Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa
File: Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa (raw, json)
Hash identifier: P6IjosmlOiqXveubqIomO6KehA4R0g/PyjiODsr89zk=
Subject key identifier: 19:AD:DE:E9:01:EC:4D:46:46:4E:29:23:99:D3:78:C6:0A:48:1D:E6
Certificate issuer: /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial: 01942143CCF9DAAF569976B8845892D24FC7
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 185.161.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cc:f9:da:af:56:99:76:b8:84:58:92:d2:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19addee901ec4d46464e292399d378c60a481de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:d2:71:98:c0:ae:0d:13:c5:0e:a1:2c:e9:
19:f6:44:2c:8a:ae:17:c2:91:be:cd:02:d6:8d:a3:
39:cb:70:be:d8:ae:8f:07:e7:8f:4e:e8:e5:d2:e4:
f4:eb:6d:30:64:3f:a7:28:43:06:00:b9:a8:19:aa:
45:ae:b7:fb:e0:a7:15:33:07:8d:b1:f5:26:4e:44:
7e:ad:d6:fb:2c:b9:93:36:6e:30:cb:ce:f6:e0:64:
eb:81:f4:e3:4d:f7:08:a1:98:ea:5e:9e:29:bc:52:
a0:34:0a:28:ca:03:4b:a1:fb:5b:70:ec:ce:77:67:
dc:ae:6f:d2:d7:c4:63:27:96:0b:5b:cb:f5:1f:a0:
ec:9b:5d:c0:8b:05:91:c1:1a:cf:3a:db:4b:3b:d8:
df:3b:6f:59:b8:2a:c4:5f:fa:36:47:b0:a3:c3:54:
56:1e:b8:73:f5:96:22:63:4a:64:51:fe:41:c7:f4:
40:f3:ce:4f:62:db:a0:a3:cd:9a:05:77:05:ff:79:
64:e9:9e:22:5f:e2:e2:39:ef:db:05:a9:b8:65:4e:
94:6a:b5:27:b1:ac:29:04:07:43:11:ea:12:97:af:
b8:9d:e9:3b:b1:51:36:31:34:70:db:6e:76:92:f5:
57:8d:be:4e:49:47:4e:2a:5f:25:3b:63:e7:08:28:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:DE:E9:01:EC:4D:46:46:4E:29:23:99:D3:78:C6:0A:48:1D:E6
X509v3 Authority Key Identifier:
keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:5e:47:48:7e:c5:67:1f:c6:60:91:17:fa:2a:f4:10:e9:72:
95:8b:6c:be:9d:6c:88:4c:96:a6:10:05:75:c7:4d:28:db:6b:
24:c0:d6:e3:09:b9:b5:39:75:a5:bc:77:97:b7:c4:f2:6f:4e:
4f:a8:3b:95:9f:42:b4:30:d1:43:e5:4d:87:94:8b:c3:c8:50:
da:80:9f:cf:f7:86:dd:cc:73:64:6c:bd:96:8a:cb:2c:98:82:
32:40:71:4b:21:32:e1:34:00:df:9f:b6:cd:d2:f6:26:e5:d9:
7f:bb:b5:3b:ee:5e:bc:ef:92:13:a1:80:b1:0e:bd:8d:60:d3:
df:53:3b:ac:be:45:30:b6:11:ce:ef:03:b4:8b:e8:19:9c:e1:
85:4b:0e:71:9d:58:3b:1d:0d:e6:15:72:45:22:73:06:0f:0c:
43:94:48:11:ca:26:58:8e:ee:da:bd:ba:cc:31:bb:d8:b0:04:
11:ab:98:07:ff:1c:0a:32:82:92:9b:4f:26:b7:36:d4:de:ec:
c0:2c:b2:13:0b:9f:61:8a:6b:b9:db:87:ca:85:c0:ba:8d:0b:
c5:1c:6a:09:03:f8:a7:35:0d:24:d0:99:c4:22:9b:eb:de:4f:
d9:37:ff:e9:a7:9f:97:0f:10:b5:c5:30:23:39:9b:2a:40:2c:
35:c9:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:29 2025 by rpki-client