Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XW0tCaTAMhef0dHdALyCWbtcFqE.roa
File: XW0tCaTAMhef0dHdALyCWbtcFqE.roa (raw, json)
Hash identifier: z1TLEpIXRD/DBsiXqPQj9OG8m237CY6mSNN07tUxfpE=
Subject key identifier: 5D:6D:2D:09:A4:C0:32:17:9F:D1:D1:DD:00:BC:82:59:BB:5C:16:A1
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF9485CD20D9767BE305774845E9236
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XW0tCaTAMhef0dHdALyCWbtcFqE.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:48:5c:d2:0d:97:67:be:30:57:74:84:5e:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d6d2d09a4c032179fd1d1dd00bc8259bb5c16a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:af:90:66:38:08:03:92:02:b8:bf:19:29:
21:0c:bf:80:06:9f:33:19:d7:8b:93:5e:f9:97:e6:
66:e5:9c:2b:21:ff:f6:db:1d:3c:65:c6:f3:b0:8f:
c7:ea:3d:5a:f8:23:a9:ec:30:20:ec:61:06:29:05:
09:3e:01:77:2e:88:46:b8:61:a0:e8:66:44:15:29:
9e:9b:21:cb:20:cf:97:d2:ab:48:95:67:98:93:0b:
99:f6:ae:f1:29:de:f1:61:fd:d2:26:c1:79:78:d5:
99:bc:21:38:0a:a5:a8:e3:e2:b7:92:fb:14:c8:04:
b0:58:5b:68:36:17:96:9b:a8:6a:39:7d:79:ed:f7:
1c:34:2a:b5:ad:5e:b5:e3:ad:e2:e4:10:e4:ae:ed:
eb:c5:6f:92:c9:00:38:fa:ee:98:4b:d3:b0:1a:9c:
2a:7d:66:26:15:cb:88:39:51:e7:8c:a3:f1:30:94:
a0:34:b0:8f:45:18:0d:d3:46:67:33:cb:52:65:e6:
9e:6a:3e:81:d1:63:b9:df:c9:94:47:17:49:ab:2e:
87:b4:07:55:b2:fa:78:60:fb:c2:35:77:13:84:a3:
b8:32:3c:00:4d:bc:ef:0d:33:1d:60:51:f7:f1:b8:
c6:c3:d0:e0:37:33:0b:e6:5e:17:b0:7c:d2:1e:25:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:2D:09:A4:C0:32:17:9F:D1:D1:DD:00:BC:82:59:BB:5C:16:A1
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/XW0tCaTAMhef0dHdALyCWbtcFqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ea:b9:a0:1e:b8:c3:a4:73:67:77:ca:ba:0e:b8:2f:68:79:
ec:35:44:36:2e:f0:90:22:c1:4c:3c:d7:72:40:b0:c6:cf:62:
22:22:a8:c4:cd:0f:fb:79:83:c3:41:2a:27:b6:fd:8a:b7:c3:
77:c5:76:b2:ed:65:db:a0:b9:91:0f:91:0e:9b:85:ba:f4:f1:
66:8f:52:bb:c8:86:16:c3:d4:e8:b1:27:24:5e:d4:5a:0d:01:
3c:12:08:7b:f5:04:93:b4:56:98:4d:72:4f:f8:3e:aa:37:be:
7a:02:23:54:86:f0:4f:75:97:ff:4a:48:66:4a:e5:a3:bb:15:
d8:05:b7:39:ee:1e:23:50:6e:0a:cc:54:7f:6f:78:8a:4d:e3:
1e:6f:d2:d0:15:3e:1c:6c:6d:5e:ed:e0:ae:2f:e3:f6:2a:75:
7c:4c:fc:42:e7:8d:96:a9:92:0b:e6:57:5d:e8:d8:25:5f:6b:
8a:a4:74:ae:3a:12:2d:43:3d:84:9b:ef:9c:e1:de:3f:73:82:
8d:7a:1f:0c:75:de:a4:8d:1d:22:3e:ae:73:ce:6d:4c:23:74:
01:f2:e9:5e:7e:db:f5:36:d0:e5:5d:03:ba:26:b9:5a:9a:d9:
fe:f7:5a:d0:61:4b:3b:3d:4c:b9:7f:72:ca:40:d4:d0:e3:a6:
82:ff:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:04 2025 by rpki-client