Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/KA1BIpSdeEEtbCrFgfK-VPyRx30.roa
File: KA1BIpSdeEEtbCrFgfK-VPyRx30.roa (raw, json)
Hash identifier: dK1iHDNoeuHHdZKZb/lOPSZmDPfysii98Ivia9Loag0=
Subject key identifier: 28:0D:41:22:94:9D:78:41:2D:6C:2A:C5:81:F2:BE:54:FC:91:C7:7D
Certificate issuer: /CN=6a437c01731d107ca2ceed8213a273fddd4c64a5
Certificate serial: 03F7873E
Authority key identifier: 6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akN8AXMdEHyizu2CE6Jz_d1MZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/KA1BIpSdeEEtbCrFgfK-VPyRx30.roa
Signing time: Sat 01 Jan 2022 10:59:01 +0000
ROA not before: Sat 01 Jan 2022 10:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.61.44.0/24 maxlen: 24
185.61.46.0/24 maxlen: 24
185.61.47.0/24 maxlen: 24
185.61.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66553662 (0x3f7873e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a437c01731d107ca2ceed8213a273fddd4c64a5
Validity
Not Before: Jan 1 10:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=280d4122949d78412d6c2ac581f2be54fc91c77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:39:dd:01:ca:1e:e6:e9:fc:da:33:81:6d:
b4:36:df:16:3c:ff:cb:96:6f:fb:ff:fa:a9:32:38:
07:e7:73:ee:aa:7d:f2:17:e7:fc:09:4a:19:d6:e1:
4f:25:6b:e3:f9:72:bb:b8:dc:b5:75:1d:48:28:0c:
54:b6:05:f7:e7:5d:81:5e:d7:e1:a0:10:ae:29:6e:
86:54:8e:ae:3b:58:51:90:e4:70:6c:a5:01:39:85:
ef:bc:71:90:c0:c4:e7:a8:46:d6:7d:10:62:23:ea:
d1:f0:6a:4b:a7:19:20:a2:14:7b:77:5d:2b:71:1d:
eb:3b:0f:78:67:fd:5c:db:b0:d5:57:37:46:64:75:
62:e4:6d:ab:9d:4d:e8:6f:9a:d6:01:b0:95:06:ad:
73:33:9e:0c:1b:c5:4e:12:ed:5e:ce:3c:37:ab:e7:
09:d6:c8:11:9e:3c:b5:4d:4f:3b:95:d5:9b:50:08:
26:d5:65:a7:9a:0d:87:68:d3:5b:4e:77:f1:67:51:
cb:7e:cb:65:6d:85:1d:4c:cd:db:c0:09:88:a3:01:
1d:b7:40:45:50:d4:02:2c:ed:3e:f7:1f:08:ab:48:
f7:f5:14:fc:29:9f:8a:14:f5:a1:f5:00:5e:8a:23:
08:75:64:d4:56:29:44:b2:67:82:a3:c3:c0:e6:28:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:41:22:94:9D:78:41:2D:6C:2A:C5:81:F2:BE:54:FC:91:C7:7D
X509v3 Authority Key Identifier:
keyid:6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akN8AXMdEHyizu2CE6Jz_d1MZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/KA1BIpSdeEEtbCrFgfK-VPyRx30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/akN8AXMdEHyizu2CE6Jz_d1MZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8e:8f:f4:7b:73:75:5b:4c:07:db:50:7e:6d:a4:39:07:f0:
28:03:60:ff:65:ef:29:66:3a:0b:e6:d3:9a:ab:a3:24:d0:4c:
f6:88:a3:17:a4:ad:3c:03:0e:22:2b:27:1a:e8:b1:78:b8:2c:
9f:4c:1f:38:91:8f:eb:45:d6:ee:49:bb:3f:4e:c9:77:bd:49:
a0:4c:77:ac:b0:a3:58:5d:4f:bc:46:ff:ab:bc:dc:a8:74:d9:
9f:13:f8:7e:f2:77:1b:26:be:a8:f8:a8:d7:15:ff:13:21:8b:
8e:45:81:b1:27:7c:61:ce:83:59:8d:dd:a2:1c:66:89:b3:83:
ba:68:67:7c:8d:a3:be:d7:dd:8e:11:ff:12:6c:26:c0:11:00:
a1:c4:88:56:6b:61:d2:fc:7b:8e:00:cd:64:b2:c5:78:cb:77:
f9:65:42:d5:ce:b7:0d:16:71:b2:f5:1e:67:59:06:82:25:9e:
09:f5:0e:55:41:46:c4:9e:16:50:3d:db:8e:eb:be:e5:56:a7:
e7:33:6e:d2:1f:2f:06:96:52:da:5e:ac:94:3f:be:5c:f0:52:
89:5d:72:b4:45:b5:9b:c0:fe:8d:b1:ed:68:5e:ec:93:27:3a:
99:40:fc:c8:d7:cd:a3:37:56:4b:65:a7:87:8c:cc:26:f2:a7:
97:15:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:31:37 2025 by rpki-client