Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/61KP3TuLFKBOF65uE4APG3cIPWc.roa
File: 61KP3TuLFKBOF65uE4APG3cIPWc.roa (raw, json)
Hash identifier: 7txI4mrwHXi5PxOy5SiGdzYsl7cpxNuVeRH6xYsi3Xo=
Subject key identifier: EB:52:8F:DD:3B:8B:14:A0:4E:17:AE:6E:13:80:0F:1B:77:08:3D:67
Certificate issuer: /CN=58bdb1bd75727519e400bfe88a75123d6184de14
Certificate serial: 018CC870219460AEBA8D2A989CBE11EF5B1D
Authority key identifier: 58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/61KP3TuLFKBOF65uE4APG3cIPWc.roa
Signing time: Tue 02 Jan 2024 04:30:40 +0000
ROA not before: Tue 02 Jan 2024 04:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206801
IP address blocks: 185.170.138.0/24 maxlen: 24
185.170.136.0/22 maxlen: 22
185.170.136.0/23 maxlen: 23
185.170.136.0/24 maxlen: 24
185.170.138.0/23 maxlen: 23
185.170.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:21:94:60:ae:ba:8d:2a:98:9c:be:11:ef:5b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bdb1bd75727519e400bfe88a75123d6184de14
Validity
Not Before: Jan 2 04:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb528fdd3b8b14a04e17ae6e13800f1b77083d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:b1:43:25:d4:a4:ee:2f:14:7e:ad:ea:c0:
18:32:9f:05:2e:03:b4:6b:99:62:ae:36:53:73:66:
8e:1b:78:ff:ab:ad:7f:83:0a:22:5e:98:0c:6c:7f:
02:01:5b:f5:5c:a8:7f:67:ad:34:d7:de:0f:82:7b:
e4:43:6d:46:2d:e5:90:d9:90:c3:49:18:9f:94:e9:
27:34:11:2c:97:9c:8c:a6:01:1f:c4:be:6f:2a:27:
fc:3b:86:fd:62:fa:a0:2f:d6:52:55:f2:db:40:ca:
bb:d5:f1:a1:95:e7:61:0b:af:f0:b9:72:08:e0:b1:
c5:1b:4e:0c:03:f6:e4:4c:05:11:27:85:dc:26:69:
b0:af:f2:3b:27:3a:98:52:f4:91:1c:d0:64:4c:9b:
ed:24:7b:ab:88:4b:18:75:f3:a0:98:60:35:23:2e:
45:1d:5e:51:4c:33:9e:28:77:fb:ed:46:c6:3a:5c:
6d:3c:a0:db:7a:9a:65:96:47:2d:ee:11:10:6f:f0:
c4:c3:6f:c7:c4:eb:13:78:60:92:39:e1:17:85:a7:
d1:94:70:c4:c5:1b:c2:ae:78:65:21:d2:e5:e3:5e:
2d:ab:6b:39:ea:e6:63:18:3d:c2:46:67:44:4b:20:
98:c1:0c:40:76:75:04:73:09:69:86:9f:98:fa:20:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:8F:DD:3B:8B:14:A0:4E:17:AE:6E:13:80:0F:1B:77:08:3D:67
X509v3 Authority Key Identifier:
keyid:58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/61KP3TuLFKBOF65uE4APG3cIPWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.136.0/22
Signature Algorithm: sha256WithRSAEncryption
42:29:10:a8:fb:dc:91:6c:67:fb:e3:1b:56:da:e9:79:6e:c0:
c9:18:85:98:b0:3b:23:07:c5:10:2f:11:33:f5:de:19:b2:6b:
0d:f1:18:9f:2f:97:ad:a5:2f:9f:b7:31:25:c1:b4:e4:8a:83:
b7:c7:d1:a1:e0:37:e0:32:e3:70:49:93:05:c0:74:4a:84:1f:
18:c4:8d:82:ee:5c:6f:86:43:0d:a0:6b:fe:e9:62:50:66:16:
ff:29:c5:78:a3:4a:a1:c5:e2:b8:cc:bb:56:d8:ee:5d:c0:2a:
fa:40:1e:85:6d:3e:e5:81:a2:e5:8e:c2:d9:a6:f9:b9:f4:10:
b8:3f:93:a1:d8:4e:91:eb:fb:aa:73:84:1c:94:9d:11:62:f2:
d6:07:ca:02:5d:f1:c9:db:55:1e:0f:9a:ea:57:1c:27:9f:9c:
fa:c1:95:f8:ac:c0:7c:71:3d:d0:03:2f:95:37:2f:fc:90:6b:
29:0a:a5:ae:00:bc:6b:4c:43:5e:29:af:e6:9b:7c:03:fa:76:
74:e0:bc:81:bc:20:91:73:72:9b:1d:56:dc:e1:fd:68:9b:3e:
0a:3a:85:d7:8e:e8:06:a2:5d:d1:9d:08:ee:8a:4a:0c:c9:b0:
ae:73:6a:2f:f7:fb:3a:94:57:0b:16:fa:2d:90:8c:e7:13:28:
7b:e3:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:38 2025 by rpki-client