Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/NQ6WQfdEUG2sRmMr7zvZL8Ybaok.roa
File: NQ6WQfdEUG2sRmMr7zvZL8Ybaok.roa (raw, json)
Hash identifier: wIHvq6RFUY65s6SxVIEWugEGJgKKozNJcLAW/5GBtM4=
Subject key identifier: 35:0E:96:41:F7:44:50:6D:AC:46:63:2B:EF:3B:D9:2F:C6:1B:6A:89
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 01954282CCCBF496B78036CBBFE5444C5A7E
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/NQ6WQfdEUG2sRmMr7zvZL8Ybaok.roa
Signing time: Wed 26 Feb 2025 13:47:02 +0000
ROA not before: Wed 26 Feb 2025 13:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28773
IP address blocks: 188.190.160.0/19 maxlen: 19
195.78.38.0/23 maxlen: 23
2001:67c:2ee4::/48 maxlen: 48
2001:3840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:82:cc:cb:f4:96:b7:80:36:cb:bf:e5:44:4c:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: Feb 26 13:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=350e9641f744506dac46632bef3bd92fc61b6a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:01:a4:cd:65:d6:62:ad:4f:8d:7b:29:af:
fe:c6:b5:eb:83:5c:5d:1e:92:4e:f0:8c:b9:a5:97:
9b:06:96:0c:58:b1:86:df:ad:28:ba:81:a8:d1:9f:
65:a2:9f:4b:7c:4d:c0:d1:0d:2c:c7:76:fb:2b:e4:
89:43:55:90:03:c2:43:67:1a:a9:35:d5:87:9f:04:
f9:94:af:c8:ed:eb:2b:94:53:1b:09:3a:11:77:0d:
20:3e:f1:4c:88:6f:69:62:00:70:fa:30:6b:dd:2c:
0c:a6:fa:f1:f6:18:83:12:6e:61:c8:97:64:83:60:
f4:38:0b:8c:b8:5a:2c:e7:ba:52:6d:a2:6a:79:54:
95:2b:09:b0:ee:cf:12:76:84:bf:7b:b4:71:a3:4f:
f1:62:fb:5f:3c:f0:97:04:72:04:25:05:90:59:f8:
7a:a8:6b:da:8d:74:ce:3b:09:82:b0:ec:03:6f:f3:
dd:b4:69:b6:35:1e:89:e8:66:9d:c4:2d:b6:d9:59:
0a:a9:be:05:53:17:6d:6d:b5:02:ce:40:20:a0:7f:
ad:c2:17:a1:d5:fe:3b:e0:e0:82:b1:9d:a8:11:1f:
d3:e4:d0:d1:5e:45:6c:99:de:32:7a:3c:25:ea:f7:
a7:3f:0c:8e:f4:22:88:1d:7b:4a:0f:ed:98:06:03:
f9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:96:41:F7:44:50:6D:AC:46:63:2B:EF:3B:D9:2F:C6:1B:6A:89
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/NQ6WQfdEUG2sRmMr7zvZL8Ybaok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.160.0/19
195.78.38.0/23
IPv6:
2001:67c:2ee4::/48
2001:3840::/29
Signature Algorithm: sha256WithRSAEncryption
40:3f:b3:52:1b:b2:6b:d2:9b:d4:a8:3a:80:22:c7:1e:3f:a0:
18:ea:f1:01:29:a0:b3:6f:98:fe:16:2d:21:39:6a:44:02:f1:
a4:bf:d2:b3:d3:da:b3:68:25:64:7d:d8:a9:5c:64:b2:f3:0e:
db:4c:4d:af:80:78:42:16:21:d2:45:1f:20:c9:1a:87:ee:e9:
e2:6f:5a:41:5b:8a:a1:4e:be:e2:21:c4:60:d1:0e:8d:9d:d9:
e3:eb:e8:b2:db:53:90:53:a2:91:f1:25:9e:7d:1c:d4:41:88:
c5:58:d2:b0:11:f5:5b:aa:54:a5:28:44:e3:9d:93:2b:3c:5b:
b0:a3:73:d6:26:a5:6e:84:4e:33:b3:2e:a7:79:a1:a4:48:ab:
d4:05:1b:fb:3e:ba:dc:12:57:42:15:7e:c7:c6:d5:5a:9b:0b:
22:aa:b2:b7:28:be:f9:b7:39:06:d5:47:4c:f2:fd:84:51:68:
d8:77:f8:39:48:cd:45:30:c6:9e:ff:29:58:f7:92:0c:17:d9:
dd:a5:c8:a3:79:c6:8c:37:d8:c8:0a:5b:bb:1e:18:29:00:a5:
0c:e9:25:d2:4d:1c:81:ea:53:8a:01:26:37:e4:0d:7c:c1:22:
07:25:dd:cf:51:ce:48:b4:5b:4d:0d:8e:83:16:29:b0:0a:cb:
c6:d4:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:49 2025 by rpki-client on console.sobornost.net