Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/_WY9oVFOYqmtmX68AGnfgT7sREE.roa
File: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (raw, json)
Hash identifier: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=
Subject key identifier: FD:66:3D:A1:51:4E:62:A9:AD:99:7E:BC:00:69:DF:81:3E:EC:44:41
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01941F8C8E8328A3C43DB65F4C893B230E6C
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/_WY9oVFOYqmtmX68AGnfgT7sREE.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49225
IP address blocks: 195.160.172.0/23 maxlen: 24
195.160.172.0/24 maxlen: 24
195.160.173.0/24 maxlen: 24
2001:678:560::/48 maxlen: 48
2001:678:760::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8e:83:28:a3:c4:3d:b6:5f:4c:89:3b:23:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd663da1514e62a9ad997ebc0069df813eec4441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:d4:25:ce:a2:2f:dc:83:ad:0d:1b:9a:8a:
59:57:2f:39:7a:35:80:5e:d0:ff:db:40:12:79:c2:
72:76:05:24:be:3e:9c:7b:bd:20:77:fc:f5:a3:b7:
3b:88:85:52:ed:5c:e8:83:95:23:7c:d9:74:b3:13:
e4:52:f0:46:44:ad:99:65:69:b8:1f:80:10:b8:b9:
48:21:d8:a3:b5:a2:d4:cd:3c:b7:03:da:6e:81:77:
22:62:6c:aa:59:88:f4:5b:2a:98:6c:e4:3d:ca:85:
c5:ed:fa:69:20:e2:93:64:aa:85:43:b3:e1:eb:6f:
04:20:bb:fe:93:94:08:1b:64:29:6e:ee:21:88:fa:
98:2a:06:90:14:53:ff:dc:88:7f:ed:59:44:9e:97:
b9:98:bf:04:63:8f:1e:23:a9:75:7a:21:d8:fd:2f:
39:e9:9d:92:2e:93:c5:d6:ea:18:05:ed:8b:d7:46:
44:9e:64:60:8c:68:cf:67:48:fe:52:2c:4f:06:dc:
b1:b2:a7:4b:da:94:63:e8:cf:86:4e:f6:95:7d:85:
01:7e:1e:f7:f7:4d:10:54:c6:4d:6d:9a:b7:91:5b:
82:f4:d0:04:ae:8d:5f:a1:84:6d:74:67:a1:e3:43:
72:6f:79:04:8e:9b:eb:17:4a:68:3b:ed:b4:b1:f1:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:3D:A1:51:4E:62:A9:AD:99:7E:BC:00:69:DF:81:3E:EC:44:41
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/_WY9oVFOYqmtmX68AGnfgT7sREE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.172.0/23
IPv6:
2001:678:560::/48
2001:678:760::/48
Signature Algorithm: sha256WithRSAEncryption
4d:7b:6f:34:4e:2f:2e:75:e6:ab:8d:1e:ce:15:3a:e2:e0:fa:
bd:e3:bb:bf:43:5c:60:7c:f3:2e:e7:4a:53:d7:22:dc:e9:23:
08:f1:80:39:6f:2f:48:b9:74:b3:dc:96:c6:82:07:52:da:b0:
16:6c:ae:42:d1:98:d3:64:5f:e1:e0:ca:2f:0a:04:2c:86:63:
fc:96:c4:4e:4a:88:ce:7e:8a:f6:67:6e:d6:59:85:0d:3a:3c:
50:4f:6d:c2:25:2b:fc:2a:63:b4:70:11:8c:15:aa:73:91:7d:
64:18:c2:f7:ea:af:fa:30:1f:3b:08:49:55:36:49:2a:d7:d8:
43:ef:58:6a:56:bd:68:c1:74:80:1b:25:8d:57:80:4c:ca:db:
43:5b:c2:e8:22:d8:a6:3e:79:f7:6e:14:24:86:84:32:58:a0:
52:55:ef:0f:4d:07:ba:cd:39:70:e5:0a:f4:4f:22:ec:83:c3:
cd:22:25:74:41:d3:4b:5d:84:d6:f3:3b:94:8f:74:f3:78:3e:
d3:d4:54:70:21:21:01:ee:ff:7f:79:08:67:c3:63:eb:61:90:
19:6b:f4:61:82:ca:c0:5c:57:17:96:63:0b:8b:dc:a9:e9:c2:
24:44:66:aa:c4:2e:4e:65:06:8b:d0:70:f1:24:08:29:5b:88:
a1:08:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:22 2025 by rpki-client