Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/n19PNekuUxk2MsanZv6k9gKadQg.roa
File: n19PNekuUxk2MsanZv6k9gKadQg.roa (raw, json)
Hash identifier: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=
Subject key identifier: 9F:5F:4F:35:E9:2E:53:19:36:32:C6:A7:66:FE:A4:F6:02:9A:75:08
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 019420682A33978BD3086AC7632342AECE1C
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/n19PNekuUxk2MsanZv6k9gKadQg.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21293
IP address blocks: 160.67.0.0/16 maxlen: 16
160.68.0.0/16 maxlen: 16
185.97.188.0/22 maxlen: 24
2a00:f980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2a:33:97:8b:d3:08:6a:c7:63:23:42:ae:ce:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5f4f35e92e53193632c6a766fea4f6029a7508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:18:3a:e2:8f:55:80:93:d2:11:04:cc:72:
26:b2:62:5b:73:ea:8c:65:2a:81:2a:89:e0:24:92:
47:87:6e:fb:4b:51:3e:b6:28:9f:ab:28:46:2c:84:
92:32:31:23:68:3a:9d:c0:17:7d:71:b0:64:f9:03:
5b:ba:94:de:4b:e0:6b:ca:01:52:ad:8a:d1:7b:0e:
0e:d6:d1:21:4a:db:a3:b4:01:c2:ab:13:1a:79:fc:
42:61:d7:f1:c7:d5:10:44:ae:d6:b0:8f:99:98:d0:
56:b9:55:20:b5:e6:f8:1a:26:30:ba:a6:ce:54:5c:
6f:58:3e:29:1d:2b:37:c0:e6:5b:b3:19:a3:34:55:
fc:89:71:05:60:c2:4a:42:57:c1:46:06:39:c8:e4:
e4:ba:06:73:69:e9:bf:5c:b2:5e:fe:c5:5b:f9:14:
b5:2f:2a:a2:a2:75:d9:40:2b:2d:24:0f:17:d5:d1:
d3:d1:46:76:fe:17:9c:df:0b:df:be:1b:4f:a2:5c:
55:ae:5f:25:6a:b0:d1:bb:d8:91:1c:1f:db:01:44:
5f:0c:1e:bf:e5:6b:7b:91:ab:60:a8:19:3b:f7:88:
f9:a4:8e:18:f5:d4:5a:5a:3a:c5:43:03:77:3a:93:
c0:94:05:f6:a0:1a:c8:89:ef:40:1c:36:d2:8d:fc:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:4F:35:E9:2E:53:19:36:32:C6:A7:66:FE:A4:F6:02:9A:75:08
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/n19PNekuUxk2MsanZv6k9gKadQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.67.0.0-160.68.255.255
185.97.188.0/22
IPv6:
2a00:f980::/32
Signature Algorithm: sha256WithRSAEncryption
41:5e:44:50:1c:bd:6a:57:b0:4d:eb:d0:34:64:bf:58:29:b6:
bf:9f:87:5a:f8:e7:7b:35:95:e1:fe:18:d2:94:28:d9:7e:da:
f9:3d:91:18:ce:1e:26:20:03:38:b3:53:73:7a:2d:68:29:07:
78:b9:a8:78:13:81:4e:bc:ee:4e:36:2c:59:ab:a4:14:40:17:
7b:a8:00:3d:bb:ce:40:fd:0f:06:e5:7d:8c:88:39:64:21:c9:
c0:da:68:d7:ec:cf:d4:f0:2f:bd:4f:36:b7:df:91:c8:b5:34:
60:5e:8f:91:14:f1:c1:7d:d1:4f:4f:5b:5a:fc:d2:f2:c1:c7:
6e:a8:5f:dc:cb:4c:ea:bb:93:7c:12:af:8c:e8:9d:e6:b0:98:
f0:2c:9a:22:a8:ea:45:88:7b:3e:66:88:df:d3:81:05:b0:96:
f7:8e:52:d2:c2:1e:e8:64:d1:cc:9e:d2:0b:dd:be:55:de:a7:
ee:72:53:bd:f0:cd:c1:a6:b9:0e:f3:f8:3d:0c:f2:52:47:e7:
58:40:3c:db:7d:a2:03:46:d5:26:96:e2:8b:4b:e0:fe:71:73:
61:6b:28:59:ef:c4:dd:3c:5c:ea:b0:ba:5d:2c:de:f1:8d:d2:
10:ed:4c:39:63:6b:95:91:41:e4:47:cd:55:f4:f1:20:1e:3b:
e1:8b:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:50 2025 by rpki-client