Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/IGFo6UkTqBaULVJ_L91DZei3bsU.roa
File: IGFo6UkTqBaULVJ_L91DZei3bsU.roa (raw, json)
Hash identifier: fpttCoaHdIkvjRyPeXvZFck3Hc1mHzlvdqgkj0OlrCw=
Subject key identifier: 20:61:68:E9:49:13:A8:16:94:2D:52:7F:2F:DD:43:65:E8:B7:6E:C5
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01857169B52DEDD55A81639A5D13E0A169F6
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/IGFo6UkTqBaULVJ_L91DZei3bsU.roa
Signing time: Mon 02 Jan 2023 07:37:11 +0000
ROA not before: Mon 02 Jan 2023 07:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198218
IP address blocks: 164.40.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b5:2d:ed:d5:5a:81:63:9a:5d:13:e0:a1:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 2 07:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206168e94913a816942d527f2fdd4365e8b76ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:a0:54:5d:4a:31:b6:cd:67:a3:7f:73:15:
4e:2c:5a:66:b1:48:c8:a1:d8:05:68:70:28:30:10:
89:d0:3b:13:b1:37:4c:c3:1b:d6:7d:b8:0e:89:06:
fe:11:bd:c9:23:ed:4e:ab:29:a5:f6:f1:96:7c:9b:
2c:f7:50:0c:a6:ba:1b:56:5f:1e:b5:2a:46:0f:0a:
35:cd:d6:9b:b2:eb:fd:76:b5:f0:04:b4:6e:34:0b:
d5:d2:dd:17:bc:3c:72:3a:69:7d:a1:3d:68:db:99:
ed:c0:6c:37:01:36:59:df:66:45:de:db:82:7d:22:
00:32:72:37:3e:46:75:07:7e:6f:de:d4:91:20:4f:
c7:16:9e:bf:c8:47:41:46:21:23:75:8d:83:56:dc:
5f:38:3e:b8:fb:83:5c:81:32:7d:6b:9f:3d:83:88:
0f:71:af:55:09:2b:d8:6d:67:e0:c4:ec:df:fc:eb:
8d:15:67:17:ec:94:42:91:4e:5b:8f:af:26:81:41:
e1:cb:e8:4c:9f:e6:c6:c1:17:41:47:2a:4b:0e:fe:
a1:64:f8:72:f7:e6:9c:58:0d:d3:9f:f7:c6:b5:ec:
ca:99:ae:8d:39:a8:0d:10:c3:c3:3c:59:20:b5:37:
f0:f5:5e:97:86:c4:27:c4:9d:f6:44:84:76:14:ab:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:68:E9:49:13:A8:16:94:2D:52:7F:2F:DD:43:65:E8:B7:6E:C5
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/IGFo6UkTqBaULVJ_L91DZei3bsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:d1:01:ec:ba:1e:fb:24:d5:bc:7d:10:e4:f4:e8:a0:6a:e7:
33:b4:fd:07:49:93:38:c2:87:fb:e1:ea:2f:c4:c8:1e:f2:f0:
39:b4:7a:eb:f0:f6:92:20:a5:bd:2a:ee:45:4a:11:4a:82:60:
0d:94:9e:fb:29:52:ee:cd:cb:58:aa:1d:6d:a6:f4:db:a4:43:
b4:52:d2:48:e5:5e:24:ff:fd:fa:d2:c2:e1:54:e3:86:22:3d:
cf:3b:14:3d:88:a7:6a:be:8d:0c:11:60:23:f1:56:56:e4:dc:
03:78:4e:cc:d1:03:40:68:c6:8e:c7:10:bd:41:0d:66:e4:da:
1b:4f:ad:43:0b:11:97:31:00:27:86:2f:1f:0b:b1:06:98:7c:
6d:f2:2e:1c:5a:46:31:2b:4f:fd:14:0c:e4:89:e5:53:c0:b4:
29:19:f6:96:97:8d:4b:8a:76:34:fe:ea:74:dd:10:89:0d:e4:
d8:d6:f8:0a:e2:16:d0:b5:4f:0d:aa:7d:7f:bc:ab:d0:ef:60:
47:8f:9e:0f:cb:4e:c3:71:55:e9:44:0d:c3:40:b5:e9:4a:a0:
7c:3a:be:9e:ac:18:16:b9:ee:24:53:e2:b8:84:f0:98:f8:7c:
66:4c:86:72:3b:a0:03:8a:6d:43:27:a6:0b:7c:71:26:b7:06:
40:92:26:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:19 2025 by rpki-client