Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa
File: pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa (raw, json)
Hash identifier: 2zQqYCNz+ENrqctrE57v3LCQOLHRix/k/wGkfpVsZTY=
Subject key identifier: A6:44:81:B5:96:B6:9F:9E:0E:43:D9:25:90:0E:09:17:37:C3:EE:A4
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0194DA08A4988922CB8BAC34D23339761D54
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa
Signing time: Thu 06 Feb 2025 06:53:06 +0000
ROA not before: Thu 06 Feb 2025 06:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 37.49.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:08:a4:98:89:22:cb:8b:ac:34:d2:33:39:76:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 6 06:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64481b596b69f9e0e43d925900e091737c3eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:02:1e:4d:24:bb:5f:fa:ee:be:ae:99:4a:
14:87:70:c6:fc:ab:18:7a:ae:a0:49:15:14:bc:2f:
2e:47:19:3a:1e:3e:27:a8:09:ac:b9:ce:cf:3b:3c:
53:2b:6f:68:04:d1:38:a4:dd:fd:13:66:67:22:02:
38:5f:1a:fc:03:6c:56:6d:03:3b:6f:8a:b6:d3:aa:
9a:df:aa:35:aa:18:ae:a1:5d:e3:e2:0b:c3:e7:4c:
b6:34:84:a6:4f:6d:91:25:2d:9b:8a:cf:2c:4d:0d:
f1:46:85:e1:eb:78:3a:ef:c2:7c:fb:9a:af:1c:37:
4b:63:9d:5e:22:a4:9c:d7:e4:2b:64:63:4b:5a:6e:
ab:c8:c6:91:b8:f2:b2:74:ea:49:e7:1c:1b:56:3c:
6d:ea:18:53:3b:53:b5:17:57:4d:e7:ed:df:87:7e:
57:dc:48:9a:a5:f7:f2:9d:36:26:25:6a:ca:aa:0b:
aa:fc:2d:d3:49:bb:eb:27:fa:17:43:87:55:87:5c:
b1:f2:1d:8c:7c:ff:f0:68:e1:d3:6a:db:c7:06:47:
d2:73:fd:b8:69:6b:3c:cf:64:aa:c7:34:77:89:73:
da:79:23:5b:36:19:a7:87:1a:5a:aa:6e:da:df:f6:
6a:6e:cd:df:7c:63:6b:21:92:a9:b0:ef:f6:4e:e3:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:81:B5:96:B6:9F:9E:0E:43:D9:25:90:0E:09:17:37:C3:EE:A4
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6e:24:00:07:89:03:00:2f:c5:a7:12:29:2e:66:32:9a:d5:
e7:8e:cf:80:76:70:9e:65:b1:0c:50:2f:15:87:c9:78:c3:7a:
7e:4b:dd:db:5a:41:ff:bf:25:9a:66:53:aa:8d:f2:3f:4c:98:
36:7d:4e:78:e7:c8:d8:6d:d4:d2:85:e1:a2:c5:69:f8:7a:0e:
55:70:74:63:cc:ec:2d:b2:b9:47:ce:d9:40:aa:2b:1b:07:45:
33:9b:1d:dc:49:5e:1c:66:08:26:8d:3b:ba:f5:6e:d3:22:1a:
7d:a3:52:b6:2d:fc:b0:40:61:27:fb:5e:b5:75:4a:06:7c:9c:
bb:8f:d9:69:dd:6d:38:ac:ff:39:db:1a:a8:28:74:c7:9c:2e:
0d:76:c7:c2:c8:29:6b:50:e8:33:97:59:5d:b4:a3:d6:8e:9a:
37:7c:e9:14:5c:e8:5f:b0:c1:be:50:cb:c4:d1:2e:67:8c:51:
53:e6:28:a9:ae:4c:58:6e:1b:95:ef:69:24:e7:99:f8:3a:da:
ec:5f:63:7a:ed:54:8a:e2:59:df:bd:23:30:80:9d:14:f0:8d:
d5:fd:ef:4d:dc:7d:74:d9:81:e7:4d:1a:b3:b0:2a:d7:07:7f:
2f:95:35:57:2d:13:dc:61:3c:d4:4e:17:fc:35:d5:72:10:90:
f5:6b:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:30 2025 by rpki-client