Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q2UH0lo0RCIXVoM6cadeVY6mKfo.roa
File: Q2UH0lo0RCIXVoM6cadeVY6mKfo.roa (raw, json)
Hash identifier: igSoP44JlT4K0eEgf2kXnp1HD4csZGcUWXcL+s/9pak=
Subject key identifier: 43:65:07:D2:5A:34:44:22:17:56:83:3A:71:A7:5E:55:8E:A6:29:FA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0195D6C94661D7E70488685CEE0062DF6D12
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q2UH0lo0RCIXVoM6cadeVY6mKfo.roa
Signing time: Thu 27 Mar 2025 08:47:49 +0000
ROA not before: Thu 27 Mar 2025 08:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 159.148.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:c9:46:61:d7:e7:04:88:68:5c:ee:00:62:df:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 27 08:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=436507d25a3444221756833a71a75e558ea629fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:36:85:5f:26:c8:92:7f:ff:32:73:61:c9:
54:1b:c7:9d:bb:93:9c:ea:a9:9b:cc:8f:53:d3:cb:
b7:ce:4b:44:82:5e:9d:03:6f:53:06:4f:af:4b:c9:
37:31:c1:0f:3c:c9:b9:f7:a3:55:aa:37:1b:aa:ad:
ae:6f:c0:02:ea:d0:6f:e8:a0:e2:04:c4:fb:33:9c:
93:d7:56:4b:8e:cf:80:8d:3d:d4:a2:40:2b:2b:2b:
0b:5a:a1:88:ce:d4:57:82:c9:2c:58:1b:a5:ed:c0:
32:ad:e6:c3:12:dc:ae:cd:3c:3c:b9:f0:db:fa:de:
d0:38:a7:ab:45:09:fd:84:4b:b9:42:8b:5a:14:e0:
d7:b1:d4:77:23:a4:18:7f:af:43:fc:f5:93:e0:a6:
28:11:22:13:71:1b:b8:7d:30:e1:b1:06:91:02:41:
11:92:fd:2e:e5:b9:8f:02:a6:d6:6d:0b:93:cb:d9:
f9:0c:d9:33:d9:3e:dd:57:e1:a8:5d:6f:cd:7e:f7:
73:2b:ee:28:46:d7:fb:e3:5e:ff:21:46:b3:6b:ea:
2c:94:2f:60:cd:e7:b2:c7:74:f9:b5:15:91:82:5e:
c2:83:9f:44:11:d2:4e:7d:bf:cd:ef:49:67:aa:49:
c9:96:e6:95:ff:7d:9c:95:fa:53:26:7d:37:df:1f:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:07:D2:5A:34:44:22:17:56:83:3A:71:A7:5E:55:8E:A6:29:FA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q2UH0lo0RCIXVoM6cadeVY6mKfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.137.0/24
Signature Algorithm: sha256WithRSAEncryption
30:59:f0:2e:a4:e0:f9:f4:81:8f:2c:b2:2c:da:f8:a3:d2:23:
3d:b9:81:88:fb:6c:99:2e:4a:c6:37:c7:8d:d6:ec:e8:ee:35:
d6:ed:80:4b:c7:0c:8c:0d:b9:71:0d:e6:a6:20:1a:d1:5c:70:
56:af:df:c6:c3:eb:17:90:28:36:f2:ca:ab:cb:56:f7:8f:59:
fb:fb:10:b6:b5:ab:20:8c:52:a4:81:31:f4:57:af:45:b9:c4:
e0:9a:db:ff:6d:79:36:59:82:a3:21:a2:99:d8:57:66:e8:2d:
1c:13:8b:70:03:7b:b5:8a:ed:d5:c0:55:7b:f5:7c:b9:d4:44:
22:ef:49:3c:c4:7c:55:bc:a5:b7:17:d1:3d:14:c8:da:02:7b:
4c:f3:ee:d3:ea:8a:56:27:ed:94:86:26:6e:96:7b:a7:76:8a:
ec:53:01:c9:45:7b:3b:7d:9a:60:bd:e0:92:ff:21:e3:17:8e:
a4:08:7e:81:3f:b1:10:55:22:90:81:f3:33:f2:16:e3:ea:aa:
4e:fb:f9:4a:75:6c:84:72:82:65:9b:c4:a1:1a:72:d9:77:10:
de:f7:8b:42:1f:0f:ad:37:74:63:f3:81:cc:cd:88:5a:21:4f:
82:0f:60:b9:c4:76:87:ff:1e:42:a3:34:24:c1:de:2a:47:7c:
23:34:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:09 2025 by rpki-client