Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/F3ZmQOUd7k2YWo4bHkO05Qzggh8.roa
File: F3ZmQOUd7k2YWo4bHkO05Qzggh8.roa (raw, json)
Hash identifier: hwSM08oHWrgqrE5vVdOxZBpqsbYzRH70wCdXbU8qruA=
Subject key identifier: 17:76:66:40:E5:1D:EE:4D:98:5A:8E:1B:1E:43:B4:E5:0C:E0:82:1F
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023A21F14B4B6B9768D47EB0925E64
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/F3ZmQOUd7k2YWo4bHkO05Qzggh8.roa
Signing time: Sun 01 Jan 2023 20:24:54 +0000
ROA not before: Sun 01 Jan 2023 20:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 159.148.114.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3a:21:f1:4b:4b:6b:97:68:d4:7e:b0:92:5e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17766640e51dee4d985a8e1b1e43b4e50ce0821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:19:33:df:3c:83:de:3c:fd:22:e4:13:f1:
33:f6:d4:07:85:6b:9f:22:cd:c3:99:9e:56:f9:2a:
fb:5f:e0:8e:18:f5:9a:f8:87:ef:09:42:05:e6:16:
ce:4b:f0:7d:cf:3c:3c:3b:23:4e:c4:c8:00:af:5d:
d6:cc:69:99:16:02:9d:28:e9:98:53:60:1c:e3:b5:
e0:3b:9d:b7:d1:d3:ce:43:a3:ac:f0:e0:d8:9e:18:
8b:c3:d6:b5:fd:fa:61:d2:31:37:ae:1f:a6:9f:62:
26:12:88:61:69:d9:a5:eb:ab:7b:c3:6b:c0:15:51:
68:b3:70:8f:5e:51:a1:c1:b9:cc:71:5d:ac:75:b3:
4e:76:26:89:0f:a7:22:fc:ce:fa:86:18:3c:36:0d:
11:7d:1f:7e:46:91:76:84:68:4c:1d:e6:21:fc:1d:
40:27:20:45:3a:25:02:d4:a3:2b:94:de:32:41:12:
65:13:47:6f:c7:ad:bb:b5:81:da:a9:6f:d7:6a:13:
36:38:34:3a:77:45:f8:d3:95:4d:fb:9a:45:16:38:
12:e0:d3:9b:d5:c7:bc:db:ad:84:22:8e:72:3f:d7:
f1:e4:1b:89:43:8d:c8:6c:86:36:40:f5:09:35:fb:
58:e6:5c:7f:50:17:26:90:19:24:87:9a:32:96:62:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:76:66:40:E5:1D:EE:4D:98:5A:8E:1B:1E:43:B4:E5:0C:E0:82:1F
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/F3ZmQOUd7k2YWo4bHkO05Qzggh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.114.0/24
159.148.125.0/24
159.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:03:2b:f7:03:ca:44:bf:4e:56:a9:7a:02:34:12:bb:21:64:
b5:53:f8:c2:47:53:36:11:92:24:7e:2e:b6:7d:59:a4:d9:23:
1f:58:72:4c:1c:0f:98:7b:e9:42:fd:7c:95:35:ef:10:07:f6:
13:b1:37:07:92:2b:df:36:c0:58:36:7c:09:63:5c:af:d0:83:
66:ea:98:23:33:58:dd:5f:2d:62:ba:1d:31:5a:b5:22:0c:26:
4b:eb:c6:7b:1f:1e:71:d4:87:0e:f7:bc:04:fa:f0:26:a2:52:
0b:0b:ae:d9:80:67:1b:5f:58:bc:32:c4:28:52:bc:dc:28:fd:
36:9d:66:25:87:03:4f:c1:54:3d:91:44:76:25:54:ab:1e:4c:
be:73:f4:3f:36:1d:53:fb:68:e7:68:5e:ea:2c:8c:1b:a0:98:
74:c8:90:d7:94:c7:bc:7d:95:20:5b:81:89:ea:d8:ab:c5:fb:
04:0c:4d:9f:d3:ff:7f:7a:28:76:80:33:f4:b5:52:17:c9:35:
78:a5:9d:e8:5c:1a:dc:36:25:61:5d:13:85:f2:8e:45:76:52:
7d:b0:c6:58:d2:1f:4d:4d:f9:c6:cd:ea:44:04:8a:a4:53:7d:
81:ab:26:eb:f2:be:9f:22:c3:93:35:74:5e:86:67:48:80:c2:
47:65:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:36 2025 by rpki-client