Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a_7v9vQxbRzwvXEr-EgvdUs7xbA.roa
File: a_7v9vQxbRzwvXEr-EgvdUs7xbA.roa (raw, json)
Hash identifier: f0MbZWcvyFEtgHSt+9++3QNJEQqejqZNY4rpBzE8C/M=
Subject key identifier: 6B:FE:EF:F6:F4:31:6D:1C:F0:BD:71:2B:F8:48:2F:75:4B:3B:C5:B0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C545C898A15CFAF1370BF755F856B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a_7v9vQxbRzwvXEr-EgvdUs7xbA.roa
Signing time: Thu 02 Jan 2025 09:50:21 +0000
ROA not before: Thu 02 Jan 2025 09:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8568
IP address blocks: 195.166.160.0/19 maxlen: 19
195.166.160.0/20 maxlen: 20
195.166.160.0/24 maxlen: 24
195.166.163.0/24 maxlen: 24
195.166.176.0/21 maxlen: 24
195.166.176.0/24 maxlen: 24
195.166.184.0/22 maxlen: 24
195.166.188.0/24 maxlen: 24
195.166.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:54:5c:89:8a:15:cf:af:13:70:bf:75:5f:85:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bfeeff6f4316d1cf0bd712bf8482f754b3bc5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:fc:13:f9:3a:09:e8:74:e4:00:cd:54:73:
5e:4e:45:63:6c:de:be:a6:62:cc:4f:e1:73:dc:7d:
8f:af:a5:82:d9:0a:b1:17:33:c8:62:20:49:40:ea:
51:b5:90:8c:d3:61:68:8d:80:98:b7:6a:64:0b:17:
03:04:0f:81:8b:73:61:09:29:37:19:2a:8b:9c:5a:
e0:45:47:a1:9c:38:80:0f:94:65:10:5f:2a:ab:4d:
fe:fd:94:29:27:62:cd:59:95:eb:bf:94:3b:fc:5c:
35:75:26:68:ff:e6:e3:39:e3:58:00:f3:b4:b6:98:
cf:a0:ba:a9:4e:cf:54:6c:87:f4:48:72:dd:4d:96:
79:19:b1:cd:4c:4e:a5:4a:92:b3:e6:3a:d9:25:68:
47:2e:62:2e:76:1c:de:e6:bd:80:7c:fd:b0:0b:b3:
60:d0:81:ee:bc:63:df:38:de:41:f9:8e:74:a5:d2:
d7:33:f9:8b:2f:b3:1e:d2:88:9c:fc:83:76:d3:b5:
a7:97:11:f3:7e:54:46:96:dd:17:0e:84:ba:34:60:
1a:5e:43:15:ed:40:34:e8:70:7a:e3:89:a5:2f:bb:
a9:ce:49:5c:10:3a:35:25:7d:8a:85:b9:08:df:2e:
7b:1d:2b:95:a9:88:84:7d:62:19:fd:8b:28:14:db:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:EF:F6:F4:31:6D:1C:F0:BD:71:2B:F8:48:2F:75:4B:3B:C5:B0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a_7v9vQxbRzwvXEr-EgvdUs7xbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.166.160.0/19
Signature Algorithm: sha256WithRSAEncryption
36:3c:a4:1a:4e:49:d0:66:41:be:cf:3d:48:aa:a0:db:96:95:
af:7a:19:31:44:95:e0:8f:f6:b3:94:75:36:30:86:2a:0a:f0:
4e:09:1f:14:95:1c:0c:d3:01:15:91:62:8c:cd:71:1b:d9:b2:
30:ac:c5:49:4d:d5:ac:f7:86:b5:79:79:3a:e9:37:09:b9:47:
b2:12:18:ca:f4:aa:10:f1:96:ea:4f:c8:7f:39:fd:d8:c0:b2:
74:66:8f:f1:7a:db:22:48:89:ae:73:9e:8a:55:a8:a8:1a:dd:
0a:69:59:5a:a4:14:ba:b8:e0:8e:3a:d8:50:66:41:c5:cc:9f:
53:cb:a3:0e:4e:71:7a:69:ea:0b:47:c5:ff:4f:3e:c4:d7:38:
b9:be:ab:35:67:df:81:8d:71:23:fa:d7:d0:46:85:37:51:e7:
d5:cb:ee:e0:b8:18:d5:c1:6a:fb:25:e6:4e:45:fc:2f:53:d0:
ac:15:e1:57:57:e4:82:bb:41:32:ea:31:20:7b:3e:e1:6e:b4:
86:0d:e1:0e:ef:25:f9:5a:5f:fb:f4:84:0f:f9:84:bb:bd:1d:
19:5f:c0:2c:5c:4d:f6:92:17:b6:be:22:34:ed:9e:0d:fa:e5:
66:74:f4:63:c4:8d:05:f5:7c:2d:8a:52:86:ac:ed:12:fe:c4:
6c:5a:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net