Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/fMRO20mkPGzZhVwnqiFwCSGCy6E.roa
File: fMRO20mkPGzZhVwnqiFwCSGCy6E.roa (raw, json)
Hash identifier: o0E41s4na7BbzA6uFDcAwqrtapuhxtCglz0OM8UMoac=
Subject key identifier: 7C:C4:4E:DB:49:A4:3C:6C:D9:85:5C:27:AA:21:70:09:21:82:CB:A1
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 01856BDC889005966A9F451F68D4805DA845
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/fMRO20mkPGzZhVwnqiFwCSGCy6E.roa
Signing time: Sun 01 Jan 2023 05:44:53 +0000
ROA not before: Sun 01 Jan 2023 05:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201895
IP address blocks: 185.60.160.0/24 maxlen: 24
185.60.163.0/24 maxlen: 24
185.60.161.0/24 maxlen: 24
2a02:73a0:90::/48 maxlen: 48
2a02:73a0:70::/48 maxlen: 48
2a02:73a0:60::/48 maxlen: 48
2a02:73a0:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:88:90:05:96:6a:9f:45:1f:68:d4:80:5d:a8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Jan 1 05:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc44edb49a43c6cd9855c27aa2170092182cba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:ba:ec:25:dd:fb:c2:a2:87:7c:88:2f:04:
a8:43:94:40:56:cb:ae:b1:72:29:a3:f1:79:9a:a8:
bc:a6:e7:f9:10:be:40:68:54:65:03:35:42:e6:8c:
c7:92:3d:74:c5:be:90:43:0a:79:4f:4d:13:1a:cd:
85:e0:72:f8:ef:e5:f9:e1:17:2b:fa:c0:0e:75:0f:
20:fc:49:25:fe:46:30:6e:a4:da:c3:cf:c7:d9:ea:
db:63:10:66:47:5f:84:46:13:bd:14:ef:11:ab:54:
a2:2d:84:c2:37:fe:a4:f3:bf:3c:47:82:f2:af:41:
35:69:05:c9:77:34:9b:b4:6c:cf:1f:84:d1:1d:7a:
85:48:3c:d2:71:90:03:f3:99:c7:88:70:ac:9c:38:
ac:fc:85:7e:47:3c:34:c2:81:b0:d6:30:90:7e:7a:
cf:51:5f:70:85:64:7e:67:dd:b9:f0:d2:fe:c1:4c:
a8:30:94:e7:42:69:48:f2:86:04:75:f0:52:1e:6d:
82:90:90:d2:10:bc:1b:ed:08:c5:d4:ef:6d:21:7f:
ce:96:6c:5f:f3:7e:9c:63:83:ac:8e:c4:5a:7c:da:
1b:dc:11:2e:d6:cf:a2:ef:82:f1:de:7d:0e:a7:86:
3f:53:ed:09:bf:c8:46:97:28:c6:b3:50:a1:42:99:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:4E:DB:49:A4:3C:6C:D9:85:5C:27:AA:21:70:09:21:82:CB:A1
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/fMRO20mkPGzZhVwnqiFwCSGCy6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.160.0/23
185.60.163.0/24
IPv6:
2a02:73a0:50::/48
2a02:73a0:60::/48
2a02:73a0:70::/48
2a02:73a0:90::/48
Signature Algorithm: sha256WithRSAEncryption
10:d7:d2:1a:7f:21:fd:b6:37:88:76:76:d7:d4:66:d2:c1:b8:
4d:c9:96:aa:c3:06:7a:0f:9e:c4:f5:fc:eb:2f:96:73:80:3d:
1f:f4:12:8f:13:c5:4b:31:1b:11:e2:42:99:6e:63:ca:1e:59:
a6:7d:8e:8f:10:6a:75:28:e9:af:fe:f3:f1:5a:64:d7:01:ec:
f6:19:bf:85:c9:91:09:1f:b5:66:48:c5:23:51:1c:67:ec:21:
37:3d:87:b7:6c:4f:98:77:e1:8b:5d:20:08:3e:78:30:f1:0b:
b6:b5:fd:d7:28:f6:02:74:e3:00:dd:07:e8:35:ff:9b:75:b9:
92:a7:3e:8e:6a:1c:1a:52:25:81:4b:3a:3f:5c:c1:c5:84:4c:
71:91:1f:bb:e9:8e:3f:7d:92:d2:d0:7b:fa:68:b7:12:4c:b7:
2f:bd:b1:46:37:c6:48:fb:31:7a:ae:89:9a:7f:26:18:fa:4a:
4b:5b:6d:9e:dd:33:20:bc:b6:06:58:42:31:1d:63:a5:43:d8:
fe:d6:9c:4a:a8:1e:f1:6a:53:00:14:d7:14:0c:d5:6d:f0:e3:
4b:16:05:00:d1:f6:cd:cf:28:af:99:e0:78:87:0b:eb:1f:d1:
29:f4:3a:db:9c:ba:8f:46:c5:05:1d:10:ea:c8:3f:55:f2:6d:
51:57:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:37 2025 by rpki-client