Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ADshSqMjm-zfTQmDm8pCddz0jFw.roa
File: ADshSqMjm-zfTQmDm8pCddz0jFw.roa (raw, json)
Hash identifier: wDADRqTsoZd/X0Q7nQBOOsXYLJPr5lEfNyYVwT6w7hU=
Subject key identifier: 00:3B:21:4A:A3:23:9B:EC:DF:4D:09:83:9B:CA:42:75:DC:F4:8C:5C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9D2E649AE77F42ABE44B63EC3D9F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ADshSqMjm-zfTQmDm8pCddz0jFw.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60062
IP address blocks: 37.230.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:2e:64:9a:e7:7f:42:ab:e4:4b:63:ec:3d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003b214aa3239becdf4d09839bca4275dcf48c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d5:fe:8f:9a:86:60:52:02:68:0c:59:64:78:
7b:bb:bf:02:c4:3b:e2:1a:1b:72:3a:c7:73:29:f2:
de:95:ad:c5:81:ec:84:83:f6:c7:99:8c:da:d5:94:
96:93:89:4a:a1:42:69:b6:38:e2:9c:1d:cd:c8:3f:
5e:cf:bb:46:91:a9:7e:d7:ad:10:ba:92:0c:0b:55:
c8:4c:66:2b:f5:dc:9e:5b:13:c1:eb:5f:87:81:67:
98:74:93:b8:7c:08:31:d6:94:23:6f:a4:de:b8:56:
35:ac:0a:20:aa:4c:4e:96:2a:45:d5:c5:34:23:0c:
07:fa:e2:f4:fe:00:9b:ea:a8:7d:73:2a:bc:ac:ca:
82:45:3b:7c:de:65:07:5a:da:6d:56:9d:d0:b9:04:
06:a5:7c:1a:16:ac:44:cf:ac:9a:92:90:61:33:1c:
45:54:67:50:c4:a4:43:2f:fd:e4:27:f1:04:95:e8:
f2:b8:19:bd:0d:c4:29:16:3b:7d:50:db:07:b6:77:
93:9d:24:82:fc:ad:63:d9:f2:cb:d6:7f:21:6b:36:
ba:80:04:20:c2:75:0b:50:87:c1:57:f2:b0:70:03:
8b:a5:36:e0:bd:a8:fc:4d:3e:40:b2:85:ae:cb:3e:
2a:cc:4d:66:8b:4f:9c:58:c7:a5:5c:02:56:a5:3e:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:21:4A:A3:23:9B:EC:DF:4D:09:83:9B:CA:42:75:DC:F4:8C:5C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ADshSqMjm-zfTQmDm8pCddz0jFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6c:5c:ff:27:65:c3:f1:de:f8:be:9b:83:9d:1c:6d:41:aa:
d3:03:fa:2f:b7:a0:ab:38:20:73:14:0d:46:5b:4d:98:b0:37:
41:06:1a:96:70:95:58:19:98:57:fd:a8:09:f5:ab:c9:ee:64:
a7:6a:c8:b9:24:c9:9a:7c:b2:1d:e4:3a:66:79:92:56:28:3b:
6b:6d:16:07:c0:00:60:7e:67:73:63:1b:69:24:1a:dc:18:94:
d8:fc:d2:bb:31:ef:c0:4c:c2:80:9a:65:72:c8:4a:b4:37:74:
64:50:d6:ac:42:3e:17:52:49:22:d3:f6:4c:67:bc:c1:18:0b:
d8:ad:f6:08:76:71:63:b4:df:d4:99:d3:1a:4d:9c:c7:2a:ad:
d2:97:b7:1a:8a:8f:fa:1e:bc:dd:2c:bc:50:33:02:41:fe:61:
c3:bd:f3:0f:eb:51:52:81:b3:b5:75:e3:70:1f:1b:d7:66:40:
78:54:b7:68:55:98:c0:51:fa:a7:02:55:00:d4:d6:44:80:40:
2e:e1:2d:e5:77:88:86:6f:21:8a:fb:90:f1:f2:39:d1:55:37:
46:3e:a9:b2:fe:b5:98:b8:55:47:39:cc:84:18:e7:67:e1:ca:
1c:8c:b5:d1:cc:40:8d:84:a1:65:53:86:64:93:ef:01:52:6a:
20:1a:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:38:30 2025 by rpki-client