Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/aPFNqKZrV_epMPFvc-8vIsgJFgg.roa
File: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (raw, json)
Hash identifier: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=
Subject key identifier: 68:F1:4D:A8:A6:6B:57:F7:A9:30:F1:6F:73:EF:2F:22:C8:09:16:08
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 019421B1E6D789A7F71C14196CB769B5FF77
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/aPFNqKZrV_epMPFvc-8vIsgJFgg.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206936
IP address blocks: 185.160.240.0/22 maxlen: 22
185.160.240.0/23 maxlen: 23
185.160.243.0/24 maxlen: 24
2a0a:8500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:d7:89:a7:f7:1c:14:19:6c:b7:69:b5:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f14da8a66b57f7a930f16f73ef2f22c8091608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:e0:ea:75:18:41:a5:85:b0:1e:39:8e:f1:
8a:90:be:54:3e:0a:ba:a1:1f:c0:fa:f5:f1:45:87:
20:b6:1f:8e:93:ac:bb:60:cd:2a:d8:6a:73:2d:00:
4e:7e:24:b0:7e:39:c5:28:1e:44:73:6a:73:57:0e:
83:5f:9b:29:38:0f:b7:7b:3b:a3:eb:f8:60:5d:c9:
d8:83:60:bb:3c:00:d1:ee:f2:54:bf:45:99:50:d5:
bc:b2:53:f4:a9:81:df:ca:06:c7:45:29:0e:be:94:
88:9c:88:90:4a:90:91:04:41:1f:70:89:88:92:f8:
fa:c8:ba:32:85:bb:08:34:95:cb:45:b2:a0:f8:46:
c5:8d:1e:2e:6c:2d:db:59:7a:16:ed:d0:df:94:4b:
8b:d3:df:07:b2:a6:b9:de:61:44:11:b5:93:f3:80:
cc:25:40:ff:77:7d:d6:5a:09:4e:90:2a:f1:c7:bd:
d4:27:74:2b:05:b0:4b:1b:e7:e2:42:6e:82:6d:55:
1e:9b:b6:69:52:ca:0a:04:4e:77:25:2a:89:bc:25:
ff:bc:2c:d6:fa:20:fc:8d:36:f5:83:db:9e:12:ee:
9a:bc:cd:73:83:e7:b5:d3:7b:d3:fb:e3:9f:46:c7:
b8:08:0c:47:48:b9:f3:e7:11:a5:83:0a:09:aa:a8:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:4D:A8:A6:6B:57:F7:A9:30:F1:6F:73:EF:2F:22:C8:09:16:08
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/aPFNqKZrV_epMPFvc-8vIsgJFgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.240.0/22
IPv6:
2a0a:8500::/29
Signature Algorithm: sha256WithRSAEncryption
75:8e:81:d0:ec:03:5b:f6:db:e8:55:71:7a:5f:c8:b6:1a:91:
ae:fb:37:27:e6:87:88:2e:4a:3a:62:3c:ef:d4:b3:df:6d:49:
e2:9c:f2:87:15:4b:fc:1f:b4:8d:de:5e:82:b5:17:94:b0:68:
31:ed:35:6b:23:42:42:fe:9c:77:98:a4:79:21:2d:cf:f2:15:
14:f6:09:25:7a:e5:27:34:50:ef:05:44:34:9e:d0:3e:0d:6d:
c9:29:09:41:e9:28:b4:4d:89:b4:da:61:1a:0e:e3:9d:80:71:
36:f1:d9:5f:ab:3c:8e:68:04:7f:b6:f9:5c:67:69:e9:67:80:
b0:d0:f7:60:21:42:83:2f:6b:d2:f6:ea:f6:f3:e4:19:80:03:
1c:43:6d:25:93:fa:fb:46:54:71:17:e8:47:cf:ac:d2:ed:6b:
6f:3d:a3:97:08:03:14:0a:55:c5:5a:9f:73:f0:3d:09:b3:36:
bf:31:6e:f1:93:a7:37:b6:2d:b0:a7:93:df:ff:60:63:9d:99:
7f:4f:0f:41:11:69:01:d3:cb:b5:98:d5:9b:96:01:86:dd:58:
cf:be:06:c0:35:ec:e1:90:20:8d:5c:cb:98:3b:b7:2d:e6:43:
e6:c6:21:e5:52:dc:76:35:80:cf:97:f8:9b:89:6e:23:8e:89:
d4:2f:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:44 2025 by rpki-client