Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/y-NIwscX11p02xnh21oGE_zmYCI.roa
File: y-NIwscX11p02xnh21oGE_zmYCI.roa (raw, json)
Hash identifier: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=
Subject key identifier: CB:E3:48:C2:C7:17:D7:5A:74:DB:19:E1:DB:5A:06:13:FC:E6:60:22
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 01942747F57DCE475E8919F6B6939F68EA33
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/y-NIwscX11p02xnh21oGE_zmYCI.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199306
IP address blocks: 185.160.76.0/24 maxlen: 24
185.160.77.0/24 maxlen: 24
2a01:fa80::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f5:7d:ce:47:5e:89:19:f6:b6:93:9f:68:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe348c2c717d75a74db19e1db5a0613fce66022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:18:b3:df:2a:b0:ee:46:4b:93:c1:3d:62:
3f:b7:61:2b:38:bb:15:89:c9:a4:a5:90:aa:55:2e:
e4:9f:94:55:9b:b7:57:d5:92:ae:15:49:c8:36:15:
e4:37:1d:f4:a6:11:f1:4c:c6:d4:19:06:94:c9:f5:
b8:e4:36:21:9d:0f:5e:89:c6:6d:e7:51:06:3f:32:
44:fb:1a:04:d6:41:f0:94:63:a6:46:ba:d1:da:86:
e6:e8:2d:d4:c0:90:1b:84:2e:5f:48:0e:51:86:33:
55:76:06:ed:54:3f:74:98:9e:e4:d5:66:d7:9b:78:
95:3f:eb:20:cb:d0:b8:09:94:ed:03:cd:37:2b:35:
c8:44:d9:5b:2d:1d:bb:65:8c:24:0e:c6:1f:cb:92:
30:98:00:85:7d:c9:8e:ea:d5:ac:5b:7b:ac:5f:37:
91:46:9d:e7:9c:96:b9:8a:03:85:a3:9b:f1:ec:9c:
9c:2c:10:eb:b7:4b:d8:d5:6c:46:fb:6b:2f:55:a8:
c9:32:f7:ac:1e:72:bb:51:5d:75:fd:8d:e2:89:1f:
16:64:ff:3e:fd:d4:20:4a:28:6d:eb:aa:23:ed:cd:
db:87:38:c5:4b:ad:c9:fd:67:87:d2:86:2a:01:57:
8f:7c:6a:96:51:9f:f8:9d:ee:ec:e5:e2:75:0b:09:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:48:C2:C7:17:D7:5A:74:DB:19:E1:DB:5A:06:13:FC:E6:60:22
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/y-NIwscX11p02xnh21oGE_zmYCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.76.0/23
IPv6:
2a01:fa80::/30
Signature Algorithm: sha256WithRSAEncryption
48:07:de:39:8d:4d:42:e1:e8:9e:76:00:59:a9:e4:fa:4f:d2:
93:fc:29:62:f3:cf:6e:70:1f:95:4a:10:8d:2a:80:14:01:9a:
7d:ee:40:03:7b:08:88:67:85:18:d6:77:89:09:61:cc:54:81:
9f:02:a8:cc:91:c4:42:07:9a:5e:a9:74:3a:6a:b3:2a:f9:d9:
57:6e:1a:11:ca:b0:8c:35:84:9f:52:d7:02:5e:27:a9:93:36:
03:cb:85:b5:e0:75:f0:fb:b6:23:3f:b0:8c:a0:20:da:de:54:
c7:1a:58:75:85:1f:ec:65:f1:47:ff:ad:3a:32:2f:3d:1d:81:
9b:27:8b:ba:1b:71:4d:ff:c3:02:50:d9:58:17:6c:5c:dc:73:
7d:5c:26:61:85:2a:a9:be:43:6d:48:4d:c4:0a:55:d4:23:28:
68:68:5b:51:55:64:0d:84:eb:e6:d0:d0:03:11:83:94:fa:b5:
e5:6e:2f:7c:9a:fe:09:0b:db:65:e3:fc:c4:ff:21:72:12:82:
12:03:22:3e:e5:f5:f7:55:36:5d:2f:fc:70:e7:5c:37:bc:8f:
7d:7c:79:5d:a9:ca:78:4c:5c:89:2e:43:fa:09:05:15:be:56:
1b:f9:47:b0:ce:6a:2f:e7:fa:1d:71:4c:96:bf:5c:34:f6:29:
94:50:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:34 2025 by rpki-client