Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/60W-NBk3253Bk_GEI2gKgd_BE8I.roa
File: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (raw, json)
Hash identifier: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=
Subject key identifier: EB:45:BE:34:19:37:DB:9D:C1:93:F1:84:23:68:0A:81:DF:C1:13:C2
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 019421444317BCA0525376464E743DA82729
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/60W-NBk3253Bk_GEI2gKgd_BE8I.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212727
IP address blocks: 164.153.132.0/24 maxlen: 24
164.153.133.0/24 maxlen: 24
164.153.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:17:bc:a0:52:53:76:46:4e:74:3d:a8:27:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb45be341937db9dc193f18423680a81dfc113c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:96:fe:2b:39:fa:8a:88:40:e0:88:fe:67:
cb:a9:8e:33:c2:44:5e:ef:70:a6:d0:21:4b:c6:7c:
65:6e:3c:7f:9c:bb:65:0c:db:4e:3d:85:ef:16:6b:
da:98:c2:a3:e7:e2:e6:de:79:01:af:20:9f:90:68:
1e:64:e0:8a:ab:01:31:b5:66:dd:32:3e:7e:d0:64:
8b:de:3b:b8:b7:67:27:95:1e:9b:6c:74:28:34:97:
44:ca:b9:4b:91:c7:f8:40:d0:ff:b9:7a:7c:29:79:
21:97:07:82:2a:44:02:14:b9:82:d5:8a:c6:3b:bc:
92:f1:63:fb:61:7e:ae:88:01:32:41:4b:93:4f:71:
5d:ab:9e:1d:db:d9:a7:6b:dd:90:5c:51:9e:9d:a8:
73:9d:2b:28:4e:de:0d:d4:c9:47:52:df:38:08:e3:
aa:1c:7b:91:2b:01:2e:0b:45:cd:46:13:37:68:20:
83:f2:5e:5e:05:07:a2:06:5c:4e:3c:42:c9:f4:aa:
a4:b8:c0:15:ce:90:68:f0:96:21:a2:91:81:40:c0:
59:94:91:06:c1:32:5e:40:f7:d8:2a:ce:01:98:61:
b7:3a:a2:f6:a4:6a:8b:3b:75:33:dd:59:75:ad:8f:
9a:d5:c0:aa:a3:5d:64:22:a8:ff:73:4d:d4:d9:6e:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:BE:34:19:37:DB:9D:C1:93:F1:84:23:68:0A:81:DF:C1:13:C2
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/60W-NBk3253Bk_GEI2gKgd_BE8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.153.132.0-164.153.134.255
Signature Algorithm: sha256WithRSAEncryption
5c:30:76:b3:3b:9a:30:fa:f8:e4:70:cf:29:a0:6e:88:51:13:
75:16:12:5b:cb:12:48:a7:65:10:53:fb:c2:92:63:c7:ca:ca:
55:82:20:6d:cb:f5:0d:a6:08:6e:80:7b:2f:57:f1:bd:92:2c:
dd:0c:34:09:a3:c3:dc:e2:e6:18:d7:c7:a4:ec:7b:2a:6a:4a:
1e:a6:c7:7a:9f:b6:3d:9c:67:2e:79:c6:07:45:98:53:a3:9c:
4a:55:91:7d:ce:a5:b4:57:22:46:63:bc:e9:c4:60:0d:14:51:
d6:cc:61:cc:74:63:92:00:d2:13:1d:17:16:71:b7:c3:e3:46:
1b:5a:59:66:8d:f0:4c:98:06:59:e7:b5:2b:bb:73:3e:23:59:
ee:5b:8c:8c:5f:6e:a4:95:71:ee:b9:a4:9a:aa:5f:e8:8f:39:
a0:f7:08:ab:be:60:1b:eb:c0:21:72:8f:1e:25:e0:55:b4:45:
ed:e5:2d:ff:8a:de:c4:b9:a0:95:1e:c8:c5:87:0e:b2:a4:49:
68:3b:7b:4a:67:0e:e3:f2:1b:84:81:bc:9a:3f:3a:68:67:8f:
16:57:da:c5:6b:64:14:46:59:26:16:c5:38:f9:8b:62:b1:54:
85:ea:54:0c:76:71:34:80:f1:e8:83:6f:df:27:72:48:2d:d3:
0b:36:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:04 2025 by rpki-client