Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa
File: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (raw, json)
Hash identifier: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=
Subject key identifier: 91:24:3F:47:96:7E:BE:C0:5C:B8:E5:F1:E9:68:5D:15:D9:A5:95:8D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 019422FB682ED59793C8849F794287E51380
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 143.55.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:68:2e:d5:97:93:c8:84:9f:79:42:87:e5:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91243f47967ebec05cb8e5f1e9685d15d9a5958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:1c:ac:b6:78:8d:0a:5c:a9:aa:52:87:4e:
d4:97:c3:e7:55:46:64:c4:f9:5d:64:17:1e:d2:2d:
5f:c3:91:6a:45:8a:97:76:1b:98:c7:72:d5:b1:64:
b3:3d:82:bf:46:34:21:b2:ee:d3:6e:e2:e6:0b:ae:
41:48:e0:e0:79:c7:4c:ed:45:77:52:df:6f:f5:0e:
fc:52:44:38:28:b5:cf:0d:92:90:48:66:49:dd:a3:
8e:e5:15:fe:2b:08:cd:75:08:f2:9e:a3:cf:97:20:
6b:8f:6f:67:bc:e9:15:43:e5:70:2c:55:08:68:db:
52:0b:cb:17:9e:dd:b7:c1:6f:4c:ca:d9:d3:82:85:
57:40:d2:a7:1c:56:ff:56:94:e2:c6:c4:74:b5:eb:
71:d1:6f:d4:b8:9a:6e:9f:b9:02:80:35:db:3e:06:
0e:6c:3f:35:0c:db:b8:dd:28:a6:98:bf:0a:9a:d9:
db:00:35:33:b3:d8:7a:1d:aa:cd:60:cc:67:20:75:
92:c3:05:42:c3:b3:69:d7:9d:96:00:0a:f3:51:d1:
9e:1b:ed:a9:c1:6b:10:ad:7f:1a:84:97:a2:d8:56:
f2:05:73:9e:26:8e:84:db:92:08:53:be:07:23:27:
43:ee:fa:22:84:02:11:63:92:08:f9:7f:ca:1c:24:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:24:3F:47:96:7E:BE:C0:5C:B8:E5:F1:E9:68:5D:15:D9:A5:95:8D
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.55.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d1:5f:37:bc:6a:b0:dd:a0:99:76:51:56:3c:08:14:e5:ba:
44:f9:1d:3d:ef:9a:20:af:79:fd:0c:9b:c2:b2:33:e4:ec:4e:
c2:47:9a:86:8d:51:fd:a7:02:24:b8:dc:3a:5c:7d:c7:70:05:
55:20:37:b9:50:ec:fd:0b:25:84:ca:fb:b1:e0:c9:8b:39:33:
da:a0:2a:b5:c0:f2:96:c4:bf:4d:4d:34:d5:23:7e:06:c3:59:
08:44:59:9c:1b:5e:55:7e:9b:61:14:07:39:8c:67:fc:01:8b:
d1:c0:04:a6:d2:08:8a:85:a7:27:13:60:7d:2c:81:ad:52:bb:
da:b4:43:6c:66:20:ef:c4:5f:03:47:02:56:c0:f3:e3:c5:2e:
65:34:2f:4e:f5:70:a0:3d:16:5c:62:56:69:d5:5d:52:c3:ce:
e0:ff:11:92:73:1b:25:93:18:28:cf:f4:db:8f:e1:22:23:89:
66:ca:28:50:55:54:1a:23:87:c0:53:5f:b6:80:21:eb:4f:7e:
c5:90:fd:13:3d:cd:fd:0b:a2:79:b8:d0:67:cc:9c:85:94:00:
1d:db:33:9f:c7:eb:d8:b9:6e:4c:2c:fa:1d:e5:d3:fb:a7:64:
23:79:fb:66:ba:87:fd:da:fb:40:19:39:ea:6a:0a:9d:e1:9f:
31:47:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:06 2025 by rpki-client