Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZEVrJNAUhrs00S0Ew2wuc1j6o_Q.roa
File: ZEVrJNAUhrs00S0Ew2wuc1j6o_Q.roa (raw, json)
Hash identifier: 9qJBz2/szYY8SLhfyQGTCLHq0H5nqY4yZSWrURrf/Uo=
Subject key identifier: 64:45:6B:24:D0:14:86:BB:34:D1:2D:04:C3:6C:2E:73:58:FA:A3:F4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0248471854FBEA2C6110D279A776FC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZEVrJNAUhrs00S0Ew2wuc1j6o_Q.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 159.148.109.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
159.148.26.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
159.148.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:48:47:18:54:fb:ea:2c:61:10:d2:79:a7:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64456b24d01486bb34d12d04c36c2e7358faa3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:d4:ee:04:83:ce:37:c5:5d:ed:46:d0:b1:
77:02:e9:c0:0c:15:c2:9f:f6:f6:79:ab:19:99:39:
3d:38:07:07:5b:ad:30:58:a1:a8:29:dc:7c:f6:24:
3a:00:8d:14:c9:65:8e:0e:95:a2:60:18:74:63:24:
4c:69:9a:90:db:33:8b:fb:66:ed:21:03:a3:94:34:
76:7b:62:7d:dc:7c:00:f7:57:bd:b8:c8:c8:d7:a8:
69:10:08:5d:c9:36:a4:cf:02:82:1b:cb:37:3c:d9:
1d:de:2f:c4:43:80:d3:73:01:0a:bb:7f:99:3f:01:
98:84:84:6f:d0:8b:c0:84:27:07:dd:97:e5:b9:c8:
eb:65:a0:ad:7f:41:11:b9:9b:7a:b6:32:e4:9c:80:
f0:cd:13:06:86:33:a6:79:b5:c0:e0:d2:c3:09:e3:
22:e4:83:d2:de:c0:ac:a5:c3:35:3e:8a:ca:be:de:
7f:07:a9:ee:d8:ab:1b:35:9f:39:51:56:ba:c6:cc:
d6:57:35:31:27:d3:f2:6d:42:99:02:d7:7d:a0:fa:
3f:eb:63:90:24:3a:8b:29:8a:a9:2f:e9:1a:f7:0e:
1c:2a:ae:20:ce:b9:05:f1:e1:f5:aa:9c:60:3d:ac:
75:a4:73:be:24:ab:3b:eb:4a:32:74:42:54:98:41:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:6B:24:D0:14:86:BB:34:D1:2D:04:C3:6C:2E:73:58:FA:A3:F4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZEVrJNAUhrs00S0Ew2wuc1j6o_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.26.0/24
159.148.58.0/24
159.148.66.0/24
159.148.109.0/24
159.148.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ef:6d:f8:df:4b:75:f3:0f:9e:b8:e9:6f:03:3f:db:b9:af:
87:8a:c6:f2:9c:2d:72:2a:7a:28:9b:ec:2e:9a:34:33:96:c1:
3d:4e:a9:1a:48:db:ec:94:e5:7e:66:dc:18:6f:41:fa:ac:b0:
64:5a:5b:ca:2f:ac:a8:8f:7d:ab:ea:52:98:a9:21:7e:ad:ea:
4c:7a:ef:3f:0b:23:26:da:70:93:74:d5:43:3c:6f:2c:5c:2a:
94:ee:f6:fa:ac:aa:d4:ac:35:4e:92:4d:c6:87:c0:0b:89:56:
48:cd:34:d3:a1:0e:26:d8:03:a1:d8:e2:bf:df:59:17:61:c8:
f6:60:0a:74:39:fc:9c:2d:8d:28:d2:28:cf:ab:e6:de:a2:c6:
87:93:13:3a:ec:ca:59:8f:f5:9b:38:10:58:6e:14:f4:66:ce:
fa:e7:28:e5:f9:a6:e9:d1:d0:93:ea:da:fc:1a:23:85:70:67:
7a:0c:c2:04:3a:63:5c:d1:dc:3d:7f:32:f1:75:8c:98:57:ed:
16:0c:45:ef:31:a0:50:48:4b:66:5d:c2:52:40:d9:1a:77:ed:
5c:e3:27:47:5d:5f:60:2e:5a:3b:b9:4f:2d:b0:1c:a8:3a:6f:
fc:38:b6:8c:fe:f0:0c:38:8c:79:c9:19:0f:0a:4a:fd:43:d7:
6b:b2:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:53 2025 by rpki-client