Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa
File: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (raw, json)
Hash identifier: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=
Subject key identifier: DC:F5:98:18:5E:CF:B3:19:CF:5F:18:F9:40:B9:70:17:37:51:85:B7
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01941FFA8B148654FB4ECACB2E337DEE6804
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49835
IP address blocks: 167.160.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8b:14:86:54:fb:4e:ca:cb:2e:33:7d:ee:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcf598185ecfb319cf5f18f940b97017375185b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:83:48:04:1b:87:84:cb:a2:ef:56:cb:66:
65:48:42:f7:b6:f2:a7:ef:21:e6:92:64:37:53:db:
58:b0:38:03:a7:62:5a:2d:d4:88:96:d4:0a:ed:59:
71:62:ba:23:03:fc:53:e2:0d:2a:aa:a8:8e:d1:a6:
fc:88:b1:5a:15:4b:f1:9b:e0:c6:63:97:29:b3:3d:
af:83:0a:ca:df:a0:34:39:97:35:48:29:45:57:d3:
56:9b:9d:c2:25:4a:8d:03:85:5b:8d:2f:f4:60:ad:
8b:e5:d0:8c:54:fb:38:3f:75:70:80:9b:b7:97:dc:
cc:8a:dd:8e:03:e9:fc:f6:77:2b:87:01:fc:5a:b8:
ec:17:91:7e:23:65:e8:0d:03:0e:89:91:bc:d6:71:
35:33:59:f2:55:cb:22:86:e2:90:09:42:35:d5:91:
f8:88:d6:76:9e:9e:49:63:56:77:31:1b:08:12:4a:
9d:45:9f:da:c6:bc:d8:1a:86:59:24:3c:51:d9:4a:
14:1f:61:88:63:01:c4:7c:eb:a9:41:0e:a2:d1:40:
d2:a0:46:e5:b0:37:91:51:fc:5d:b9:43:49:15:09:
6b:6e:1b:01:d7:7c:ca:24:8a:b0:0a:7d:db:61:1f:
31:c9:94:2e:32:8a:96:40:ec:be:bf:ec:70:8f:c7:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:98:18:5E:CF:B3:19:CF:5F:18:F9:40:B9:70:17:37:51:85:B7
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:bd:c4:8e:10:a5:e7:19:5b:4c:3b:ad:af:9d:0d:91:0c:
47:d9:e5:55:32:fd:01:5b:48:43:fd:17:60:2c:62:31:71:bf:
a7:34:b1:f0:29:b4:8e:81:63:c6:d9:43:0d:40:f1:9b:f2:b3:
51:d6:43:40:db:26:c9:14:ea:cc:9e:fb:dc:ab:27:f3:28:34:
38:85:e4:6f:41:e9:73:4c:fa:1d:e8:e1:51:12:68:ff:fe:40:
e1:00:68:9a:24:8d:ed:0e:c7:13:f1:03:50:3b:83:d3:27:cd:
9c:4a:d1:61:be:95:bc:70:7a:cc:2d:05:2c:d7:84:23:76:60:
bf:77:80:71:82:4b:ee:11:fb:73:8c:66:7e:0a:b8:b6:26:aa:
f1:5e:7a:ee:ca:5f:33:bc:14:7c:50:60:05:b7:bb:22:ad:c8:
df:ad:97:e9:b4:ca:52:86:99:ca:9f:8f:00:70:2d:5f:83:f3:
94:3f:4f:20:48:61:0e:94:27:6c:f9:a0:61:58:40:d5:03:98:
bb:6d:fa:4e:7a:73:91:8a:4b:70:23:f1:7f:6d:57:04:82:00:
f8:88:45:c0:b5:5e:ba:13:2c:98:a0:f9:2a:fd:44:76:90:ed:
3d:c5:fc:f0:3d:de:94:98:15:3f:5b:27:bd:84:8d:f6:82:fc:
32:56:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:50:55 2025 by rpki-client