Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/4VXLHyEV7AZWdYKCc9ym1r5AIT8.roa
File: 4VXLHyEV7AZWdYKCc9ym1r5AIT8.roa (raw, json)
Hash identifier: v07yiXNQL94Tr2GOt+3mCnvGqcrZa7dItTzCUJul3kk=
Subject key identifier: E1:55:CB:1F:21:15:EC:06:56:75:82:82:73:DC:A6:D6:BE:40:21:3F
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 018DB1261EB7D328BB01D208F5EDBB1FECE2
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/4VXLHyEV7AZWdYKCc9ym1r5AIT8.roa
Signing time: Fri 16 Feb 2024 09:01:21 +0000
ROA not before: Fri 16 Feb 2024 09:01:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43220
IP address blocks: 185.60.160.0/24 maxlen: 24
185.60.161.0/24 maxlen: 24
185.60.162.0/24 maxlen: 24
185.60.163.0/24 maxlen: 24
185.161.124.0/22 maxlen: 22
185.211.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:26:1e:b7:d3:28:bb:01:d2:08:f5:ed:bb:1f:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Feb 16 09:01:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e155cb1f2115ec065675828273dca6d6be40213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:b0:19:ac:ac:9b:66:e3:11:57:7f:b5:08:
67:86:60:be:a4:7b:ea:58:8e:a9:8b:a4:98:2a:37:
ff:d3:98:d2:12:4e:ea:aa:e8:1f:2a:67:8d:cd:35:
e2:f4:37:ed:7e:93:08:fc:c6:72:26:43:a0:1b:58:
e6:70:e2:93:2a:84:cc:93:30:b1:1f:72:8d:c6:b8:
e2:c9:57:0d:87:40:bd:5c:d1:a3:e9:2d:d9:0a:c6:
ea:a9:02:d9:ad:e3:0f:8d:23:ce:da:c1:c6:9e:1f:
c2:ec:53:3a:8b:4c:f1:fd:11:af:ed:09:9f:18:c0:
8c:44:9d:08:27:11:33:45:ad:c6:72:46:aa:34:bc:
24:7b:ee:9c:65:82:86:b8:d9:b4:4f:b6:5c:6b:4f:
f7:c1:f8:77:98:fb:98:62:1a:bd:a8:04:96:bd:cb:
f7:99:46:2d:e2:8b:3d:e4:08:b5:6c:e1:4c:ab:12:
ad:68:4b:66:37:a0:d2:c4:33:ed:de:42:9b:41:d9:
56:23:96:d9:c0:6d:4b:45:0d:ec:20:59:b7:32:f4:
da:10:99:3e:19:8c:73:64:39:fc:33:ac:c1:57:32:
d7:49:e8:89:ea:bb:a7:67:5b:48:9f:07:bb:88:af:
e1:98:08:15:7d:d1:97:56:6a:ac:22:c6:c2:f9:ee:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:CB:1F:21:15:EC:06:56:75:82:82:73:DC:A6:D6:BE:40:21:3F
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/4VXLHyEV7AZWdYKCc9ym1r5AIT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.160.0/22
185.161.124.0/22
185.211.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:59:12:d2:05:f3:53:12:8f:b6:4c:38:67:7b:4e:50:0f:cc:
2a:cc:03:f5:89:bb:ba:0b:d7:63:6a:83:b4:51:a7:d7:8a:7b:
33:34:dc:e3:1f:54:05:6e:40:6f:e2:80:81:d3:60:1c:84:7c:
6c:e5:a5:29:79:55:53:6f:6b:ef:6d:c4:88:85:51:43:c6:c9:
ea:99:aa:d4:05:8c:10:d9:0d:2d:0a:94:9b:26:a8:c1:be:64:
be:75:23:91:71:95:b8:eb:cb:fd:99:ee:7d:21:fd:45:23:30:
02:ae:dc:21:af:72:d0:db:c0:39:f6:48:2a:af:22:8a:81:cd:
5c:d6:94:15:1a:87:c6:a5:82:0f:6e:ec:2e:21:2d:cc:5b:e3:
71:4e:9e:d8:57:ba:81:7f:ee:5d:9b:05:8b:fd:d3:81:a1:3a:
43:ef:0d:df:40:fd:3a:e6:65:5d:66:b5:ea:16:70:08:a6:30:
61:1d:63:92:dd:7b:ba:9e:b9:59:bd:e3:87:6a:2e:36:00:5e:
10:55:91:f0:67:35:36:05:b8:80:b5:09:f1:c9:86:c1:6c:f5:
80:a3:0c:fb:7f:c5:d4:88:d0:3c:b9:9b:ed:be:d5:cf:93:c3:
67:f3:6c:7c:2f:26:63:4f:a1:12:81:26:17:b2:38:4b:ec:e2:
b9:1d:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:22:40 2025 by rpki-client