Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa
File: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (raw, json)
Hash identifier: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=
Subject key identifier: 05:30:8C:09:0C:57:A6:08:39:2B:9B:9C:97:E8:DF:B3:FF:A7:0F:40
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019421B2347E0E1B71915C405F74996C8738
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201568
IP address blocks: 185.60.68.0/22 maxlen: 22
185.60.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:7e:0e:1b:71:91:5c:40:5f:74:99:6c:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05308c090c57a608392b9b9c97e8dfb3ffa70f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:9e:09:e9:e4:6b:f6:0c:e7:ed:bd:51:bb:
03:7b:fe:66:dd:4b:29:fa:23:ed:a7:6a:6e:9f:dd:
da:2b:0b:ef:6d:24:c1:d4:05:8b:22:86:11:7f:6e:
a1:79:57:ab:d4:ea:b3:e6:52:89:62:da:66:a5:45:
19:ed:1a:a5:4d:13:d9:fe:48:8b:b3:93:80:b2:8f:
2e:d7:89:cb:4e:61:5a:58:45:8f:ae:ae:ee:27:31:
bd:d0:dc:d5:6a:63:cc:94:95:6b:a5:35:af:ce:32:
d6:43:fa:a5:57:52:3b:66:06:78:5b:4e:9d:cb:e1:
1e:97:c0:0b:d4:70:9d:b8:c9:99:a4:f2:85:e7:38:
99:cc:9e:a9:fd:86:21:0f:c0:dd:b9:32:2c:c5:52:
f0:90:7a:0a:bd:9c:f9:3f:61:0d:42:5b:9b:fe:a8:
9f:cc:9a:78:c2:1b:68:da:ba:28:a3:64:bb:5f:23:
9a:b7:21:b4:e5:06:5f:0d:9d:c2:67:7a:e2:0b:75:
91:42:77:31:9e:e5:d6:a3:07:de:b7:91:11:2c:dd:
92:8f:68:b0:4b:c1:b0:4c:97:e5:41:73:be:b2:9f:
ec:78:1d:c0:e5:1f:9b:05:23:54:67:16:df:1c:0a:
a1:4b:0a:1f:68:a7:d4:d3:ce:f8:d3:2c:ca:c7:35:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:30:8C:09:0C:57:A6:08:39:2B:9B:9C:97:E8:DF:B3:FF:A7:0F:40
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.68.0/22
Signature Algorithm: sha256WithRSAEncryption
71:44:0c:66:e3:ca:57:2f:a4:5d:94:01:3d:aa:2d:45:d2:0f:
17:8b:2f:77:fb:f6:9e:3d:47:e0:86:24:2e:19:24:ff:48:01:
77:da:fc:50:30:98:a0:25:25:fc:f2:02:69:7a:e0:53:b7:3a:
3b:87:0d:57:cd:a8:ea:52:2a:ab:50:60:14:e7:5e:86:fc:0b:
34:ea:9b:9c:fe:3b:77:08:c6:57:dc:5e:4a:bc:be:72:7a:10:
d4:7b:14:fc:14:5e:a5:a6:81:57:2c:9b:53:39:b8:fe:13:e3:
cb:0b:a7:9a:63:15:e3:a6:39:c5:f3:b1:1a:bf:83:db:f6:14:
c0:12:91:17:82:52:75:5a:59:72:9e:14:17:0f:43:7e:bc:35:
5c:97:4d:c7:de:36:7d:41:45:ea:af:42:f3:f1:3f:2d:53:a2:
10:37:80:39:96:d2:67:76:43:31:e7:e5:e0:1b:41:bb:6e:7c:
5d:ca:e6:a9:14:42:d3:b0:f5:2e:19:98:b0:e7:13:4d:e2:e2:
2f:1d:69:d5:f6:70:d5:fb:d6:6c:1a:89:33:dd:28:3b:a8:19:
2b:7b:54:ab:2e:56:f0:20:dc:41:20:4d:a3:e7:9d:2a:ab:8a:
0c:ff:96:e4:5f:b6:20:61:f5:5d:03:02:9c:30:5d:1b:b9:00:
c6:a7:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:13 2025 by rpki-client