d5:d4:78:ab:43:
71:e1:11:ac:90:e1:ef:fa:c8:0c:e8:05:9a:80:39:
35:b5:db:d1:f1:10:79:10:2c:8d:de:e0:6f:bd:ba:
2b:a4:e7:35:a6:5f:ba:5c:5d:ba:2f:f8:4e:45:99:
c1:b6:18:71:5c:73:18:a7:96:56:3c:75:04:43:08:
a8:8f:27:63:42:e1:b0:88:8c:df:14:9a:3c:e8:a2:
72:46:aa:a1:cd:23:7a:a2:92:48:e4:af:23:3a:62:
17:c7:9b:12:01:fc:c8:fd:69:e3:7a:a9:0f:f2:86:
8a:67:88:4e:d0:3e:df:0f:7a:1c:b6:9e:05:c2:1b:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:6C:78:AB:8F:AF:45:56:3B:36:A2:46:DA:20:03:88:24:D8:BE
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ot1seKuPr0VWOzaiRtogA4gk2L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7a:e4:c8:89:18:8b:8d:d5:84:2f:83:d3:c4:f3:38:7a:2f:
07:f8:d0:9f:e8:a2:b6:b2:0a:95:41:bc:45:f4:9f:9f:bd:1b:
c5:78:d0:f6:f9:90:4c:32:87:33:71:b8:6d:51:31:ec:f6:33:
85:5e:0d:0f:cc:77:bc:98:6d:6d:3a:b5:a0:94:6a:b0:b6:44:
cb:21:73:4b:0c:a7:65:16:e1:1c:d0:4e:dd:b9:06:b9:a1:ae:
23:61:59:ee:36:bb:93:2c:5f:2c:b7:e8:1f:88:86:2a:de:7f:
3c:83:51:fd:0d:03:5e:13:f2:ed:71:4e:58:14:ea:85:a7:fe:
de:09:1e:d5:4e:5d:2a:c5:eb:2d:f4:50:23:9f:33:c0:80:85:
2f:bc:93:70:6e:25:ff:9b:f3:3e:fe:42:68:ce:b4:6a:16:42:
be:97:95:60:bb:6e:1a:52:ca:c9:e3:d7:4d:2d:61:93:53:80:
0f:19:7d:f8:2d:a9:b7:aa:06:bd:4d:ee:ad:16:61:3c:2b:4c:
c5:59:19:bb:96:5a:da:b1:2e:c6:48:06:bc:18:6e:86:f7:1f:
27:72:65:8b:c8:52:7a:de:1c:e5:43:8e:6b:2a:99:0e:cf:63:
b4:b2:66:ff:65:f9:07:46:07:ad:18:4b:c0:1c:5b:d3:31:43:
6b:fd:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:04:03 2025 by rpki-client