Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/cPcxLO1mqeKGQGyRnW90EvAI0HE.roa
File: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (raw, json)
Hash identifier: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=
Subject key identifier: 70:F7:31:2C:ED:66:A9:E2:86:40:6C:91:9D:6F:74:12:F0:08:D0:71
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01941FFA742F0F3E24AAF9F27927FA2E5F2E
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/cPcxLO1mqeKGQGyRnW90EvAI0HE.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60241
IP address blocks: 185.34.60.0/22 maxlen: 22
185.120.128.0/22 maxlen: 22
198.52.44.0/22 maxlen: 24
198.52.46.0/23 maxlen: 23
2a04:5d00::/29 maxlen: 29
2a06:9a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:2f:0f:3e:24:aa:f9:f2:79:27:fa:2e:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f7312ced66a9e286406c919d6f7412f008d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:1d:8b:54:57:70:cd:12:f3:a2:7f:fd:30:
85:b5:c9:15:65:66:56:31:8d:ba:a6:55:2a:6f:bb:
d0:ac:e7:2b:64:29:14:3d:96:93:a6:60:bb:5b:ef:
8d:fb:89:a4:d2:b7:c6:9e:ae:47:5e:84:75:7f:13:
db:aa:88:36:d3:b0:53:9c:70:40:4d:95:63:f8:70:
0b:d5:06:11:ee:09:bf:53:1a:e6:d1:4c:62:3f:43:
0e:96:02:0a:fd:6e:a4:0f:17:1f:dd:68:bf:b6:51:
3c:ff:8f:b2:11:93:3d:44:b8:14:76:36:3b:f0:50:
96:89:20:55:b4:d7:a9:50:e0:56:23:ee:45:11:f2:
ed:02:9a:12:63:8d:06:54:8d:57:ca:70:31:41:7e:
87:82:2a:2d:4c:5c:f4:34:05:98:84:73:fa:ca:a7:
94:3c:02:68:92:30:af:c6:91:3e:bb:b0:19:ae:f6:
b6:be:21:31:f5:d9:df:00:a2:82:f5:16:77:9f:36:
49:d3:df:d0:4f:8b:2a:6e:8f:83:a6:55:2f:67:de:
8d:3f:92:e6:ed:c7:0f:d6:04:84:b2:11:ab:4c:91:
0c:70:bd:b1:72:03:f1:10:56:a3:b0:aa:21:30:58:
95:68:ff:21:e7:a9:63:dd:65:3d:dc:08:69:1f:d2:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:31:2C:ED:66:A9:E2:86:40:6C:91:9D:6F:74:12:F0:08:D0:71
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/cPcxLO1mqeKGQGyRnW90EvAI0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.60.0/22
185.120.128.0/22
198.52.44.0/22
IPv6:
2a04:5d00::/29
2a06:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
ab:f6:00:ad:ba:3c:be:26:b9:be:dc:2a:cb:4a:1f:4d:78:b4:
f7:b0:6e:a9:ce:1d:d7:84:e2:9c:74:4d:b1:8e:fe:a6:d8:b6:
e1:29:7e:9e:7d:41:f1:98:f9:a3:c7:db:4e:a7:ed:50:66:7a:
31:48:92:dc:3d:28:07:f7:24:c3:b0:bb:8b:dc:94:f1:54:82:
da:43:63:f0:41:21:d6:25:39:ec:fa:9a:54:24:90:e6:00:33:
7a:fb:bf:4c:e2:5d:dd:5e:8f:a7:95:bc:e7:ef:aa:2f:1b:69:
77:10:f3:16:98:e6:53:85:3a:4d:09:aa:50:85:97:c2:73:cc:
1a:9c:d6:13:2d:fe:d4:6f:6b:74:8c:90:ec:7a:40:2d:83:58:
55:32:e8:d8:bd:7c:a0:6c:f3:68:fa:75:e8:49:8a:93:29:41:
10:8e:6b:a5:78:a3:af:e4:fd:5e:2a:5f:70:04:02:3b:33:a1:
cb:6b:84:e7:b7:f5:41:20:5c:5b:18:28:46:e1:5c:25:3f:00:
64:ff:80:82:cf:95:29:cf:1b:36:9c:50:88:77:fe:37:60:e4:
d9:30:a2:d5:00:2e:fb:16:24:6c:10:77:25:d5:ef:31:bf:a4:
75:ef:ef:16:29:60:ba:7b:9d:e9:17:80:2c:34:d2:da:cd:cf:
1a:bc:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:35 2025 by rpki-client