Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/A60RBGadDjKdPHVlJg0uqTD974Q.roa
File: A60RBGadDjKdPHVlJg0uqTD974Q.roa (raw, json)
Hash identifier: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=
Subject key identifier: 03:AD:11:04:66:9D:0E:32:9D:3C:75:65:26:0D:2E:A9:30:FD:EF:84
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 01942521924A5D6755C881726652461047F4
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/A60RBGadDjKdPHVlJg0uqTD974Q.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205721
IP address blocks: 185.208.80.0/22 maxlen: 24
193.142.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:4a:5d:67:55:c8:81:72:66:52:46:10:47:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ad1104669d0e329d3c7565260d2ea930fdef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:4c:a5:24:02:e5:8b:1a:4c:33:a3:dd:a0:
c9:37:e2:b7:51:1d:c9:58:bc:3c:fc:fa:a2:1f:d1:
1c:5d:ce:4c:95:89:ae:4d:3c:04:df:d7:1e:95:dd:
88:73:ba:81:45:ca:25:dc:f9:c3:4d:65:86:7d:03:
62:ad:cf:97:ea:4e:0a:a5:51:bc:e5:cf:51:66:93:
a3:d9:23:ae:06:d6:6d:81:df:af:aa:16:3d:b7:ba:
76:0b:e4:2c:17:2b:83:fd:51:63:6c:26:71:85:be:
43:79:98:9f:28:41:47:49:56:8a:b0:d3:f6:1c:24:
da:6c:60:9b:6a:a1:27:36:2e:04:6c:1a:c4:f6:8f:
60:f2:b9:2b:b5:25:7a:48:93:79:29:63:c0:71:b8:
85:db:3b:d9:bd:af:a8:b8:b4:71:0b:e5:46:b9:0f:
52:ea:d9:83:0b:d4:d1:3b:94:6b:95:cd:a0:35:f7:
c6:ff:ee:d5:a0:b3:57:66:04:f0:d1:db:71:ca:3a:
a6:1c:9a:4a:bd:f2:f0:06:46:b3:71:63:98:0b:5a:
1a:72:80:c2:6d:74:c7:76:6b:f5:48:ee:4a:a7:4c:
fd:28:ef:65:f0:62:86:68:e7:81:38:ed:ae:46:a5:
37:14:3c:f1:5e:9c:0c:46:c2:dd:c9:54:cb:18:ff:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:11:04:66:9D:0E:32:9D:3C:75:65:26:0D:2E:A9:30:FD:EF:84
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/A60RBGadDjKdPHVlJg0uqTD974Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.80.0/22
193.142.211.0/24
Signature Algorithm: sha256WithRSAEncryption
90:29:c4:d1:fb:c8:d6:82:cc:a7:51:2b:87:1d:6d:04:af:fa:
74:b1:b9:25:9a:83:5a:40:ab:25:a7:38:b8:a9:b4:a4:cc:ad:
85:e7:20:6d:de:4d:2b:df:2d:48:23:5c:8d:6b:47:a4:76:77:
dd:50:37:44:1c:38:ed:70:16:79:7d:5f:f9:df:60:20:6a:9a:
62:9e:7a:be:8d:f0:51:a5:5b:ad:38:47:5b:8b:c5:20:7b:f8:
39:a9:97:b0:95:c9:d8:26:c2:ab:db:d4:f0:6f:0b:58:ac:72:
12:95:ff:40:af:25:d7:68:ad:e6:a7:ac:7f:01:d2:66:ce:d9:
a7:5a:3a:d6:14:d7:4d:86:de:10:14:b0:34:de:c8:e2:0c:fe:
66:e5:be:f5:5e:07:4c:7c:ad:cb:3e:fc:4b:86:30:c5:86:aa:
c8:b8:44:46:fa:b2:31:b3:ae:29:60:83:ff:1e:da:7f:01:9b:
a5:0c:11:23:31:77:2d:38:05:c1:07:c3:dc:bd:1e:c6:78:95:
4b:87:af:01:38:8b:fd:96:13:fe:7d:03:95:63:bf:c1:a8:3e:
71:23:1f:3c:67:7d:c2:12:37:bd:9f:38:6d:9b:eb:3d:9e:f1:
ff:8a:d4:f2:4f:70:f4:70:f4:fc:71:c9:74:92:2a:7e:59:ee:
71:2c:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:40 2025 by rpki-client