Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/xWy_WK3zN7U168-WlDV1tLOFxms.roa
File: xWy_WK3zN7U168-WlDV1tLOFxms.roa (raw, json)
Hash identifier: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=
Subject key identifier: C5:6C:BF:58:AD:F3:37:B5:35:EB:CF:96:94:35:75:B4:B3:85:C6:6B
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019424B29389F4776F22F307D36409E8B477
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/xWy_WK3zN7U168-WlDV1tLOFxms.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198612
IP address blocks: 37.208.0.0/19 maxlen: 19
185.166.208.0/22 maxlen: 22
2a00:c640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:93:89:f4:77:6f:22:f3:07:d3:64:09:e8:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c56cbf58adf337b535ebcf96943575b4b385c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:0d:02:25:8b:02:db:4f:b3:a7:96:3f:bf:
29:a5:cf:ca:bc:e8:b6:25:36:de:a2:6c:6e:94:47:
ab:ab:5f:c5:ba:2b:77:75:ed:46:64:de:14:03:c7:
65:11:c4:af:a9:f5:33:ce:5e:be:76:04:bf:c8:1f:
4e:f7:76:b3:89:bf:99:50:91:5f:cd:13:77:7c:18:
24:8f:17:8d:88:06:74:6c:2e:ea:1a:94:21:3f:6b:
20:96:36:7d:71:85:f4:c9:c1:2f:99:73:80:44:22:
fe:2e:da:0d:85:7a:5b:54:47:d9:7c:20:58:25:c1:
d8:2b:02:7c:de:e9:ab:93:57:8c:4e:c2:77:3e:9c:
2c:79:fe:8d:09:d2:6e:f6:c0:3a:9e:cf:21:b9:35:
ba:5a:96:29:88:bc:af:13:07:77:72:36:18:3a:59:
8e:7e:f2:f9:c0:64:26:67:93:8c:8f:2a:57:76:da:
cc:74:0b:0d:19:d4:e6:48:12:ca:8f:88:70:fd:2e:
ef:54:dd:af:2d:00:dd:22:34:39:a7:12:2b:91:2c:
af:4f:a6:cc:38:fc:3e:ae:b9:44:e0:24:32:1d:ef:
46:38:5a:31:9a:25:f5:8e:22:2d:bd:fe:ff:84:43:
5f:eb:f1:cc:ca:a5:df:ff:e7:a4:a8:cf:d6:77:92:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:BF:58:AD:F3:37:B5:35:EB:CF:96:94:35:75:B4:B3:85:C6:6B
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/xWy_WK3zN7U168-WlDV1tLOFxms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.0.0/19
185.166.208.0/22
IPv6:
2a00:c640::/32
Signature Algorithm: sha256WithRSAEncryption
6c:2c:a3:db:14:02:86:82:de:4e:8d:26:2e:c9:31:b8:a3:1b:
e3:a7:63:31:18:c5:a0:fc:35:2c:17:6e:b1:1c:0e:f3:19:f1:
19:f7:55:db:61:ff:80:cf:b6:f1:04:20:5f:64:27:43:d4:d9:
a4:86:a8:64:7c:4b:e5:bf:04:91:4b:00:84:ad:14:2b:44:c4:
2e:81:2d:4e:64:cd:d2:45:c3:73:24:ea:56:59:9b:c6:ee:c6:
78:03:03:8e:a4:22:a9:1c:bb:db:2d:13:65:8e:18:31:f2:58:
1e:59:21:8b:eb:73:21:f9:d0:3f:f5:46:04:d0:56:b0:2c:0a:
fd:23:5f:63:74:da:ad:6a:41:d1:e5:c7:93:e6:8f:cf:55:15:
df:73:31:83:9f:c7:ad:61:37:76:68:dc:30:f6:e7:79:c4:85:
a7:ba:50:5b:94:8b:33:13:6d:9a:fb:dc:18:0c:03:8a:35:de:
0a:83:fd:3a:02:8d:a9:71:68:c5:08:6d:83:5f:93:f6:94:aa:
79:d9:55:3a:d4:16:8e:6a:38:38:ad:96:b9:ef:aa:48:0a:5f:
e9:6d:0c:6f:89:b4:4e:d6:4c:62:02:0d:6f:6c:20:8a:d4:d3:
3d:d4:f9:c5:b6:76:d9:12:92:86:d1:c7:a5:a9:f1:5d:4d:96:
cc:7a:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:20 2025 by rpki-client