Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/15hVSUeoIIiv4BzY55u_WpNVawg.roa
File: 15hVSUeoIIiv4BzY55u_WpNVawg.roa (raw, json)
Hash identifier: EGgj2+ZhKjhFJ+3kAUVc/HIcFPU7wY/b3pbQjkOC9Fc=
Subject key identifier: D7:98:55:49:47:A8:20:88:AF:E0:1C:D8:E7:9B:BF:5A:93:55:6B:08
Certificate issuer: /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial: 01856C00FFEB85C0217F9A2D99B14F6FA006
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/15hVSUeoIIiv4BzY55u_WpNVawg.roa
Signing time: Sun 01 Jan 2023 06:24:42 +0000
ROA not before: Sun 01 Jan 2023 06:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.160.29.0/24 maxlen: 24
185.160.30.0/24 maxlen: 24
185.160.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:00:ff:eb:85:c0:21:7f:9a:2d:99:b1:4f:6f:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Validity
Not Before: Jan 1 06:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d798554947a82088afe01cd8e79bbf5a93556b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:ca:62:32:84:f6:63:f9:17:4f:7f:b8:9d:
9c:f9:94:0b:a6:fe:c0:db:5b:98:86:7e:81:ba:ee:
ba:9b:80:99:e6:49:12:6e:80:68:cf:c7:53:0f:40:
c5:44:e4:45:14:75:6f:9b:ad:cb:39:7d:c5:45:02:
1c:d4:63:66:d0:b6:51:28:db:59:64:b1:93:c5:38:
9c:3f:d4:c9:9c:d2:c8:5e:84:14:bf:c1:ff:98:6b:
3c:44:ca:cf:d6:c3:d9:5d:82:ee:01:bc:d5:84:d9:
97:c1:f1:79:48:47:8c:b8:26:d2:89:23:53:a1:18:
e8:32:d8:05:bc:9d:f0:a1:d8:24:b6:4a:84:55:a7:
0b:8f:3e:47:85:02:37:f8:43:59:48:bb:15:d9:dd:
12:39:38:c1:39:30:3e:ba:4c:18:d6:db:ec:ed:3e:
29:a1:4d:64:37:a7:b4:ee:85:a1:1d:89:df:c4:09:
d8:ef:ae:a2:07:39:bd:7b:0a:4c:4e:be:e6:25:cb:
42:23:80:37:27:fe:78:bd:ee:92:48:5d:e4:02:c6:
a6:f6:aa:21:58:f8:79:3c:fa:f6:91:91:11:fd:08:
82:4b:92:e1:ad:f8:34:bd:24:59:6a:6a:52:c8:a6:
9a:70:aa:69:16:b4:30:37:fa:4b:fa:59:c4:b8:69:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:55:49:47:A8:20:88:AF:E0:1C:D8:E7:9B:BF:5A:93:55:6B:08
X509v3 Authority Key Identifier:
keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/15hVSUeoIIiv4BzY55u_WpNVawg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.29.0-185.160.31.255
Signature Algorithm: sha256WithRSAEncryption
67:77:0a:0a:b0:cb:e2:b2:cd:ed:5b:10:48:74:46:8e:97:dc:
b6:0c:1b:27:e2:44:7a:f5:a5:64:09:67:40:12:eb:7d:4d:f7:
d3:ef:b0:16:d6:b1:cd:65:7f:a5:e2:f8:24:8a:2f:18:fc:28:
66:c8:15:3b:ea:6d:ba:84:f2:db:57:65:bd:76:18:08:8d:27:
f0:7f:a3:6c:c1:61:cd:e2:b9:90:53:01:c1:4e:37:3e:09:c1:
02:fd:99:1c:d1:95:64:a6:ba:52:d8:f8:cc:f4:e8:f4:30:cf:
8d:57:30:66:c8:c1:b6:43:60:51:a5:23:4d:aa:09:9b:4a:d8:
e5:63:bc:82:34:71:52:90:64:5b:b0:fe:0f:d6:4e:01:94:66:
d7:82:41:06:b2:ac:18:c6:70:ad:89:e6:5f:41:71:13:e7:b8:
5d:55:21:bd:16:c2:03:f3:7a:20:f0:04:d5:3c:49:2d:f5:7d:
e6:eb:3d:e5:aa:0f:69:4b:63:f6:c8:fa:7c:f1:3e:af:50:dc:
b5:a8:2b:aa:16:70:2b:2b:e6:b6:93:7e:ff:85:bc:ae:8d:1c:
14:d6:cd:6a:0e:22:4c:75:4b:06:3c:1e:24:d5:9e:96:23:aa:
22:be:a8:b2:64:64:78:48:8e:48:f3:27:5a:55:eb:d7:f5:e1:
13:36:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:15:30 2025 by rpki-client