Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/smR56PkXYVe9TX2HDTFHOdEfzmA.roa
File: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (raw, json)
Hash identifier: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=
Subject key identifier: B2:64:79:E8:F9:17:61:57:BD:4D:7D:87:0D:31:47:39:D1:1F:CE:60
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01942747B0422C7ACF4F255837494A787850
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/smR56PkXYVe9TX2HDTFHOdEfzmA.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59898
IP address blocks: 185.167.4.0/24 maxlen: 24
185.167.5.0/24 maxlen: 24
185.167.6.0/24 maxlen: 24
185.167.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b0:42:2c:7a:cf:4f:25:58:37:49:4a:78:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b26479e8f9176157bd4d7d870d314739d11fce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:6d:92:90:81:c2:31:ca:81:9d:64:ca:b6:
98:fb:e2:f6:ce:01:50:a4:80:7b:13:7b:b2:e7:36:
f6:f8:a0:e1:81:d9:38:62:94:8b:05:03:22:40:09:
a8:3e:30:21:ee:fe:c3:00:f2:90:1c:0b:4c:42:fd:
1f:73:f4:8b:fe:4c:60:2c:56:64:00:9b:cb:47:a9:
45:25:3f:0c:d0:5e:b8:7d:13:c2:f6:3f:1f:9b:1c:
60:ee:69:43:31:b6:e0:49:40:32:b1:36:0f:e8:33:
ab:38:c4:41:f5:82:06:ae:55:3d:a7:7f:73:aa:cb:
4e:50:42:b7:b4:e5:35:03:a3:c3:60:73:b7:e2:9e:
77:9a:91:51:05:01:9b:3a:13:53:ae:c7:53:85:c1:
45:f1:12:af:a7:c4:d2:80:81:0e:f1:fd:32:22:b1:
49:23:d5:32:52:dc:0e:7e:1e:8f:b7:8a:4f:d0:bb:
5c:1d:af:92:57:1f:cd:4d:be:af:7a:a2:45:02:0d:
2d:72:46:fa:7f:6b:4c:8d:e8:c4:23:30:0d:c4:56:
ad:59:f9:f5:1e:11:da:c1:c4:59:2c:c0:ec:7e:12:
4a:52:21:be:ab:2e:3b:57:9f:2a:ff:c8:5f:ae:0a:
73:98:ae:60:41:ac:33:4d:fd:4a:fa:9b:b7:18:a6:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:79:E8:F9:17:61:57:BD:4D:7D:87:0D:31:47:39:D1:1F:CE:60
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/smR56PkXYVe9TX2HDTFHOdEfzmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.4.0/22
Signature Algorithm: sha256WithRSAEncryption
14:85:96:0f:2b:c7:d2:f7:c9:eb:a4:ad:6c:c7:cd:4c:f7:e2:
c5:cc:e8:79:5e:87:56:75:58:af:ea:08:37:64:c3:d3:50:6c:
20:00:ed:63:ca:d3:5b:9b:57:90:19:fd:44:4b:7d:36:99:18:
16:6e:c9:d4:a7:f4:a2:7d:48:41:3c:a6:29:5c:09:77:64:89:
ae:c9:45:af:41:e9:e9:f6:3c:ac:1d:70:2c:5e:45:0d:45:e7:
f9:af:31:74:86:43:44:58:1b:17:1b:b5:7b:f7:56:94:45:8b:
b3:e2:d8:b3:25:f2:7e:6b:1d:d2:8e:89:da:46:17:29:fb:04:
fa:ed:02:70:14:fd:59:46:a4:8b:bc:ff:36:52:15:5e:e0:10:
e1:de:b6:17:19:8b:76:69:bd:45:cf:bc:8c:ed:58:e7:03:22:
2c:96:d0:7e:49:c2:4e:4a:5e:9d:46:0a:ad:13:16:6f:3a:35:
36:13:27:77:58:1f:67:19:81:ea:e3:f1:40:32:fc:18:9d:43:
c7:25:80:40:69:44:71:65:48:97:22:7b:2b:9f:27:bc:3f:fc:
3a:fe:19:99:ea:69:f9:e7:50:74:e8:98:10:c3:f2:bd:b6:8e:
ad:94:ac:99:cc:5b:43:74:8e:0b:a5:da:3c:8b:49:3e:fb:e3:
db:7f:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:49 2025 by rpki-client