Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fOv4Zj7F2G-5b0WEfbDMHx8OHCM.roa
File: fOv4Zj7F2G-5b0WEfbDMHx8OHCM.roa (raw, json)
Hash identifier: zuHN93LkvNpLpDWO9fj7Epqts6ILU838YUnKqG0P3Gw=
Subject key identifier: 7C:EB:F8:66:3E:C5:D8:6F:B9:6F:45:84:7D:B0:CC:1F:1F:0E:1C:23
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E72FB4E5E1196583C9AE749BDB3E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fOv4Zj7F2G-5b0WEfbDMHx8OHCM.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15818
IP address blocks: 159.148.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e7:2f:b4:e5:e1:19:65:83:c9:ae:74:9b:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cebf8663ec5d86fb96f45847db0cc1f1f0e1c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:30:a2:a6:81:29:41:d6:8a:d8:d9:8d:3f:
74:b2:66:cc:fc:86:7e:36:17:81:a5:1d:b2:17:11:
ad:3d:89:eb:22:38:26:8c:72:3a:a7:21:a3:c4:4c:
c4:a4:d2:c6:cf:c9:55:44:89:90:5a:9d:72:d2:3e:
69:44:80:4b:1c:78:df:15:a7:e1:9d:d7:4e:71:84:
56:5b:e2:26:88:e9:dd:ef:25:6d:0d:2c:5c:e3:7c:
5c:95:c3:7a:28:e0:25:2a:77:54:4c:28:3a:5a:28:
99:8b:a3:76:55:72:f1:10:75:7a:e0:fe:e8:21:61:
45:5b:5f:5b:22:1a:72:c7:72:68:90:df:53:c4:f3:
91:fc:23:a8:63:af:e6:b1:17:d6:46:77:75:c8:2e:
ee:17:b9:90:7b:e7:86:19:cb:ce:09:ec:f9:58:2e:
30:5f:50:67:ba:ae:f7:6d:f2:23:74:de:64:a7:55:
6a:2a:7a:33:5f:89:4d:68:67:98:7d:c1:87:cd:2f:
eb:6b:c3:10:55:1e:81:3c:89:13:af:af:63:8d:e4:
e5:f1:31:9e:6e:4a:2a:ac:dc:4f:ce:30:ae:57:36:
51:58:dd:31:e7:db:89:ab:c0:5d:4f:44:94:a2:b0:
54:6f:cd:95:94:47:e7:c4:0c:17:cf:00:c3:6d:62:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:F8:66:3E:C5:D8:6F:B9:6F:45:84:7D:B0:CC:1F:1F:0E:1C:23
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fOv4Zj7F2G-5b0WEfbDMHx8OHCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.90.0/24
Signature Algorithm: sha256WithRSAEncryption
52:56:82:be:c7:1c:99:d0:5f:ca:3f:1b:54:cc:7b:3e:1e:73:
a6:a8:f0:78:74:49:ad:f6:03:6a:93:45:35:f4:1a:fe:cc:3a:
3f:50:cf:1e:09:51:6d:2d:63:23:d2:bc:0b:d1:25:cc:1f:28:
d0:e9:f5:c4:d9:d3:c4:65:be:18:02:9b:18:0a:84:68:05:6d:
37:93:cc:5b:9d:1a:0b:be:a2:48:16:ba:db:56:61:6d:06:5a:
0e:4f:f1:76:89:ef:04:8e:0c:40:05:8d:da:bd:dc:2e:f6:d2:
96:bf:0a:d3:e0:6f:44:20:93:1b:36:85:83:f3:10:e4:47:77:
ef:76:57:e9:92:30:bf:39:f9:78:80:0b:80:fc:e0:d1:92:dd:
0f:f5:39:11:6e:7b:3a:07:97:1e:62:21:99:43:a0:11:9e:e0:
fb:a5:4f:10:c4:de:5b:ba:f7:b7:b1:9e:6a:7a:3d:01:59:4d:
cf:28:d2:02:94:42:4c:1b:1f:e1:b3:0d:a2:84:07:5b:74:1c:
c1:06:2d:15:d6:c2:b1:03:9d:3a:f5:41:1e:b1:18:07:2f:d8:
67:f1:93:26:76:13:6a:7f:e0:5e:2a:2b:02:b1:52:13:79:c5:
92:8d:b0:19:39:44:ea:e9:7d:21:02:21:1d:e9:75:49:11:25:
e1:8d:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:20 2025 by rpki-client