Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aRUuIqNM6I5NFc5WDzH7IZ9zSOo.roa
File: aRUuIqNM6I5NFc5WDzH7IZ9zSOo.roa (raw, json)
Hash identifier: dWc5dJURn9YLKvKIyVYcJhw4Rqiqp7HQdBD3lFSWbZY=
Subject key identifier: 69:15:2E:22:A3:4C:E8:8E:4D:15:CE:56:0F:31:FB:21:9F:73:48:EA
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483A6F76974C7F7DFAFF21283BE092
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aRUuIqNM6I5NFc5WDzH7IZ9zSOo.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 185.28.51.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3a:6f:76:97:4c:7f:7d:fa:ff:21:28:3b:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69152e22a34ce88e4d15ce560f31fb219f7348ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:7c:02:c8:95:9e:e4:57:d8:a0:b8:6c:78:
8b:f3:38:1a:cb:dc:b2:e5:17:75:ca:9c:b0:f3:33:
04:3e:fd:a7:67:0c:d2:8f:e3:5b:89:19:f2:f1:51:
a6:bc:2f:dc:74:11:a2:af:24:29:35:de:22:b6:8a:
43:c2:bd:8d:a6:fe:e6:a3:ba:47:3a:44:89:e9:ff:
ea:f0:15:7a:ad:b4:51:4e:a3:d0:81:04:42:a2:7e:
95:cd:b6:20:c8:3c:c1:97:4b:4f:c0:8e:e8:91:5e:
19:fe:50:bd:d1:52:14:03:3a:7e:54:0b:14:55:2e:
70:f3:cd:5e:88:ea:ad:e7:b7:89:3b:30:da:7a:cd:
6b:a7:20:b7:ad:4b:6d:3d:4f:c0:b0:dd:d5:bc:df:
49:d3:13:6e:a7:91:2d:8b:72:c3:8a:5e:0d:8f:f6:
78:0a:57:0b:4a:d8:9b:16:43:ff:f1:20:8f:a2:52:
98:5f:ad:85:70:c0:76:f8:70:c8:88:c7:58:e1:9f:
46:56:b1:a6:be:7c:6e:fc:47:45:d6:c1:49:03:b6:
a1:6c:2f:a8:8d:94:f0:d9:b0:b8:1d:cb:d0:b2:df:
6b:3a:2f:39:70:2f:90:b2:bd:92:1e:18:d5:ec:3a:
08:84:b8:2c:3c:66:18:ae:29:35:af:a2:fd:f2:28:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:2E:22:A3:4C:E8:8E:4D:15:CE:56:0F:31:FB:21:9F:73:48:EA
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aRUuIqNM6I5NFc5WDzH7IZ9zSOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.51.0/24
185.231.187.0/24
185.244.229.0-185.244.231.255
185.246.13.0/24
185.246.15.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cf:34:3d:e6:7e:eb:2b:10:57:40:fb:9b:a0:19:e2:a6:27:
b2:0a:4c:6f:7a:49:df:53:c6:90:2f:7f:25:a2:bd:ed:60:42:
9e:bf:1c:d6:82:5b:4c:13:52:f1:7e:da:1d:44:29:1c:b0:4b:
af:ad:95:93:4e:1a:7a:31:69:02:28:e7:08:7c:55:68:0b:81:
17:70:f1:cb:ba:a5:8e:b4:92:48:0d:f3:96:f3:86:5d:53:78:
e8:c0:53:a0:14:45:30:68:fe:06:d4:0b:5d:6d:0b:b3:54:98:
90:73:a0:90:fb:7b:9f:ae:ae:16:0b:1d:e7:8d:56:32:ce:c7:
45:a2:bf:4a:44:ba:1d:5c:d9:e2:ab:85:93:c0:94:c4:46:c5:
9d:2f:27:22:83:d5:e6:26:04:b8:5e:64:35:37:16:81:5b:36:
85:69:bd:05:b0:38:92:36:89:6b:fd:8f:24:47:18:3b:0b:b8:
ba:b1:60:ab:01:1e:9f:0e:bb:d4:be:6b:a9:43:9c:fa:c7:5b:
4d:e3:a2:c0:7f:6a:d9:f8:5e:b0:69:64:8a:e8:a6:a1:b4:22:
fe:96:e8:b1:03:bb:3a:0d:35:6a:b4:9d:ee:10:f4:ca:5f:98:
b2:4e:8d:35:72:39:96:fb:b3:da:c5:89:75:18:17:fc:0e:2a:
08:eb:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:36 2025 by rpki-client