Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/bx8_btKMe43qSHo68HgBXwRlGoI.roa
File: bx8_btKMe43qSHo68HgBXwRlGoI.roa (raw, json)
Hash identifier: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=
Subject key identifier: 6F:1F:3F:6E:D2:8C:7B:8D:EA:48:7A:3A:F0:78:01:5F:04:65:1A:82
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 019427486BC883BBDD8391A87718B01A59AA
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/bx8_btKMe43qSHo68HgBXwRlGoI.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.53.60.0/24 maxlen: 24
185.53.61.0/24 maxlen: 24
185.53.62.0/24 maxlen: 24
185.53.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6b:c8:83:bb:dd:83:91:a8:77:18:b0:1a:59:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1f3f6ed28c7b8dea487a3af078015f04651a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:82:9b:35:78:aa:24:9a:a7:a9:c1:57:72:
6f:c5:e6:23:8b:71:6f:33:95:bb:2c:0a:38:f7:ec:
2b:bf:1f:4a:a9:0f:a7:fb:67:ea:a7:b0:33:b4:c3:
58:76:dc:0e:7d:30:de:47:c1:03:8a:91:f5:47:9a:
cd:10:0c:4f:43:61:2b:54:4d:0b:a5:d2:10:d6:be:
be:3f:ed:c4:ed:e2:a6:0c:a7:0d:23:bf:e6:dc:b8:
de:9c:19:f9:b9:b4:e6:6c:38:27:a6:33:b1:5d:1a:
45:69:a6:ee:70:2c:2e:05:b1:83:92:a8:56:03:c3:
79:2b:87:d7:0b:bf:c2:a6:67:bc:bd:5f:00:ea:f3:
4b:ce:8c:3e:60:9f:db:30:01:96:33:c3:b3:13:93:
0f:4e:4a:31:af:29:d4:c5:e2:70:00:ad:11:60:a9:
0e:3a:e1:ee:1c:e3:3f:7d:c5:01:3b:4a:fe:c4:a6:
cb:0a:78:cf:bd:0d:2f:08:3d:9e:69:fb:1b:ad:a3:
53:b7:e4:76:9c:07:a4:2e:1b:68:21:fb:02:5a:28:
5e:6c:5e:60:e2:f1:84:ad:86:65:8f:45:2e:7a:4b:
7d:7c:df:05:61:21:6f:ec:52:d9:91:c0:b6:f7:7b:
65:4b:c0:73:d5:5d:64:57:98:87:68:73:ec:0c:06:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:3F:6E:D2:8C:7B:8D:EA:48:7A:3A:F0:78:01:5F:04:65:1A:82
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/bx8_btKMe43qSHo68HgBXwRlGoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.60.0/22
Signature Algorithm: sha256WithRSAEncryption
52:b2:91:1a:92:f1:90:2a:48:04:5a:2b:e4:89:68:28:c0:a6:
29:f3:bc:43:c9:c3:12:d5:7a:ec:0b:8e:00:dc:c4:72:12:05:
6c:18:45:68:fb:96:57:85:d3:8f:8d:3b:2c:de:01:e3:39:df:
a5:17:d0:23:b2:42:e6:71:b3:fd:33:f2:d3:71:5a:18:f1:60:
07:33:da:0e:19:4a:d2:07:a0:7f:eb:2b:4e:35:25:6e:55:c8:
5d:f0:69:4d:5e:bb:b0:46:dc:0d:b6:f9:5d:af:0d:91:41:ae:
8a:97:21:40:78:73:fe:3f:08:6e:cc:3a:b9:d1:5a:fc:dd:f7:
4f:4d:6d:92:0b:89:6b:3c:1d:c1:0d:1b:c4:c2:4f:f5:76:0e:
57:42:db:c0:df:d3:4f:25:ab:7c:45:54:1b:0f:d9:58:1d:10:
e3:22:fe:b8:f0:a3:d3:e5:bb:2e:29:b7:35:02:7c:08:44:51:
44:50:b9:e4:94:20:c8:d3:60:d8:8b:fd:bd:85:3c:99:8c:de:
22:05:cc:27:78:1b:da:7c:cb:70:e5:bd:0b:14:cb:16:26:7f:
d6:3e:b9:2c:04:c3:c5:d3:2a:3f:03:d3:e9:88:82:8e:2b:89:
da:8a:69:80:30:cd:c2:ec:10:67:55:3f:a3:f6:6c:41:03:78:
3b:d2:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:45:23 2025 by rpki-client