Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/H0pXo5dsrJce4F8oF2aIhMCPMVs.roa
File: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (raw, json)
Hash identifier: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=
Subject key identifier: 1F:4A:57:A3:97:6C:AC:97:1E:E0:5F:28:17:66:88:84:C0:8F:31:5B
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01942067F1492FAE6D975FA23A7FE790E043
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/H0pXo5dsrJce4F8oF2aIhMCPMVs.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58010
IP address blocks: 185.60.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:49:2f:ae:6d:97:5f:a2:3a:7f:e7:90:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4a57a3976cac971ee05f2817668884c08f315b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:d8:f0:76:c8:21:45:b4:77:db:0c:35:30:
d8:b1:23:dc:56:68:7b:3e:ef:7d:ce:f9:34:7f:ec:
8b:96:ab:38:8c:6c:27:e4:db:35:e0:5c:07:f1:cc:
51:d7:b3:06:bb:44:82:8a:93:09:bb:1a:97:9f:1e:
66:56:0b:e0:34:54:ff:d9:90:76:dd:b1:9b:e1:91:
0e:00:89:bd:48:b7:26:93:bf:00:7a:ec:56:e0:34:
52:84:81:99:2d:71:86:70:23:04:06:da:af:f1:6f:
3a:bd:0a:44:7c:f4:98:d7:30:fc:8d:5d:b1:75:5b:
0d:fb:3c:f5:89:9a:df:6a:6c:28:94:e7:b0:bb:6a:
86:71:9d:be:6d:a2:9c:28:08:ad:dc:9f:4c:26:03:
25:03:bd:8c:ed:7c:4d:72:b0:ce:c4:39:7a:e0:54:
d3:48:04:30:06:33:c1:0b:4d:90:1a:cc:0f:62:67:
9d:b8:aa:3c:b8:82:69:21:ce:80:e2:c9:cf:c3:21:
21:a9:a7:57:9f:e9:ac:28:e0:a5:cf:8d:13:fa:f2:
a0:ef:e3:4e:7c:ff:1c:e9:34:31:83:80:11:92:5c:
c1:cc:26:f9:fc:1a:93:cd:5b:c6:06:04:e5:d4:5c:
07:f1:dd:28:44:fe:0c:7a:b8:c7:dc:b7:5b:a9:1d:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:57:A3:97:6C:AC:97:1E:E0:5F:28:17:66:88:84:C0:8F:31:5B
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/H0pXo5dsrJce4F8oF2aIhMCPMVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b2:d8:2b:f4:ca:58:64:e2:8c:68:28:d7:97:34:dd:9e:9a:
a2:f8:bd:2f:e2:ba:b3:fa:95:59:94:a2:16:95:c7:92:88:4a:
0b:17:cb:19:45:01:92:95:09:37:05:bd:07:c1:7b:e1:cf:41:
18:92:68:ee:87:5c:be:a8:fc:b7:72:b3:c8:9f:e2:c7:49:fa:
28:70:da:ce:73:00:5e:70:19:79:56:48:1c:5c:63:45:3d:09:
6d:f6:81:1f:33:15:92:3c:dd:1b:52:b0:1a:0f:a5:fd:5b:49:
fd:fe:12:5a:63:66:67:39:05:2c:88:03:f8:77:7a:22:b5:25:
b5:b6:f5:7a:bc:6e:64:6e:8c:20:40:1f:2a:5b:cf:37:e2:e5:
31:42:19:ca:a1:ed:dd:bb:07:04:e9:cb:86:75:a8:57:48:4d:
9f:c4:b0:77:3f:8e:3a:92:21:b6:47:c6:ea:9e:5f:1c:a0:73:
f3:4d:aa:65:9c:45:96:00:fc:ee:8e:94:c5:6a:fb:28:f7:ae:
10:0c:3e:fc:07:23:25:9a:85:b2:38:aa:07:83:17:ab:db:76:
5c:0d:ec:0c:ce:1e:a1:c7:a9:da:75:1f:fb:dd:b6:c7:9e:5a:
34:21:fe:35:d6:e6:6d:24:ac:17:b6:d2:9b:29:35:ef:bc:51:
84:00:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:52 2025 by rpki-client