Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa
File: YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa (raw, json)
Hash identifier: PDEXeDLtvF2svWu3SCyyV71qYzP5SqM0o8kxhwdjSR4=
Subject key identifier: 60:7B:2B:E9:FF:2C:F2:E5:9F:9B:71:F6:02:4A:8E:FB:A8:13:2A:50
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 0195C81DC888A9DF9AC8F9E95D7225101F3C
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa
Signing time: Mon 24 Mar 2025 12:25:49 +0000
ROA not before: Mon 24 Mar 2025 12:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40999
IP address blocks: 178.16.48.0/21 maxlen: 21
178.16.48.0/22 maxlen: 22
178.16.52.0/22 maxlen: 22
2a04:2100::/32 maxlen: 32
2a04:2101::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:1d:c8:88:a9:df:9a:c8:f9:e9:5d:72:25:10:1f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Mar 24 12:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=607b2be9ff2cf2e59f9b71f6024a8efba8132a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:55:53:fb:8f:14:4f:81:21:f3:20:6d:4e:
7d:da:6a:26:ac:0c:8b:0f:6a:e5:dd:57:c3:ab:6c:
a9:89:bb:e0:ab:97:39:db:af:e2:5d:3e:f2:8d:8b:
a5:07:81:74:27:00:1e:f5:20:9a:d8:2f:db:f9:24:
af:c5:bd:48:81:9b:f2:3d:1e:91:2b:08:eb:a4:86:
bf:8c:03:c2:dd:90:ac:1f:19:2e:e1:b8:88:09:8f:
6c:84:e0:b6:7b:af:47:a7:3e:0c:1b:84:bf:1a:78:
24:2d:e7:3a:93:97:96:db:51:5d:c6:4e:0c:90:38:
18:02:08:a6:b5:4f:89:61:6c:db:d1:83:b9:fd:4e:
ee:4c:c0:77:52:60:c9:28:74:c8:e2:1b:c3:d4:8f:
bf:a8:f4:bf:42:cf:d6:7c:e7:ae:ae:fe:6c:94:4d:
78:7b:5e:3a:7a:20:af:29:00:cf:f5:09:fe:69:70:
46:a9:f3:f1:8c:59:f7:bb:4f:ed:00:65:72:25:13:
ac:77:29:c9:a8:91:b1:93:9e:af:d6:f6:a7:66:d4:
61:bc:f5:0b:3c:51:66:e3:fd:8b:ea:6b:a4:75:50:
4a:6d:2b:50:d8:64:2f:4e:5f:00:8c:4d:2c:f4:e7:
a0:1b:fc:b2:9d:c5:81:27:e4:d6:d4:3f:89:65:5d:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:2B:E9:FF:2C:F2:E5:9F:9B:71:F6:02:4A:8E:FB:A8:13:2A:50
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.48.0/21
IPv6:
2a04:2100::/31
Signature Algorithm: sha256WithRSAEncryption
b6:b3:c8:68:cb:f3:7a:50:47:f1:80:1c:fb:77:26:7c:89:a8:
0e:98:f4:18:bc:78:7b:32:32:e9:aa:e1:11:01:3a:79:28:73:
d4:69:70:49:f1:28:73:49:3e:6b:9d:4f:ce:3f:02:03:50:b7:
81:2d:45:01:ba:9a:04:ea:ff:02:ca:aa:87:6a:39:1f:61:2d:
50:1a:c3:8d:8b:22:25:8a:8d:4a:41:4a:f3:88:d9:08:08:10:
8e:26:25:36:c7:cc:d9:7f:a0:93:16:4e:4d:43:ec:53:d4:1b:
ae:e9:59:6c:32:36:6f:c7:c6:d3:1d:5b:96:43:90:54:62:f0:
43:4e:6b:15:bb:33:dd:c0:dd:91:2c:f6:a3:61:a9:89:03:b8:
10:2e:94:bd:1f:14:63:d5:85:ec:01:16:7d:c4:41:d8:e8:2e:
2e:bd:ea:0f:0d:da:1b:f9:d3:e0:a8:e4:90:3c:4a:2f:4e:97:
a4:08:cd:0c:77:87:3f:96:1b:f9:2d:47:53:46:c8:c9:d5:85:
a3:6f:2e:02:c9:47:47:b9:c2:ac:3e:38:40:ff:58:a7:f6:9e:
dc:73:bf:e5:0c:e8:2e:3a:d3:ab:ee:d6:d2:b7:75:ab:ee:b0:
5a:93:9e:f0:eb:07:be:23:ec:47:55:0a:e6:ce:bd:8a:23:03:
d8:1c:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net