Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa
File: TT20dthfWtCW7E0dmXCFdRT1Cxc.roa (raw, json)
Hash identifier: zOnB8aXXinLCwQsJi4vmn7S0pOrwAqoz09nsamXCbdc=
Subject key identifier: 4D:3D:B4:76:D8:5F:5A:D0:96:EC:4D:1D:99:70:85:75:14:F5:0B:17
Certificate issuer: /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial: 01856C01015536F0ABADA3042744D22BD2BA
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa
Signing time: Sun 01 Jan 2023 06:24:43 +0000
ROA not before: Sun 01 Jan 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 185.160.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:01:55:36:f0:ab:ad:a3:04:27:44:d2:2b:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Validity
Not Before: Jan 1 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3db476d85f5ad096ec4d1d9970857514f50b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:f0:f3:fa:8f:43:bd:f3:58:a4:4f:89:b3:
dc:57:67:b1:b8:30:b6:9c:98:63:14:02:d8:32:9e:
b8:4a:bb:a4:2f:c3:b4:7e:84:57:61:dc:cd:58:0e:
75:b1:ed:1d:f5:3b:d2:23:e4:92:77:e7:4a:c8:8b:
60:38:06:0d:14:ab:d5:e5:d0:bc:4e:de:9f:52:41:
a7:84:e1:4f:91:45:2b:fd:46:2d:82:a8:ac:30:ed:
4e:c1:27:55:39:46:cb:d8:eb:61:eb:19:aa:9d:cb:
cc:39:3a:bd:bb:4f:dd:dc:31:5c:5e:33:9c:70:bf:
46:03:07:04:7e:08:f0:80:2e:c8:bf:d0:15:6b:75:
da:49:6e:ea:a8:e0:1d:cf:1c:94:3a:cb:50:5b:16:
34:9c:7d:4a:bf:6b:52:c1:43:2f:bb:68:f9:77:8b:
b9:f2:58:c8:3b:11:4b:8a:b6:fa:fd:11:12:25:70:
9c:b4:83:f3:42:45:6c:23:5f:31:c0:8a:6a:e4:94:
7b:80:78:5d:21:90:ab:75:0d:20:57:62:49:78:d1:
13:cb:b2:7b:22:40:7e:68:b9:3f:37:df:20:02:38:
9c:c6:56:d1:d5:77:a6:fa:42:7d:23:db:8b:bf:71:
d2:71:a2:88:40:91:15:d8:24:c5:ec:8b:0d:14:76:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:B4:76:D8:5F:5A:D0:96:EC:4D:1D:99:70:85:75:14:F5:0B:17
X509v3 Authority Key Identifier:
keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.28.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2b:46:40:2a:49:9c:d4:42:93:a1:8c:cd:16:6d:3a:88:eb:
82:b7:1b:72:e9:84:7f:22:32:50:3d:3c:3e:e9:55:bb:09:99:
c6:24:77:a1:e3:36:af:e8:f6:03:6c:bb:83:23:e1:05:f2:7d:
09:7d:4b:27:d8:00:b3:3d:51:82:73:76:44:d1:96:21:7a:05:
f6:49:76:3e:4d:c1:45:3c:3c:eb:5a:b5:8d:1a:33:e8:e9:14:
da:f4:5b:6d:e9:c8:12:54:7b:55:71:f0:74:41:14:3d:8c:a9:
a3:23:dc:4c:fc:97:76:9f:fc:da:b2:fa:19:48:ad:47:60:01:
33:a4:98:cd:2b:d6:39:de:07:65:c6:49:14:e5:90:ef:27:ba:
62:a9:38:47:86:20:26:bc:59:cb:c5:b9:7b:e5:50:41:09:b7:
e7:10:64:3a:0c:a5:b2:6d:06:fc:36:9c:db:94:9d:ca:90:fd:
92:f1:7f:80:e9:d0:55:4f:81:a9:d5:e4:a2:09:4c:46:f1:6a:
85:3e:bb:13:42:da:ab:37:e9:74:97:c2:c8:2a:42:41:d4:0f:
9b:76:94:0e:2c:fd:30:22:42:55:19:08:ad:8b:ca:26:72:12:
66:6d:ce:76:1f:67:03:1c:63:8e:c3:1a:d9:17:76:91:22:ce:
80:40:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:10:42 2025 by rpki-client