Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2fd410-1188-4c3d-b783-33e6858e2550/1/AorGqeshYVjIAvkz94NyxITAyO0.roa
File: AorGqeshYVjIAvkz94NyxITAyO0.roa (raw, json)
Hash identifier: yd4pkuog5YJt7rn5J2H9FJDYlbaU7sfmm3oOYZh2TFU=
Subject key identifier: 02:8A:C6:A9:EB:21:61:58:C8:02:F9:33:F7:83:72:C4:84:C0:C8:ED
Certificate issuer: /CN=036394a5d3e004b542e519ce99c4249ed67966a8
Certificate serial: 058EB145
Authority key identifier: 03:63:94:A5:D3:E0:04:B5:42:E5:19:CE:99:C4:24:9E:D6:79:66:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2OUpdPgBLVC5RnOmcQkntZ5Zqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2fd410-1188-4c3d-b783-33e6858e2550/1/AorGqeshYVjIAvkz94NyxITAyO0.roa
Signing time: Sat 01 Jan 2022 05:56:57 +0000
ROA not before: Sat 01 Jan 2022 05:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205989
IP address blocks: 185.129.160.0/22 maxlen: 24
2a0d:5280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93237573 (0x58eb145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036394a5d3e004b542e519ce99c4249ed67966a8
Validity
Not Before: Jan 1 05:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028ac6a9eb216158c802f933f78372c484c0c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:2a:45:16:f8:e8:b5:5d:eb:6b:f4:c7:e4:
06:11:bc:4e:5f:ca:c0:b1:2e:09:bc:f5:58:27:46:
1e:f6:b8:36:a5:36:75:6e:66:71:76:09:71:1d:4c:
33:bf:a3:83:38:c3:88:fe:30:d7:f2:ba:23:f1:e1:
a1:51:73:9a:0a:1f:b4:c2:d3:7f:bb:34:0d:a9:1c:
fc:99:bf:e6:5a:26:03:2c:ce:dc:9a:d8:01:74:49:
d7:59:e2:2b:e8:7a:56:23:ff:9b:41:69:21:64:b9:
3c:71:31:d1:0f:fb:d6:de:5d:9a:8e:71:57:de:65:
9d:ff:4e:1b:00:9b:d7:69:64:af:03:2b:0e:ee:5b:
89:3f:92:67:14:b5:45:e2:e3:6f:de:ef:68:2a:79:
0f:e7:f2:46:82:18:d3:40:38:7f:d7:9d:4e:e7:5c:
4c:d8:50:0d:9f:1c:22:a9:c2:a5:ae:27:8f:e6:da:
14:75:1b:b7:59:43:83:2e:d8:8f:2e:cd:01:59:60:
bd:61:82:86:08:90:99:cd:fc:99:53:dd:c0:65:eb:
0b:62:95:ed:83:da:a7:98:ee:32:61:3d:1b:7f:78:
4e:ab:8f:8b:91:37:e3:e3:66:bd:06:b3:fb:b7:0e:
55:c3:33:9f:69:99:dc:14:7b:4e:28:9f:b0:42:b2:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:C6:A9:EB:21:61:58:C8:02:F9:33:F7:83:72:C4:84:C0:C8:ED
X509v3 Authority Key Identifier:
keyid:03:63:94:A5:D3:E0:04:B5:42:E5:19:CE:99:C4:24:9E:D6:79:66:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2OUpdPgBLVC5RnOmcQkntZ5Zqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2fd410-1188-4c3d-b783-33e6858e2550/1/AorGqeshYVjIAvkz94NyxITAyO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2fd410-1188-4c3d-b783-33e6858e2550/1/A2OUpdPgBLVC5RnOmcQkntZ5Zqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.160.0/22
IPv6:
2a0d:5280::/32
Signature Algorithm: sha256WithRSAEncryption
0a:88:d6:a4:bc:ae:95:f0:33:91:ec:9f:51:ed:c5:59:8b:27:
1c:9b:72:97:7f:a3:61:22:29:c6:84:6a:22:ce:1f:8a:d8:5b:
a3:7f:f9:be:1d:f1:1e:8e:b0:21:3e:9b:1c:77:26:ac:73:c9:
3e:91:6f:64:1f:52:5d:9a:73:8a:21:58:93:4e:1a:e5:18:94:
ed:d0:20:bc:8b:50:a0:1a:d5:24:ba:2f:6b:96:e0:71:f8:99:
0e:00:21:45:0b:ef:2e:66:6b:20:d7:28:ef:34:c1:db:49:75:
f0:12:8a:e1:45:30:b3:40:2a:f0:e8:ae:db:14:e3:2f:ff:5d:
02:51:ba:67:c8:ca:d0:13:ba:b3:0e:54:90:1f:80:d8:f6:aa:
c6:d4:ca:aa:6e:1d:49:aa:f9:d8:fd:6f:4e:f1:71:07:7c:6b:
ff:f2:5b:6a:26:cd:27:8f:b4:0b:94:b1:80:46:56:7d:0d:0d:
45:da:6b:b8:4b:4e:2d:e0:a6:79:77:f1:c9:3b:91:e6:20:0e:
95:36:65:8d:fb:41:ac:96:c6:a3:20:09:61:d6:36:24:ad:45:
a7:5c:f3:46:51:80:65:46:43:81:74:16:6b:40:f9:f9:ed:46:
d3:d7:7d:52:52:fe:81:d1:fc:4d:45:62:5a:7e:13:ab:2f:04:
80:56:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:43:01 2025 by rpki-client