Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7aoikbPFBufdTOWdVTLbKR1q7iw.roa
File: 7aoikbPFBufdTOWdVTLbKR1q7iw.roa (raw, json)
Hash identifier: 7XFlvHFk9KhLg4CBa+riWRYrFbymiRgbe12FL2nSO44=
Subject key identifier: ED:AA:22:91:B3:C5:06:E7:DD:4C:E5:9D:55:32:DB:29:1D:6A:EE:2C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F3F32AB4FB69411582D85363E77A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7aoikbPFBufdTOWdVTLbKR1q7iw.roa
Signing time: Thu 02 Jan 2025 01:48:15 +0000
ROA not before: Thu 02 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 159.148.66.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f3:f3:2a:b4:fb:69:41:15:82:d8:53:63:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edaa2291b3c506e7dd4ce59d5532db291d6aee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:80:4d:8d:93:9c:c5:60:a1:68:b0:d9:c9:
18:3a:23:64:06:dc:99:96:e9:c2:fe:ad:89:96:67:
b7:f0:4a:ba:b2:03:87:6a:4f:be:9f:c8:7d:4b:a0:
5c:0b:6e:e4:7f:db:cf:ea:54:38:c3:de:b4:7a:44:
83:30:59:01:15:4c:b4:ab:54:3f:11:61:2d:1c:12:
01:ed:23:3e:3b:99:46:0f:89:f1:25:d0:e6:7a:95:
40:e4:c8:9e:fb:39:97:93:72:46:c1:2e:1e:d9:80:
a7:22:a7:0d:df:74:07:ee:c9:14:01:a2:07:7c:62:
91:5e:0a:28:0e:aa:dc:25:fb:76:e8:15:54:c0:13:
90:a2:67:3d:35:4a:48:62:17:84:36:72:dd:d7:ae:
4d:5c:b6:9c:49:c5:e9:ef:f7:07:94:62:72:7e:60:
f5:a6:10:4c:f3:0d:d2:37:ae:d4:7f:ca:15:d2:6f:
1b:2e:67:e4:b6:a1:71:e9:92:33:57:70:af:86:c0:
39:1b:68:90:96:88:30:9d:bd:9d:3b:4b:38:8e:77:
88:c2:77:19:35:6f:c4:e6:04:0c:cc:7a:cb:02:72:
67:08:51:0a:b7:f2:b7:8b:d3:d2:27:50:8b:b4:db:
94:6d:76:2a:ff:d9:db:b7:62:fd:1a:35:52:ad:11:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:22:91:B3:C5:06:E7:DD:4C:E5:9D:55:32:DB:29:1D:6A:EE:2C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7aoikbPFBufdTOWdVTLbKR1q7iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.66.0/24
159.148.234.0/24
Signature Algorithm: sha256WithRSAEncryption
58:34:35:75:13:d4:c8:94:66:a6:8e:05:2b:b1:5e:29:26:08:
f3:0c:cd:26:00:86:88:29:b8:84:28:ba:d4:da:b3:f2:d3:4b:
01:17:a2:9a:5d:f9:0d:41:92:b2:5c:7f:d1:c9:7f:e1:c7:25:
7c:c6:f9:ad:0a:50:bb:1d:bf:fb:5c:de:91:05:86:56:fa:f6:
8f:bf:62:64:f4:3d:9f:82:76:da:b8:19:29:cb:27:a9:ae:b0:
63:e0:e1:04:f0:1a:a4:c6:e7:c4:ac:4c:6d:ad:a3:97:98:33:
68:a8:e5:e6:98:4a:f6:96:6a:bb:11:dc:8d:a2:50:2c:95:d3:
92:1d:e4:3e:90:5d:ad:78:7c:a6:fa:f9:2b:fc:52:95:42:2b:
55:9d:2c:50:96:9e:cb:31:dc:37:3b:35:0a:e3:a4:02:7a:d0:
8d:88:70:c5:18:c8:63:02:c7:44:82:7d:96:18:dc:65:e4:d6:
75:24:d7:65:53:eb:31:64:c0:38:c9:2b:0b:f4:94:c3:88:57:
11:52:6b:de:5c:1a:26:e7:66:df:00:93:56:e5:e4:75:72:60:
e0:75:9f:ea:81:ec:4c:43:a7:cf:8b:1f:e0:6f:3b:62:5d:a2:
c9:ed:af:1a:09:21:41:2c:48:64:2d:84:54:6c:cb:16:b8:6a:
4b:3b:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:06 2025 by rpki-client