Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iRSrmHAyFfqmjPNM8Hq09XJF_U0.roa
File: iRSrmHAyFfqmjPNM8Hq09XJF_U0.roa (raw, json)
Hash identifier: qJEqjkS+2/WuhgVBw/O62KQC0MQJqDfRLDpeaEjp3l8=
Subject key identifier: 89:14:AB:98:70:32:15:FA:A6:8C:F3:4C:F0:7A:B4:F5:72:45:FD:4D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 388B23F9
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iRSrmHAyFfqmjPNM8Hq09XJF_U0.roa
Signing time: Sat 01 Jan 2022 05:54:23 +0000
ROA not before: Sat 01 Jan 2022 05:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60066
IP address blocks: 159.148.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948642809 (0x388b23f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8914ab98703215faa68cf34cf07ab4f57245fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:17:53:0a:3e:9a:22:7a:f7:06:49:2c:5a:
04:4f:0a:16:04:67:00:89:ea:d9:84:4c:3f:cd:de:
1e:40:be:55:4b:fa:49:9c:e8:53:14:38:d8:cf:bf:
73:5a:d7:aa:04:1e:0d:15:c9:88:52:ce:84:20:73:
14:b5:ad:19:3f:e4:5e:cb:a4:4f:ab:1d:d3:9d:93:
19:92:b5:8f:81:74:d5:db:fd:ce:3c:13:ab:96:4d:
be:28:67:91:ac:28:ee:d1:d6:bb:19:85:a3:85:c0:
f2:d9:f8:97:c3:aa:25:b1:08:7d:c8:e0:3b:5c:11:
2e:a2:d0:ed:1b:01:dc:8d:21:30:e5:c3:f3:d9:7c:
40:fb:84:84:f9:28:53:76:ba:15:12:24:8d:e8:be:
80:90:d1:05:a3:99:74:e9:7d:00:73:7f:c6:6e:e3:
46:a6:53:ec:5f:d8:0a:49:e7:b6:7c:ec:e1:e9:bb:
6e:b7:c9:cc:ff:82:47:73:57:b6:a7:a0:4a:1f:d0:
08:f2:f8:4b:20:63:5c:fb:9c:96:3a:2c:92:b5:55:
84:84:6c:63:b3:e1:51:49:32:82:8d:cc:43:07:08:
1d:40:50:07:46:80:59:6d:f3:85:a3:1d:33:4c:5f:
b0:f9:17:86:44:95:b3:0c:de:a9:79:89:ba:6a:0e:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:AB:98:70:32:15:FA:A6:8C:F3:4C:F0:7A:B4:F5:72:45:FD:4D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iRSrmHAyFfqmjPNM8Hq09XJF_U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.119.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5a:c3:2e:7b:ff:70:48:e2:6b:fa:2c:a8:2d:a5:29:b4:54:
c3:24:72:62:d0:52:9e:c9:21:fc:c5:6b:9b:7d:64:20:97:3b:
95:4e:44:69:73:85:db:80:4e:86:41:e6:23:e4:08:18:c4:e0:
8f:dc:c9:22:83:f0:b7:54:20:ec:3c:e2:10:07:80:42:59:d2:
35:a5:6a:8e:46:4a:f7:06:0e:31:06:0e:44:4a:ae:6e:35:1e:
8b:6c:b9:94:c3:c3:8b:b7:c7:c3:a8:66:b4:4e:c9:16:9d:cb:
02:f9:e1:f5:85:94:e1:16:9b:c4:3b:02:8a:21:c3:e2:cd:27:
a6:79:ca:c6:51:35:f0:36:9c:c6:ec:2e:df:fd:7f:84:86:ba:
98:ab:ff:73:0b:da:46:ec:12:5d:4a:c2:85:40:44:29:2d:42:
db:6a:f0:48:c3:15:63:32:05:b3:51:a5:cb:4c:6f:16:16:fa:
e2:7b:e5:ea:59:9a:12:c3:4c:76:6c:40:21:2e:da:e1:8b:2f:
75:36:25:14:79:91:de:be:4f:31:de:c4:9e:2d:93:63:95:10:
85:1c:08:d4:1c:07:4a:04:61:6b:5d:cd:20:7f:1f:ce:0b:c7:
ea:c9:43:10:b9:13:08:48:e7:d3:0c:7c:86:3b:d6:80:4a:f5:
19:e7:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:05 2025 by rpki-client