Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/anHJmbU7C2zjE1lGpkfnKPRRqS4.roa
File: anHJmbU7C2zjE1lGpkfnKPRRqS4.roa (raw, json)
Hash identifier: svRwOAhrUBlYXwTbfNYBTqirI+LGeE+CWUjAVTOIKpw=
Subject key identifier: 6A:71:C9:99:B5:3B:0B:6C:E3:13:59:46:A6:47:E7:28:F4:51:A9:2E
Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial: 019424B39FC1AC2B3C23BC3B7867DD454CDB
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/anHJmbU7C2zjE1lGpkfnKPRRqS4.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 160.202.20.0/24 maxlen: 24
160.202.21.0/24 maxlen: 24
160.202.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:c1:ac:2b:3c:23:bc:3b:78:67:dd:45:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a71c999b53b0b6ce3135946a647e728f451a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:b7:8b:f5:59:0f:69:fa:62:81:3a:3d:bd:
2c:1c:35:cc:a5:9e:e4:9f:3d:66:43:8e:e9:a4:59:
45:9d:1e:f6:65:2f:23:a2:f5:4a:b4:8d:c3:bd:55:
f0:40:cb:93:08:c9:43:46:b1:a1:78:48:c6:69:d2:
1a:42:37:b9:3c:85:f1:aa:58:0b:74:40:8c:f5:4b:
74:09:e3:58:45:c9:91:2a:5d:05:a7:fb:d4:39:eb:
aa:88:0b:08:d8:23:ff:c7:88:40:94:4d:34:cc:5b:
ea:e9:9a:d5:b6:c0:59:fd:80:94:ee:1b:7a:2c:7c:
89:a7:84:5d:1f:38:a4:60:ca:0f:0a:f5:b9:a9:f1:
c4:94:fc:cf:93:e2:05:a9:70:1a:38:cb:fb:9d:83:
af:95:1e:4a:94:d1:e0:c8:82:cc:bb:76:c5:19:31:
ae:26:6f:ec:59:a2:c1:66:48:a5:2b:5c:d6:43:2a:
65:68:cf:9d:67:04:3b:e9:eb:ac:a8:ac:33:37:15:
8a:d3:32:0c:d0:28:49:d4:b8:3d:2d:6d:06:5c:2c:
c0:2e:86:26:db:0a:09:90:c0:67:16:54:f3:20:d3:
5e:35:de:f8:47:b9:f5:ef:17:b3:99:da:4c:00:ad:
14:09:14:2b:43:95:d4:28:d4:3c:f1:c1:e4:9f:43:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:C9:99:B5:3B:0B:6C:E3:13:59:46:A6:47:E7:28:F4:51:A9:2E
X509v3 Authority Key Identifier:
keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/anHJmbU7C2zjE1lGpkfnKPRRqS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.20.0-160.202.22.255
Signature Algorithm: sha256WithRSAEncryption
0a:76:51:8b:ac:b6:96:09:0b:c1:c5:86:f4:4b:d2:9b:e7:40:
1f:bf:a2:73:34:ed:77:d6:db:fe:f6:74:a8:4a:b6:4a:db:bf:
d7:3d:b8:22:f3:21:1d:a4:d6:ac:2b:b7:ed:f5:de:6b:ad:8a:
c2:1e:40:ed:90:19:6b:71:e7:24:83:89:2b:4f:e4:3b:0d:e1:
46:57:84:3c:2a:7c:88:19:32:93:ff:37:5d:e9:89:6e:89:00:
af:26:30:8e:29:e7:a4:6c:ee:25:e1:0f:bb:e2:8d:6d:66:11:
8f:a3:fd:f8:7a:08:1b:8d:a4:0d:ba:77:02:bb:c8:a8:c9:41:
a8:c8:bf:41:76:a1:cd:79:13:4d:6c:4d:0a:30:27:79:d5:68:
17:52:e8:f9:16:a5:77:0a:37:64:04:9b:72:37:e8:3f:d3:36:
c9:a9:11:14:da:57:1c:b0:b7:1b:49:f5:17:3d:84:b6:43:e2:
bf:b6:41:a9:66:bf:84:52:3b:6d:f1:11:c8:6c:c4:c6:20:50:
58:ea:44:f5:08:10:d0:ae:d4:b9:1c:a6:9a:19:7b:3e:44:61:
36:8b:54:0e:b5:46:06:03:24:f1:ed:c1:79:a9:2e:36:34:50:
3b:54:ea:3f:b0:b6:cf:bd:b5:c9:d2:ab:d2:05:64:16:c0:cf:
ae:dd:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:47 2025 by rpki-client