Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa
File: A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa (raw, json)
Hash identifier: LqION540Zg0mnXlhYgbOPsJtgA4nsXptBIy0jMQ2+yc=
Subject key identifier: 03:D7:68:05:06:11:CE:A9:C0:B1:83:3C:FF:13:97:C9:8F:7F:69:24
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: 019426D93B74D16D81E98D969C3F749C973E
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa
Signing time: Thu 02 Jan 2025 11:49:18 +0000
ROA not before: Thu 02 Jan 2025 11:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 185.111.160.0/24 maxlen: 24
185.111.161.0/24 maxlen: 24
185.111.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3b:74:d1:6d:81:e9:8d:96:9c:3f:74:9c:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Jan 2 11:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d768050611cea9c0b1833cff1397c98f7f6924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:aa:84:ae:4f:31:a0:94:7c:88:9e:a9:5e:
15:db:0a:ad:d5:b8:35:b9:55:59:d5:09:bf:14:5e:
70:42:56:1c:a7:13:41:b4:de:d2:47:48:fe:49:8c:
3c:9a:48:45:bd:9a:be:4d:00:26:68:1a:00:9b:52:
03:b5:73:63:ed:f6:8a:39:86:3f:8b:b4:9e:23:ae:
ff:1f:ac:d7:c8:f9:39:63:21:43:4d:ef:47:34:94:
ed:7d:62:04:19:c9:ca:62:d5:74:fa:24:d5:48:28:
0c:25:43:c1:58:17:17:23:ea:d8:67:4c:78:47:63:
5a:a7:62:59:11:a8:33:fd:de:c4:26:08:c5:8a:01:
df:95:1c:71:e8:44:ff:8d:e3:b1:64:2a:89:a0:00:
3b:4d:35:16:e8:00:cc:f5:3a:f5:ae:2f:de:df:3f:
4d:ec:c3:8f:03:07:3b:cd:57:7e:01:92:c1:18:d2:
47:a0:f0:17:50:90:c1:27:61:a3:e6:b9:b5:38:22:
fd:cd:ab:57:54:4f:7c:3c:c3:a7:87:55:63:fc:25:
da:cd:0e:29:7c:ec:56:2d:81:e6:39:e6:51:b8:46:
c9:07:7d:db:43:aa:9a:2c:33:5a:35:1b:6d:a3:3d:
64:32:fb:91:c8:64:67:41:95:20:d3:e2:d7:51:6a:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:68:05:06:11:CE:A9:C0:B1:83:3C:FF:13:97:C9:8F:7F:69:24
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.160.0-185.111.162.255
Signature Algorithm: sha256WithRSAEncryption
ab:2e:0d:59:cf:71:08:95:75:6a:a1:d2:e9:e0:b7:7a:44:12:
75:6c:bd:f9:77:37:6d:83:29:7c:08:0f:fa:b0:2c:63:c5:04:
61:72:2e:d7:e5:e2:fa:30:0e:4d:52:33:b5:44:3f:63:cc:3a:
ed:f1:3b:69:a5:ff:51:ef:6e:3a:22:e0:90:ad:9a:9f:07:ee:
a5:6c:75:4a:5d:81:59:d3:df:bc:55:4f:e2:74:45:b8:b5:e3:
a1:ab:a1:f9:48:ec:a7:a0:96:36:3e:c7:9f:fe:86:60:9e:83:
25:0b:47:dd:2f:bf:97:bb:e4:6e:51:b5:a8:47:61:a5:2f:db:
1e:b4:5a:a5:a6:2e:f7:33:4f:ce:d3:03:a0:40:be:4d:de:2d:
83:b0:98:7f:fa:0d:c8:57:ef:d5:03:f2:ee:14:e3:9f:8b:e4:
bd:48:4b:df:6e:14:02:3c:15:5a:9f:d9:dd:65:72:8c:b6:c3:
b7:d4:44:cb:f6:e1:34:db:31:c3:1f:95:b2:02:33:86:57:0a:
1e:e3:43:d4:ff:e2:78:51:22:88:d8:ae:33:4d:a6:79:c5:f8:
23:f5:14:54:9f:ab:80:ce:72:cd:fb:62:7f:c4:d0:36:2e:0b:
b7:bf:bb:96:92:89:48:1b:b2:56:89:c4:ab:85:59:8f:5b:52:
ed:aa:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:28:42 2025 by rpki-client