Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Wd3EI0vE1xsIre8VWLQEYaRWYF0.roa
File: Wd3EI0vE1xsIre8VWLQEYaRWYF0.roa (raw, json)
Hash identifier: zib+u8PMkDj5oMZg3DUIq2JAUSjy6BLmzl5Jrt3FtgI=
Subject key identifier: 59:DD:C4:23:4B:C4:D7:1B:08:AD:EF:15:58:B4:04:61:A4:56:60:5D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0193E1197AF8F0E26CE4DC1C969C5BC21592
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Wd3EI0vE1xsIre8VWLQEYaRWYF0.roa
Signing time: Thu 19 Dec 2024 22:46:03 +0000
ROA not before: Thu 19 Dec 2024 22:46:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15818
IP address blocks: 159.148.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:19:7a:f8:f0:e2:6c:e4:dc:1c:96:9c:5b:c2:15:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Dec 19 22:46:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ddc4234bc4d71b08adef1558b40461a456605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:35:d6:67:79:4f:10:3d:b7:3b:2e:41:1a:
97:42:7f:f9:11:3f:6b:b8:d2:4d:9f:62:49:4a:f3:
eb:9b:f4:99:f6:24:00:a2:ad:83:85:5a:07:ec:40:
8d:a6:f4:1c:c7:6a:a7:00:92:d3:94:0f:93:2d:bd:
d1:de:53:6d:90:e2:5f:4c:fa:78:9f:34:bd:bb:01:
00:28:6f:f3:67:d1:19:97:d5:28:35:ee:49:54:17:
70:08:e8:3a:b5:66:ec:7a:44:5f:39:9d:bb:f7:da:
18:01:68:15:a7:c0:91:2a:4a:c1:7f:91:58:af:9c:
f6:c2:af:79:0d:94:36:01:d2:ad:9c:d6:8b:90:f4:
4f:e4:86:c0:d1:eb:4e:83:b1:71:55:fb:17:8b:51:
0d:32:22:e7:ff:eb:12:bb:81:d7:50:2a:b0:1d:ff:
fa:fd:9c:ac:6c:5c:1f:95:5a:ef:bf:50:43:13:64:
f4:bf:63:49:3b:5e:8b:5e:3b:52:6a:4d:4b:49:e6:
b3:b0:b6:0f:6d:a9:6d:5d:66:f5:ab:ed:47:f5:86:
96:1c:c5:92:2c:7b:46:ad:5a:ac:62:76:de:96:fd:
c3:6b:92:c6:8c:c7:08:f1:5a:8c:a1:0b:40:6a:04:
28:a2:f7:ef:3c:66:89:47:7c:b4:2c:f6:76:55:f1:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:C4:23:4B:C4:D7:1B:08:AD:EF:15:58:B4:04:61:A4:56:60:5D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Wd3EI0vE1xsIre8VWLQEYaRWYF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.90.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:bd:95:21:b8:1c:f1:ca:65:3a:5b:8d:94:37:c7:d3:31:de:
93:77:97:a1:44:3a:cd:24:40:44:70:aa:6e:aa:a0:4e:97:f2:
4e:30:dd:2a:87:1c:d5:bc:f8:ce:a1:40:ab:25:eb:54:cf:4e:
b8:e2:82:32:13:df:54:84:aa:95:cb:da:a6:61:e4:f3:51:39:
5f:f0:7c:92:40:a5:de:9c:cd:23:32:1f:7c:0a:eb:e8:7e:3e:
83:42:50:dd:e2:ea:97:a4:33:3a:85:02:42:e7:26:78:8b:5b:
3d:54:52:08:c6:13:08:97:53:e8:c1:b8:15:c7:72:aa:a1:70:
a4:a7:31:c1:e8:3c:0b:58:bb:27:aa:e9:ba:bd:ee:5a:7a:01:
31:ce:9e:90:ca:66:5b:7e:46:a2:e0:a7:c3:21:51:56:d8:25:
5b:50:ab:fe:1d:d5:66:65:2e:b6:e1:5f:ba:3e:6f:62:21:66:
6b:12:f2:f7:55:90:4d:b9:ea:78:d6:89:0a:89:3c:f3:bb:1e:
e8:ac:61:75:1b:64:49:00:5f:2e:a2:9b:f6:c7:95:2b:68:96:
8e:2d:60:09:a9:d3:1b:aa:bc:0b:de:74:48:4d:4a:25:9d:d5:
38:1d:e2:7f:1f:6d:93:cc:2b:53:74:9c:cc:78:a0:15:2a:41:
f4:38:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:12 2025 by rpki-client