Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa
File: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (raw, json)
Hash identifier: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=
Subject key identifier: 70:55:8C:5F:6A:3F:BA:2D:89:CC:6A:3F:DC:1C:2D:98:D0:C4:E9:78
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 019425218B33D90EF2CE54B047CD39129227
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50864
IP address blocks: 185.160.88.0/24 maxlen: 24
185.160.89.0/24 maxlen: 24
2a07:bbc2::/48 maxlen: 48
2a07:bbc2:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:33:d9:0e:f2:ce:54:b0:47:cd:39:12:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70558c5f6a3fba2d89cc6a3fdc1c2d98d0c4e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:b5:f2:93:c6:27:33:71:36:07:cb:5d:f1:
ca:39:5d:23:1d:48:a9:af:70:89:ea:80:13:ca:43:
64:9a:ce:31:af:54:c0:8d:57:f7:26:cb:6f:ec:00:
d4:1a:f2:2b:e2:77:c5:fa:ee:ef:97:a6:e8:a2:ff:
f4:12:da:50:08:46:34:de:4b:f6:be:e2:6a:dd:31:
85:f9:53:16:d6:40:54:9f:06:89:d4:e0:f0:5c:3f:
0d:e1:4e:d0:6f:b0:87:25:87:79:ea:22:f4:cf:95:
78:74:d9:7e:32:a8:24:80:0f:58:00:fb:a0:9a:e9:
35:0e:79:1d:e4:91:03:6b:b1:fc:b3:29:00:70:48:
74:68:3b:45:48:68:ed:bd:74:97:a2:d1:6c:14:e4:
04:f4:81:69:7e:6e:17:f2:5c:8a:7a:26:2f:84:4d:
5f:4c:05:8e:b8:3b:eb:70:de:d2:a5:82:b4:fb:8c:
73:94:46:07:70:f8:60:cd:83:06:89:7f:6c:43:59:
6f:ba:75:6e:4c:f5:12:b8:f0:7a:0d:68:f7:38:8f:
63:f5:d1:3e:0a:43:b0:14:60:d4:f0:0a:0b:26:d4:
7b:21:13:bb:5e:86:eb:ae:3f:e4:7d:9e:99:57:71:
06:b4:c1:fb:1e:54:71:86:15:36:ce:f0:9f:e4:15:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:8C:5F:6A:3F:BA:2D:89:CC:6A:3F:DC:1C:2D:98:D0:C4:E9:78
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.88.0/23
IPv6:
2a07:bbc2::/47
Signature Algorithm: sha256WithRSAEncryption
4d:e1:cf:35:f5:0e:50:ec:65:32:25:89:85:eb:bb:c7:0a:74:
92:c2:62:27:0e:b7:23:8f:cb:4a:9b:2e:aa:8d:7a:f6:7a:6f:
08:e1:ab:6d:20:b7:7b:6d:16:5a:41:c1:79:91:ce:eb:ba:ac:
0d:8c:9c:b0:79:e8:0d:52:5e:ac:53:3d:39:f7:90:61:2f:bc:
ac:ef:ab:31:3b:df:a8:cd:a7:5e:5b:b5:dd:0f:2e:9e:ae:6f:
fd:15:aa:b3:d6:67:9c:9b:0c:b0:18:4c:73:3a:15:99:6e:15:
3b:d4:79:87:dd:d7:a0:bf:ba:a9:1e:b9:5a:f2:99:40:cb:34:
cc:6f:02:79:cd:4d:b7:84:ee:01:10:1c:ef:a0:1f:76:a0:24:
fd:49:7f:d0:38:74:7a:07:16:21:67:86:87:72:36:90:45:67:
2c:e8:6f:da:21:8c:3b:23:34:27:74:62:75:bd:f9:4f:19:94:
cc:e4:c9:eb:ef:65:7b:50:ce:bc:f8:8f:18:e4:6c:cf:8f:1e:
74:07:bc:7d:0f:d0:6a:78:8d:fb:05:7d:23:2b:56:1e:3d:22:
e4:28:1a:9d:86:50:89:ce:40:2e:b8:9a:cd:32:d6:8c:21:92:
59:0a:e1:16:b1:8b:9d:41:75:70:c2:99:31:c2:7b:3b:eb:cf:
2d:94:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:03 2025 by rpki-client