Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/V_xEHpefO5u5KSTu-XYSWan-kRo.roa
File: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (raw, json)
Hash identifier: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=
Subject key identifier: 57:FC:44:1E:97:9F:3B:9B:B9:29:24:EE:F9:76:12:59:A9:FE:91:1A
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019421B20EB56FD7BFFE75FA7826F85A5CE5
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/V_xEHpefO5u5KSTu-XYSWan-kRo.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.168.160.0/22 maxlen: 24
185.168.160.0/24 maxlen: 24
185.168.161.0/24 maxlen: 24
185.168.162.0/24 maxlen: 24
185.168.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0e:b5:6f:d7:bf:fe:75:fa:78:26:f8:5a:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57fc441e979f3b9bb92924eef9761259a9fe911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:57:3b:fa:e4:bc:8c:d9:4d:3c:d8:61:7f:
d9:46:ec:76:58:50:af:39:30:9d:f8:7b:74:24:cb:
99:33:83:53:a7:b9:1f:46:b1:9a:f2:e7:49:b6:60:
e1:24:a8:9a:d9:4f:81:07:65:11:86:68:31:bd:52:
66:f8:20:bb:13:8d:c2:5d:68:cd:ec:80:28:52:b7:
1a:be:7c:dd:93:30:74:e9:4c:bb:a9:0a:44:70:ef:
b2:98:a5:a8:d7:38:32:72:05:64:8d:f6:d6:a9:3a:
6b:c9:d5:ee:9f:de:52:3b:9f:8a:10:83:6e:42:60:
6b:c8:50:5e:86:53:4d:8c:41:48:fb:bf:3b:9e:7b:
c6:ec:a9:c0:50:64:f2:d7:15:fd:f7:f5:62:85:74:
36:42:f0:21:ac:31:9e:6b:19:0f:a5:cf:0f:5c:bc:
f4:e5:3a:17:bb:e9:5d:a9:cf:f6:5b:4e:39:51:6e:
d0:7d:37:52:e4:1d:6c:e1:dd:77:b5:df:52:1e:9a:
34:ce:2c:42:57:0e:2b:0d:e0:61:68:18:35:53:72:
54:b2:1b:48:06:72:6a:c8:24:af:3c:43:f9:9a:12:
de:26:fb:c1:14:fa:f1:23:63:2a:9f:66:2c:aa:e5:
b8:38:f3:87:23:fd:dd:24:36:3b:64:37:40:36:3e:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:44:1E:97:9F:3B:9B:B9:29:24:EE:F9:76:12:59:A9:FE:91:1A
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/V_xEHpefO5u5KSTu-XYSWan-kRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:2c:89:ca:51:ae:f4:9c:ee:e1:35:d9:08:63:9d:84:79:be:
bd:62:8f:e3:db:db:61:26:ba:a5:0a:5e:c0:a2:12:63:09:b9:
dc:e7:00:91:e5:3b:05:9a:38:36:10:d0:eb:11:c9:19:e3:ee:
40:e7:88:78:31:e9:6f:70:47:97:70:0b:d9:15:fe:1d:81:ba:
ae:ae:62:c1:4b:12:eb:d6:64:4b:85:ca:5b:44:1f:4d:2b:5c:
e9:17:3b:44:72:72:dd:5d:5e:f5:85:0a:a5:7e:c2:11:67:5b:
d3:80:95:3e:4e:f0:06:7f:61:fa:a5:0f:29:a5:9e:dc:75:a4:
14:19:59:32:28:78:44:ce:14:6d:9b:86:c1:fa:bd:70:57:af:
42:82:68:ff:85:24:69:d6:c8:88:f0:4b:e3:b0:83:bf:d7:0f:
10:51:71:a1:c5:c5:9e:25:10:13:86:5e:dd:10:b7:92:3f:06:
e5:6f:83:9b:46:f7:f6:dd:91:e4:95:b7:0b:f0:7d:a0:39:5a:
b0:a2:0f:c3:d7:53:f6:08:ac:b7:fa:2e:5b:2e:0a:fb:09:e7:
6b:8e:88:9f:ed:c2:19:77:d0:c8:d7:37:60:2a:51:cb:be:e0:
2a:26:26:7b:e9:00:d5:ac:42:75:f5:71:d9:87:b6:81:da:1f:
e4:04:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:36 2025 by rpki-client