Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/3MqLbq-36c9Yx0mPAyaCRqQ9ca4.roa
File: 3MqLbq-36c9Yx0mPAyaCRqQ9ca4.roa (raw, json)
Hash identifier: yd+7Cz1YS5sOmTZtJe0MJ7q2llZYim28yi/g9ufCojY=
Subject key identifier: DC:CA:8B:6E:AF:B7:E9:CF:58:C7:49:8F:03:26:82:46:A4:3D:71:AE
Certificate issuer: /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial: 1119AD62
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/3MqLbq-36c9Yx0mPAyaCRqQ9ca4.roa
Signing time: Sat 01 Jan 2022 15:55:11 +0000
ROA not before: Sat 01 Jan 2022 15:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.160.29.0/24 maxlen: 24
185.160.30.0/24 maxlen: 24
185.160.28.0/24 maxlen: 24
185.160.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286895458 (0x1119ad62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Validity
Not Before: Jan 1 15:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcca8b6eafb7e9cf58c7498f03268246a43d71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:66:78:72:76:9f:29:ad:5b:fd:8a:d6:21:
2f:9e:80:d3:10:c2:40:f6:1e:3e:ee:8d:0f:f2:1d:
3c:ef:99:da:04:6c:b6:8a:38:79:9a:90:8c:b9:63:
02:1d:d0:de:c1:a8:cd:4d:2e:f9:48:69:f9:77:ac:
c4:8e:b7:ec:0f:41:a6:44:32:ee:25:86:8f:c8:68:
e0:5e:cb:ca:82:89:87:6f:e7:54:6b:4d:5a:9f:f6:
2c:d5:a6:91:a8:25:93:4d:84:a2:df:49:d8:75:6f:
9e:f3:2f:4b:df:cf:dc:fb:3b:02:dc:0b:dd:84:77:
3a:58:d6:3d:dd:d3:09:d8:44:24:47:db:51:30:8e:
8d:0f:a8:ba:2c:67:f2:ba:a9:2f:e3:26:1c:42:8d:
88:6e:5d:fa:6f:b4:6d:91:f6:ec:d4:5a:89:02:a4:
31:84:27:66:6b:36:7e:03:1c:e5:08:bb:5d:bd:a5:
dd:0d:92:10:c6:6a:94:57:a4:96:8a:c7:7f:c3:b3:
a5:55:09:5a:e9:12:ee:bb:8a:23:02:c1:fb:3b:70:
21:9b:b8:2d:24:a6:f7:cd:c9:86:63:d8:c9:f5:3b:
ab:d2:19:88:7c:f8:26:81:86:26:d0:dd:e7:5e:bf:
03:45:eb:38:b9:26:a3:f3:9e:9b:00:fc:a0:75:b7:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:8B:6E:AF:B7:E9:CF:58:C7:49:8F:03:26:82:46:A4:3D:71:AE
X509v3 Authority Key Identifier:
keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/3MqLbq-36c9Yx0mPAyaCRqQ9ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.28.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a2:c1:36:5c:8e:39:ba:f2:95:18:fa:d0:62:7d:69:02:21:
b7:2b:b2:4e:f6:4c:22:f0:46:1e:b4:12:c0:a9:de:85:cf:a1:
82:7f:6a:b4:09:a6:43:a8:42:52:21:4e:af:c6:c2:14:96:99:
df:a5:a8:16:52:f9:30:78:8c:8d:93:45:68:3d:0e:fb:02:7b:
66:9d:ac:1d:84:2d:b1:cd:ab:b2:55:25:49:88:97:c6:c6:4c:
70:9d:7d:aa:42:a7:09:7b:86:04:cc:4b:3f:5a:c4:b8:83:6f:
02:82:a5:3a:c4:27:20:8b:fb:0f:f7:67:c5:38:3d:98:25:a7:
b2:20:d5:eb:52:67:f2:bb:b2:12:76:a2:67:9b:4a:d2:cd:91:
bb:20:1f:9e:67:38:f0:4e:99:42:61:2f:bd:ce:f6:a9:5d:b9:
8d:71:b5:81:5e:22:0a:fb:43:5e:78:21:66:11:be:94:6a:2f:
37:2f:cb:0f:32:1e:11:41:06:ad:77:47:1b:8f:f1:f9:0c:a3:
2e:ec:1a:74:7d:02:1c:61:f2:f8:d1:29:74:ad:c6:bd:fa:66:
e5:b4:3d:d4:bb:76:6c:09:11:0b:f2:2f:48:83:69:1f:47:0f:
be:6b:6c:92:05:1c:94:f6:6e:92:bf:54:55:d6:3e:e3:67:03:
35:c1:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:33:34 2025 by rpki-client