Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ecFaihtciM0zMOAwlbEOVPyi6JM.roa
File: ecFaihtciM0zMOAwlbEOVPyi6JM.roa (raw, json)
Hash identifier: W1ricdU5XnQWxYbP3CgIv8VYGxUL1IATTphFe6KpZjo=
Subject key identifier: 79:C1:5A:8A:1B:5C:88:CD:33:30:E0:30:95:B1:0E:54:FC:A2:E8:93
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0189AB3C0C5789405B5DC4BE5FE32904EE9D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ecFaihtciM0zMOAwlbEOVPyi6JM.roa
Signing time: Mon 31 Jul 2023 09:16:26 +0000
ROA not before: Mon 31 Jul 2023 09:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 159.148.134.0/24 maxlen: 24
159.148.137.0/24 maxlen: 24
159.148.136.0/24 maxlen: 24
159.148.140.0/24 maxlen: 24
159.148.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:3c:0c:57:89:40:5b:5d:c4:be:5f:e3:29:04:ee:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 31 09:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c15a8a1b5c88cd3330e03095b10e54fca2e893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:68:11:40:9d:dd:1d:27:a0:45:cf:2f:0e:
6c:ef:7b:9d:fc:69:a9:60:48:62:54:4c:df:79:65:
4b:a5:38:fd:8b:7f:e1:ea:20:26:80:ed:bf:46:41:
81:13:d7:ea:89:fb:44:e2:47:d9:55:07:ba:d7:dc:
e2:34:be:9a:8f:2e:b2:73:28:46:9e:a9:fe:ab:c5:
05:ae:ac:0e:12:2a:70:b9:96:25:fa:97:3a:9a:d4:
c4:94:10:15:e1:60:b3:44:1d:8f:3c:98:28:b2:3a:
0b:bd:b9:64:59:68:e0:9b:e6:f8:0b:ba:5d:4a:11:
0f:27:42:f9:7e:3b:3d:ef:88:bf:61:f3:97:31:fc:
76:bf:31:3f:8b:e8:81:17:3d:c0:92:b4:50:c0:ae:
e7:85:93:94:f2:28:ea:69:e2:7b:4a:82:82:93:4b:
33:9d:43:4c:d4:dc:35:93:73:d7:b8:2c:02:d5:71:
0c:2f:99:da:06:95:cd:ed:9b:ee:0c:28:ac:7a:e9:
4f:26:8e:91:a5:32:a2:f9:94:8d:e3:0d:25:1a:aa:
86:44:99:dd:ec:e6:9a:3a:19:29:37:75:50:bc:e5:
30:b2:54:27:51:5a:5c:12:e4:73:a0:b4:59:c1:ce:
1b:54:f4:c0:99:53:ef:fa:8d:72:61:c5:8a:6e:24:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:5A:8A:1B:5C:88:CD:33:30:E0:30:95:B1:0E:54:FC:A2:E8:93
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ecFaihtciM0zMOAwlbEOVPyi6JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.134.0/24
159.148.136.0/23
159.148.140.0/24
159.148.184.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4b:65:e4:2e:cd:8d:8f:95:3f:25:1a:df:52:22:e7:b4:2e:
d8:12:f8:14:93:fc:66:75:6b:82:8e:cc:37:ce:f4:f7:36:02:
85:17:c1:65:c5:54:c1:6e:27:5f:38:36:1e:b4:65:5e:85:3f:
16:27:dc:29:7f:64:d3:b5:a3:cd:a0:c9:f2:e9:2b:e6:08:05:
0f:33:6c:18:94:7d:15:00:07:92:8c:4b:1a:a3:63:75:3a:01:
9a:81:2f:6d:ed:bb:5d:9a:e9:fd:a2:ac:d1:00:71:3b:4a:fd:
5e:05:6b:6f:25:ee:54:08:65:14:e9:71:e9:7c:ef:17:89:52:
ed:c0:ac:34:ea:1a:0b:70:f1:54:90:2f:ef:5f:44:cb:5e:84:
f6:9c:aa:b8:df:6d:ca:01:bb:37:47:32:3c:70:2c:a6:a3:c3:
7d:bf:1a:a7:83:f3:e0:4b:6a:07:93:d8:2d:11:03:d6:d4:43:
10:67:63:c2:bb:ef:09:43:d3:5f:4a:c4:a7:a7:c1:91:9a:02:
28:05:7c:68:15:05:87:6b:9f:71:58:07:4c:0a:88:62:16:87:
21:d2:c0:7f:b7:69:4b:45:7e:4b:b2:c1:9b:1e:a1:ad:3d:9c:
fc:35:dd:98:19:9f:b2:f7:17:2c:81:fb:e5:4e:9d:67:c1:8e:
8e:44:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:26 2025 by rpki-client