Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/NT7G6S43JfOE-5kDGWemH8nQ5VU.roa
File: NT7G6S43JfOE-5kDGWemH8nQ5VU.roa (raw, json)
Hash identifier: xVCbGxLBc1bTaeY6ocvksTlQERFjITKapv7GasrUNCE=
Subject key identifier: 35:3E:C6:E9:2E:37:25:F3:84:FB:99:03:19:67:A6:1F:C9:D0:E5:55
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E76EF02C9B5EDA991992C3E44373
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/NT7G6S43JfOE-5kDGWemH8nQ5VU.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 159.148.134.0/24 maxlen: 24
159.148.136.0/24 maxlen: 24
159.148.137.0/24 maxlen: 24
159.148.140.0/24 maxlen: 24
159.148.184.0/24 maxlen: 24
159.148.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e7:6e:f0:2c:9b:5e:da:99:19:92:c3:e4:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353ec6e92e3725f384fb99031967a61fc9d0e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:7b:91:ce:6b:df:2b:54:57:1b:5a:77:a8:
e4:f7:9f:ed:54:e2:00:38:62:35:a3:2d:17:05:c3:
a2:c2:c3:33:39:91:fa:04:19:bb:a2:da:e7:90:17:
6e:0f:cb:7d:78:b1:9c:d3:b5:04:f6:cb:bb:43:c3:
e5:f0:47:05:dd:79:a1:53:ca:f3:0d:cb:46:5f:72:
11:78:7c:1d:6e:12:33:2f:68:6c:70:d9:e4:80:76:
b6:ef:74:cd:f5:a2:89:aa:14:a6:98:b2:52:c8:ba:
a1:e2:5b:6a:cb:8b:13:b2:d3:b8:63:80:65:11:78:
d4:1e:67:ce:53:2f:1c:d4:0f:fa:fe:1a:b8:fe:97:
98:9d:f0:95:39:99:b5:42:ba:22:57:24:6b:44:a1:
95:a8:ba:9b:14:18:06:21:fa:d5:6c:c1:4a:fc:c0:
61:72:ef:fb:4a:07:20:da:7a:a0:49:1b:eb:d1:3f:
46:0f:11:6f:0f:32:1c:57:a1:09:6f:61:ef:c6:46:
95:a5:be:84:07:1d:ae:a9:c3:66:ec:48:c3:7f:ef:
22:be:00:78:71:d3:26:1a:ca:29:f9:67:a7:54:a8:
02:a6:11:ce:20:0e:97:ad:67:fe:5c:21:0c:63:fb:
c8:08:fe:de:05:b9:56:65:67:56:c6:86:dd:80:8e:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:C6:E9:2E:37:25:F3:84:FB:99:03:19:67:A6:1F:C9:D0:E5:55
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/NT7G6S43JfOE-5kDGWemH8nQ5VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.134.0/24
159.148.136.0/23
159.148.140.0/24
159.148.184.0/24
159.148.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:94:9f:59:39:45:0a:eb:81:6f:62:9b:6b:f3:12:dc:a7:45:
0f:4f:45:f0:4a:a7:5b:4f:17:01:31:d3:81:26:76:0f:18:60:
46:44:08:11:70:03:fc:d5:8d:b8:8b:cc:27:ed:02:11:d8:6c:
6f:27:5e:b1:df:2e:7f:37:b0:ce:e9:00:93:e5:76:24:bd:65:
d5:f0:27:c6:54:98:64:82:59:38:77:8e:b4:0a:3d:33:f5:c7:
41:55:b8:f8:4e:8d:eb:bb:e6:67:61:70:e0:7a:8c:ee:55:a5:
00:3b:75:fb:1d:86:71:48:81:51:4e:99:60:dd:bf:62:41:75:
8d:f0:fe:47:64:d7:50:38:f4:a2:5d:a6:ec:7b:bf:74:4d:15:
8e:c6:bc:3a:04:ab:54:67:1e:e9:ca:88:23:e5:32:e6:49:28:
1c:63:8d:83:70:a4:c7:5c:ed:02:31:ff:2f:68:4e:b8:09:00:
8f:95:7b:55:f5:4d:2a:95:14:c4:22:83:d0:2b:3b:0f:a7:49:
b0:61:68:7e:05:f3:45:19:93:27:78:6e:5d:28:d1:74:c6:21:
ec:8b:e0:4e:b9:29:91:f8:f0:97:f2:c7:ab:40:c4:42:1f:72:
c6:80:26:ec:7d:31:26:8c:01:f1:c1:5e:04:b2:dd:5b:98:c6:
01:12:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:06 2025 by rpki-client