Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/M7SEgufvftwnRCkx-25asjtCovc.roa
File: M7SEgufvftwnRCkx-25asjtCovc.roa (raw, json)
Hash identifier: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=
Subject key identifier: 33:B4:84:82:E7:EF:7E:DC:27:44:29:31:FB:6E:5A:B2:3B:42:A2:F7
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 019425FC1E7001D3AB41C9B9D12AC14840AB
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/M7SEgufvftwnRCkx-25asjtCovc.roa
Signing time: Thu 02 Jan 2025 07:47:47 +0000
ROA not before: Thu 02 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 158.162.32.0/19 maxlen: 19
158.162.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1e:70:01:d3:ab:41:c9:b9:d1:2a:c1:48:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 2 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b48482e7ef7edc27442931fb6e5ab23b42a2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:96:6d:df:49:fc:27:8e:f9:d7:fd:ee:9f:
d7:5a:5a:9c:76:1f:20:2d:51:2f:43:f7:75:77:ac:
c2:44:45:a1:d9:b3:38:b0:45:be:8b:3f:0b:62:05:
7c:f2:53:f6:78:d9:26:1c:17:ff:22:a9:0f:d5:dc:
e2:ee:35:42:ed:7a:cf:43:1d:36:d8:14:b7:28:92:
1b:3f:72:ba:04:3f:70:57:ae:99:42:7b:00:68:5b:
4e:25:8e:16:3a:20:5b:16:b5:d9:d7:fe:1f:31:ec:
e6:20:60:27:fd:bf:c5:0c:2a:9d:8c:44:17:79:19:
4f:81:ca:16:e3:19:c6:c7:e4:30:a2:6c:6a:59:e3:
de:00:4f:ce:7d:4a:ee:ea:07:e0:29:78:5d:f6:14:
95:45:8d:fc:7d:4d:cf:c6:df:2e:a1:0e:ea:0a:06:
41:27:35:97:e2:b4:17:59:2b:eb:0f:75:81:80:75:
8e:4e:64:02:e3:4e:15:b1:4c:d7:9f:e1:ed:0e:51:
d5:b1:e5:cf:29:41:ba:1f:80:fc:af:75:94:74:9e:
54:8c:b7:d0:2f:b2:92:a5:50:aa:5d:a0:55:67:cb:
65:72:b2:88:48:4b:9b:04:1e:b4:3f:61:99:60:b3:
86:12:b6:c9:43:91:8e:0f:0f:f4:c6:e7:17:61:fa:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:84:82:E7:EF:7E:DC:27:44:29:31:FB:6E:5A:B2:3B:42:A2:F7
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/M7SEgufvftwnRCkx-25asjtCovc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.162.32.0/19
158.162.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:9a:fd:cc:9a:c5:f8:57:56:5d:10:80:fa:ea:0f:09:3d:89:
6f:78:3f:68:cd:97:f9:8a:06:69:6e:e8:d0:7f:29:68:a5:a5:
3f:12:17:d0:f3:9a:5e:38:62:04:5a:48:92:cb:19:c7:c9:1e:
5c:b4:28:72:e9:36:7d:7d:f0:ac:f0:b6:e1:bd:1e:32:8e:19:
77:f5:3c:32:f9:8f:69:cd:15:b9:6c:18:ed:31:68:8a:bc:4a:
97:ed:be:0e:24:6f:85:ce:1b:f9:ed:a3:a8:0c:f0:3c:58:de:
2b:8a:f9:e6:c6:db:fc:25:1d:23:c7:eb:61:d2:39:be:80:8e:
c1:15:43:54:83:a6:7d:bf:db:66:a6:d2:e8:58:11:71:43:71:
5b:0f:41:d5:e7:b9:50:65:2c:fb:e8:14:df:0a:47:0a:0a:f5:
55:16:2f:3e:4e:2c:c9:73:ed:56:82:9d:16:f1:ed:23:1d:35:
1e:66:01:eb:4a:bd:40:98:3c:3b:6f:20:58:ed:69:b5:d7:5f:
13:36:4c:55:ca:77:ac:e0:93:a8:98:1c:78:5b:70:8c:65:6b:
03:19:a1:13:aa:55:16:7b:4e:d7:58:71:e9:55:36:c8:88:cd:
49:0f:15:2c:59:44:8b:82:1d:b5:95:55:8c:eb:5f:98:df:bb:
01:db:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:43 2025 by rpki-client