Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pLmQNEyn-af_I4fD5ymtcRwxpjY.roa
File: pLmQNEyn-af_I4fD5ymtcRwxpjY.roa (raw, json)
Hash identifier: Ixqt/BzfnqxhRJfREC3hME8Kmmuq8jCzUnVvi2+6wVQ=
Subject key identifier: A4:B9:90:34:4C:A7:F9:A7:FF:23:87:C3:E7:29:AD:71:1C:31:A6:36
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FA20A089B41B1B4FF4887ED5C4CE
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pLmQNEyn-af_I4fD5ymtcRwxpjY.roa
Signing time: Thu 02 Jan 2025 01:48:16 +0000
ROA not before: Thu 02 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201673
IP address blocks: 85.254.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fa:20:a0:89:b4:1b:1b:4f:f4:88:7e:d5:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4b990344ca7f9a7ff2387c3e729ad711c31a636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:b2:7f:78:3c:75:96:38:50:15:17:2d:04:
4a:63:8b:c9:63:3e:e3:d1:16:bc:4b:4e:90:50:34:
2b:af:23:a3:c3:04:7e:b6:72:fb:37:c1:05:e5:07:
b0:00:2d:2c:05:8e:55:88:00:51:a0:95:ff:55:f3:
ca:25:b9:f0:25:4a:cf:31:4c:b9:40:ea:2f:62:12:
34:c6:41:87:ff:67:ba:ab:d6:4c:9b:87:91:62:3b:
ed:43:07:db:9a:96:03:6b:c5:c8:ab:80:09:79:67:
ec:a2:c2:07:d7:97:01:49:de:4d:e8:b4:c8:56:1b:
f4:60:8c:23:6a:11:d1:d7:6f:d5:0f:8a:93:ed:05:
85:0c:c4:71:4e:f6:92:58:48:13:c6:f6:01:2d:29:
1a:58:e5:11:c2:d4:6a:3a:81:e4:ce:b1:a5:82:b0:
8c:47:f6:00:11:51:53:41:5b:68:c0:3b:a0:2b:ec:
93:fc:20:03:fd:8e:3c:aa:66:b4:52:80:76:c8:4f:
bb:71:32:29:01:7b:3a:a4:14:76:38:17:3e:cb:9d:
d6:33:b3:6f:45:00:1f:6b:f7:18:f3:46:bf:22:95:
73:fb:19:67:46:03:e4:35:e1:bc:e1:61:bd:d2:a0:
5c:6e:57:19:49:9f:a0:76:1f:d9:96:49:ec:82:0e:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:90:34:4C:A7:F9:A7:FF:23:87:C3:E7:29:AD:71:1C:31:A6:36
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pLmQNEyn-af_I4fD5ymtcRwxpjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.148.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d6:a9:8d:3e:61:19:19:bd:d8:d0:34:70:b4:a0:e8:74:35:
cf:7e:d8:cb:62:16:66:2c:6e:e6:5a:84:2e:c0:0b:95:3e:d9:
b8:26:54:84:6c:32:b5:af:75:18:96:39:d4:38:74:48:63:bd:
c6:47:25:d8:3d:6b:aa:80:81:2c:c9:c1:89:5d:f0:07:32:db:
d6:2e:6d:d5:4b:be:1e:b2:0d:10:2b:b0:fd:20:72:29:ae:a7:
86:7e:92:97:f1:6c:ad:3e:eb:db:68:40:a0:4f:f4:1d:f1:18:
f7:09:43:2b:c5:e3:0a:92:1b:d9:07:58:0a:62:b7:0f:a1:a9:
bc:14:a6:cd:c2:bd:a7:d5:f1:82:46:87:a8:d8:06:74:37:e6:
6d:35:ac:a9:9c:b1:7f:62:54:3e:e1:98:5d:ec:10:a3:1d:bf:
4f:47:47:55:3c:9f:aa:f7:52:b2:1c:c6:88:70:c6:3a:10:be:
eb:6c:8e:f7:b1:05:8b:50:46:95:f7:03:2e:80:82:54:20:59:
cc:93:81:86:c6:3f:b1:7f:be:d5:f7:1a:fc:76:f0:8a:e1:e7:
e7:89:3a:20:ba:e8:e9:49:84:12:dc:59:25:40:8b:c7:e0:f0:
fc:52:93:50:5c:22:6e:5b:66:55:c1:2f:69:97:07:5c:9e:80:
ee:34:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:08 2025 by rpki-client