Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WRYIWfEJmnISAeoQf8InaALQ8WQ.roa
File: WRYIWfEJmnISAeoQf8InaALQ8WQ.roa (raw, json)
Hash identifier: GT4O5WPoLH3Yp8xdLM9NUeex5ZVPN4gSEhcA0/GMdHw=
Subject key identifier: 59:16:08:59:F1:09:9A:72:12:01:EA:10:7F:C2:27:68:02:D0:F1:64
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CE35242CDA856D791641C25F7AD111AFC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WRYIWfEJmnISAeoQf8InaALQ8WQ.roa
Signing time: Sun 07 Jan 2024 09:47:48 +0000
ROA not before: Sun 07 Jan 2024 09:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 176.221.16.0/22 maxlen: 24
37.128.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:52:42:cd:a8:56:d7:91:64:1c:25:f7:ad:11:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 7 09:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59160859f1099a721201ea107fc2276802d0f164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:d7:75:38:57:17:b0:b6:f1:7e:1a:d3:9b:
0a:3f:32:29:e3:7a:28:52:21:75:a5:d8:ea:9c:ee:
1f:b6:1e:1c:6e:fd:e0:c4:9e:5f:89:15:d1:d0:73:
fc:22:e2:9d:d3:5a:b8:1b:9e:0e:53:b8:43:13:ce:
9c:dd:40:55:d7:bc:83:de:ef:5f:c7:a0:c0:66:f1:
49:05:6f:f8:83:9f:fb:10:ae:5b:cc:2c:ff:db:9f:
ba:da:e1:7a:8c:9e:30:63:f5:ec:03:bd:b0:aa:23:
34:56:b7:2e:5b:e0:57:d6:8d:c1:14:0c:fb:31:5c:
d4:92:f5:3e:e4:fb:bb:60:80:ce:a2:6c:a6:23:f4:
73:ad:e7:26:6a:8a:01:e1:ec:9c:4c:8d:29:66:e7:
b7:b0:36:f8:b5:7c:7e:c3:06:82:ea:cc:eb:9c:88:
dd:8a:f4:78:44:60:f3:ee:a2:de:1a:45:9b:07:92:
d9:09:1d:eb:13:d0:1c:fb:a9:f3:63:91:3d:88:9c:
12:6b:c5:63:9c:cd:08:98:87:21:52:af:97:b9:32:
8a:63:c0:44:97:70:66:51:37:af:2a:00:c8:b3:99:
38:29:ae:b7:4c:b1:0a:22:74:3b:2c:12:b8:0b:19:
a1:50:67:ee:d2:71:d0:b6:79:73:d4:ca:54:b3:5f:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:16:08:59:F1:09:9A:72:12:01:EA:10:7F:C2:27:68:02:D0:F1:64
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WRYIWfEJmnISAeoQf8InaALQ8WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
49:11:49:f9:4c:d2:e6:f7:db:5a:66:d5:62:9e:f6:6f:66:67:
4d:db:d5:8e:94:44:51:2a:c0:45:27:bc:b6:9d:56:35:c6:ea:
ce:82:47:b2:fe:91:77:88:72:44:33:76:23:74:6b:ca:99:d2:
72:6a:5d:63:e9:15:16:fb:ae:ba:3d:5a:4d:c8:37:70:fd:1b:
f2:78:b6:8b:d0:fb:f9:77:0a:94:f0:dd:7a:57:bc:60:9a:f5:
eb:36:e8:42:59:b1:70:58:aa:39:a5:7a:f5:9d:a0:d7:ab:4b:
0b:8b:4d:8a:d6:bf:27:6d:01:6e:ed:65:f5:38:80:c1:e7:33:
6e:e4:eb:a8:a1:08:df:72:f8:47:a9:ce:b9:24:55:d9:5c:fd:
b5:f1:7f:be:70:37:d9:d7:18:11:79:30:2a:c6:28:0b:a5:f2:
aa:28:53:bc:9b:9a:f6:17:a5:41:6e:c6:53:00:75:36:6b:eb:
4c:6e:a5:d0:eb:63:70:2b:3f:38:5e:59:97:80:86:31:14:6d:
fe:4f:7b:9d:a5:7f:aa:7c:7d:9a:95:c3:17:d1:60:96:38:51:
58:ee:bc:8d:d4:8a:d8:84:b6:5b:be:7f:23:7b:b1:21:60:8b:
30:0b:54:60:be:4f:f0:e1:6a:d3:2d:07:08:78:90:13:2e:d2:
1f:3f:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:24 2025 by rpki-client