Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/tXaCAurW2gGTHINoOjZh72dEXKU.roa
File: tXaCAurW2gGTHINoOjZh72dEXKU.roa (raw, json)
Hash identifier: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=
Subject key identifier: B5:76:82:02:EA:D6:DA:01:93:1C:83:68:3A:36:61:EF:67:44:5C:A5
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 0194214442C47AADD19030F3D9497CAE42FB
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/tXaCAurW2gGTHINoOjZh72dEXKU.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 164.153.132.0/24 maxlen: 24
164.153.133.0/24 maxlen: 24
164.153.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:c4:7a:ad:d1:90:30:f3:d9:49:7c:ae:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5768202ead6da01931c83683a3661ef67445ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:a3:16:5d:61:3b:19:89:81:4c:cc:9e:47:
9c:d1:a5:fb:96:43:e2:44:00:10:f8:b5:e5:88:a7:
3f:bd:cf:78:eb:db:20:13:26:f4:85:7d:20:5c:9d:
9a:e1:5b:21:b9:48:b8:80:4a:06:41:3d:7b:df:d4:
8e:28:bb:fa:a7:7f:fb:dd:d8:1a:11:d2:35:35:49:
09:f6:b1:38:97:b4:40:22:f2:71:39:c2:a0:94:8d:
55:16:1a:70:1e:ed:4d:1b:03:b9:b0:8f:ec:7d:17:
74:2b:ef:77:e4:a2:1e:b0:1c:12:4a:28:2f:82:3e:
1d:1f:25:8b:53:51:b8:20:f9:81:2e:1e:46:fe:94:
d9:b1:cc:ba:c2:0b:f0:fe:a6:05:37:67:17:c0:3a:
45:d9:ae:42:6d:c6:4a:21:e2:ea:b8:8a:97:1f:84:
c4:c4:62:43:16:de:81:0b:ff:1d:02:a2:f5:b4:7d:
5d:f5:21:84:f0:1f:14:af:72:e6:52:7e:4a:32:5d:
cc:76:a6:39:98:4d:53:e0:eb:ef:91:2c:6c:d4:4f:
4e:94:c9:81:45:3f:f0:35:87:c4:ac:c0:b8:59:54:
64:5e:07:de:b0:09:5e:56:ef:84:ad:64:e5:16:c0:
e1:b5:0d:4e:16:0f:93:cf:e4:7d:ad:f1:ef:98:21:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:82:02:EA:D6:DA:01:93:1C:83:68:3A:36:61:EF:67:44:5C:A5
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/tXaCAurW2gGTHINoOjZh72dEXKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.153.132.0-164.153.134.255
Signature Algorithm: sha256WithRSAEncryption
74:c3:37:80:e5:ca:3d:62:1b:23:b8:d1:35:ce:10:a7:90:c1:
a6:78:ae:8a:78:52:76:8a:ed:88:39:2d:83:e6:ce:9e:43:c2:
10:45:c2:eb:ec:1e:c7:46:04:31:7b:ae:3e:72:87:33:6b:aa:
00:f9:ad:3d:37:42:46:5a:69:56:6f:60:54:21:51:92:03:0b:
be:40:2a:e5:18:83:5a:4c:bd:06:d0:ef:0a:36:87:fb:dc:0f:
5d:93:ec:5c:95:e3:5a:92:be:21:d9:29:27:00:9d:36:f2:eb:
86:c2:1e:01:09:3c:5a:92:22:83:6d:3c:e7:ee:1e:40:6e:d2:
c7:40:72:ac:16:80:85:d3:0f:31:70:6a:eb:05:26:48:ed:d8:
14:2b:ac:ed:2f:a2:6c:db:50:7e:52:4f:87:d6:b1:fd:11:98:
02:b9:33:7c:f8:dc:2f:fa:c7:f6:ed:b9:07:d9:7b:d4:76:5e:
d8:fb:20:e4:36:2b:02:92:78:b1:eb:e6:5c:92:26:fc:08:e3:
8c:2e:9a:45:94:6f:96:2d:07:2f:2a:3c:ac:5e:d7:57:56:4d:
cc:69:84:f8:94:8b:72:69:2d:f4:bb:e3:1b:e1:61:cc:c0:66:
99:1f:0e:cb:5f:ab:60:a4:e5:15:bd:c0:42:a9:1f:59:2c:38:
40:21:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:47 2025 by rpki-client