Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dtwWy0ZY_xuNtzVj7BYjeODQUPo.roa
File: dtwWy0ZY_xuNtzVj7BYjeODQUPo.roa (raw, json)
Hash identifier: 39lTmWj/NCaHhKrfuvdkd8Ah2IJIHwfV5BHOXcobZ4Y=
Subject key identifier: 76:DC:16:CB:46:58:FF:1B:8D:B7:35:63:EC:16:23:78:E0:D0:50:FA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E2F99BC7C991D7FDA7C967207978
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dtwWy0ZY_xuNtzVj7BYjeODQUPo.roa
Signing time: Thu 02 Jan 2025 01:48:10 +0000
ROA not before: Thu 02 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 159.148.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e2:f9:9b:c7:c9:91:d7:fd:a7:c9:67:20:79:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76dc16cb4658ff1b8db73563ec162378e0d050fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:5a:f9:01:7e:da:0b:96:4e:39:65:80:38:
7e:d3:00:e9:5b:5c:07:d1:51:2f:3e:3c:55:70:f9:
99:d7:0e:60:f3:f2:b1:76:be:a0:7a:ff:30:c0:9f:
63:2f:78:70:55:26:f5:91:46:f4:67:4e:0e:eb:91:
95:9e:e6:d6:f1:88:76:46:9a:55:e7:7f:f1:79:19:
f5:f4:7e:c0:15:57:7f:82:30:01:0e:eb:a4:28:18:
14:33:17:63:ae:9c:66:86:5f:ad:e4:0b:08:45:93:
a1:9d:f2:7e:b0:19:ba:78:ca:66:4e:69:d2:b9:df:
4f:2e:b2:e1:7b:99:01:83:62:52:db:8e:92:65:27:
00:03:39:22:72:21:0d:ce:1f:15:a6:e5:cb:69:f7:
32:4d:99:a2:47:e3:4d:4a:52:5a:c7:7b:ae:b8:47:
a4:88:ae:4f:3c:75:3f:69:4b:e2:e9:cd:64:72:2a:
44:16:24:74:28:3b:cd:70:dc:25:e5:0d:f1:54:e7:
de:be:eb:70:f5:e7:14:66:da:f0:ad:53:23:71:e6:
89:c9:dd:7f:ee:01:24:5d:a5:d5:7f:78:0d:68:29:
ef:50:d4:b9:f3:c1:b4:23:b0:28:c9:ac:6e:b8:be:
ab:f1:63:0d:ea:32:1b:51:b0:fe:37:f6:9a:ac:8b:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:16:CB:46:58:FF:1B:8D:B7:35:63:EC:16:23:78:E0:D0:50:FA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/dtwWy0ZY_xuNtzVj7BYjeODQUPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:33:c7:e9:3b:ff:73:a5:6a:4c:77:b2:21:75:06:17:23:fa:
ff:b4:44:05:ea:23:f1:26:39:d8:fc:67:0b:6c:84:33:b4:ef:
c0:a7:16:1d:e1:db:53:56:3e:4b:fb:39:6c:e9:b2:7f:45:9a:
e7:27:59:e2:e2:da:67:6a:b6:31:f9:27:8b:8a:c6:07:0c:49:
47:56:5f:95:4a:da:4f:57:79:a1:eb:1c:2e:0b:4d:a3:24:58:
e3:d8:9c:4c:30:ff:fc:f8:e8:2e:e3:ed:cd:37:2b:6f:fa:95:
da:e8:e8:eb:e4:23:48:e3:9f:4b:98:9e:d2:6e:a5:36:68:d8:
0f:43:b9:e2:7f:55:cd:97:8b:4c:26:76:c8:ad:12:31:a8:01:
88:93:fc:e4:a2:23:dd:54:e1:ae:73:61:0a:e8:ad:c2:c2:29:
e7:9d:12:4e:a2:ac:ec:23:7d:55:d7:12:78:a7:78:1e:82:2d:
ab:fe:61:df:b4:92:0e:d9:00:3f:b4:24:a3:31:d7:c9:70:38:
18:07:4a:71:23:30:af:f2:3d:a6:b1:fd:3b:b7:a8:22:9c:7e:
6c:6c:54:70:30:df:28:e0:77:36:af:5b:ff:13:e8:58:28:b1:
ff:0b:4b:9e:e4:99:68:84:89:5a:36:7c:47:78:7d:cf:96:ba:
50:35:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:43 2025 by rpki-client