Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/_wX8QpS-lOA2c6_SS9CLDo_sNek.roa
File: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (raw, json)
Hash identifier: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=
Subject key identifier: FF:05:FC:42:94:BE:94:E0:36:73:AF:D2:4B:D0:8B:0E:8F:EC:35:E9
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019426D95FA46E740B3E883451AD3DF94412
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/_wX8QpS-lOA2c6_SS9CLDo_sNek.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39337
IP address blocks: 194.126.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:a4:6e:74:0b:3e:88:34:51:ad:3d:f9:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff05fc4294be94e03673afd24bd08b0e8fec35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:77:6e:26:44:04:fa:48:18:14:8f:27:53:
04:9f:87:a5:57:63:90:46:ab:92:d9:c2:4d:89:5d:
2b:0e:69:45:14:0f:7f:17:ab:13:10:f1:e0:ca:73:
d6:95:68:6a:ce:de:f6:87:2b:e0:03:d7:48:29:df:
5c:61:92:b8:75:a4:b3:e8:09:fe:82:39:75:7e:f8:
c2:d2:87:86:32:3c:bf:49:cc:45:64:e4:bd:30:d7:
0c:4f:83:47:62:8c:a2:9e:99:ce:ab:a9:7b:e3:15:
3c:f4:72:6b:98:ac:fc:1e:6a:c7:2b:16:05:b5:73:
b5:36:cc:8f:f4:ea:a3:1a:7f:1d:65:e1:50:15:58:
c7:ce:7b:32:c8:a6:cc:7f:89:f2:1e:8f:f2:8c:57:
8a:8c:45:c9:6a:5d:7f:97:a6:d6:3f:f6:a3:29:4a:
93:e1:f1:56:be:84:a1:d3:70:36:2a:6c:eb:57:86:
95:50:6d:70:9c:f5:9c:60:91:5f:33:b6:b5:55:8b:
e9:25:2f:26:fe:db:d4:4a:64:5f:06:6f:35:31:b4:
a5:f6:68:4c:50:25:db:e8:58:72:d5:20:9b:4b:f5:
55:fa:80:d0:6e:ee:89:90:5e:38:44:82:9e:0c:bb:
fd:bc:93:2a:79:ef:ec:5c:d2:87:37:37:41:c8:c9:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:FC:42:94:BE:94:E0:36:73:AF:D2:4B:D0:8B:0E:8F:EC:35:E9
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/_wX8QpS-lOA2c6_SS9CLDo_sNek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:fa:9a:ac:46:68:8f:e4:33:13:54:67:b7:61:e2:ef:21:93:
a9:e5:45:74:cc:58:b8:5f:fc:4a:ce:bf:af:f7:05:da:4a:d5:
e8:06:cf:22:f3:66:23:62:91:e2:a2:62:cc:96:9e:00:be:71:
25:c3:6a:86:24:82:e0:b2:a3:f3:e6:0c:52:9d:7a:b2:2f:3a:
2d:39:fb:54:af:e5:d5:17:c0:0c:db:26:72:ae:ef:c3:77:fd:
db:e1:30:a3:5a:31:0c:20:20:d8:48:40:8a:e8:20:82:27:27:
87:93:ca:b8:c7:04:08:f6:38:3d:90:4c:59:1a:e3:aa:8a:ba:
b2:2c:ce:dd:78:f6:6f:55:8d:75:01:53:c3:8b:4e:89:15:89:
5e:b9:14:ae:84:d6:03:f1:d3:e0:86:f0:33:45:2c:7d:51:b7:
e0:85:4f:2c:7e:0b:19:f0:15:08:d9:00:ab:f9:8e:37:1f:b4:
a5:f5:ef:48:70:ac:8b:57:28:56:39:42:19:01:0e:18:c4:e0:
be:4e:d8:6d:0b:dd:d9:58:ad:b6:4d:59:ab:de:87:49:1b:4e:
17:8d:da:3d:2a:6b:dc:d1:1c:7b:5c:7f:76:1c:31:53:f6:f6:
a2:e3:63:04:78:70:5d:30:e6:ed:6b:ed:11:5b:0d:69:8a:b8:
0f:8f:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net