Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/_f_Xv9ycUf0HBKupRr9Uzw8Ddxw.roa
File: _f_Xv9ycUf0HBKupRr9Uzw8Ddxw.roa (raw, json)
Hash identifier: uERbdquO58tMxnwfWXwlVsjH2jwzHyFovdXzONM6qxQ=
Subject key identifier: FD:FF:D7:BF:DC:9C:51:FD:07:04:AB:A9:46:BF:54:CF:0F:03:77:1C
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 0194FB1B60046DDF0111FA7BDEAADB7486B2
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/_f_Xv9ycUf0HBKupRr9Uzw8Ddxw.roa
Signing time: Wed 12 Feb 2025 17:01:02 +0000
ROA not before: Wed 12 Feb 2025 17:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
159.101.240.0/22 maxlen: 22
159.101.252.0/23 maxlen: 23
159.101.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:1b:60:04:6d:df:01:11:fa:7b:de:aa:db:74:86:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Feb 12 17:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdffd7bfdc9c51fd0704aba946bf54cf0f03771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:bf:47:87:70:15:5b:c5:5c:f5:d3:b5:6f:
93:98:2d:6b:18:4a:98:a7:21:cc:18:f7:2f:1f:8e:
9b:7b:94:6e:1b:3d:5b:46:7a:5d:1d:fb:74:42:ab:
79:f1:7b:cc:f4:ea:b0:4f:0a:17:8d:14:1a:d8:32:
5c:85:5d:2b:69:68:a6:9c:90:31:ff:6b:07:a8:68:
86:d3:fe:9a:9a:b1:67:40:e6:be:62:19:33:85:82:
7a:e1:05:83:35:13:08:c4:14:1b:01:b7:de:f1:a4:
3e:ed:bb:08:79:24:d2:e0:e1:05:f2:1f:47:2d:15:
0b:b1:f8:3e:de:3f:4a:3e:fc:13:44:95:f9:e5:01:
64:72:59:83:1a:cc:2e:ec:23:fe:b4:a3:67:39:21:
b6:92:30:8c:16:5f:77:7e:b0:9a:8c:6e:84:eb:9b:
de:0d:db:4b:c6:60:e8:77:7d:37:31:bd:a8:56:1e:
4f:97:db:12:51:74:f0:c8:76:de:d2:9c:3e:f3:f6:
cf:d5:c8:f7:ab:dc:3a:31:71:e1:91:ab:d6:f3:cb:
4a:b7:a5:59:26:64:45:38:63:0d:cf:57:3f:72:73:
f7:bb:30:8a:7e:37:03:8b:d2:d4:d1:6e:a9:8b:57:
54:48:b3:df:96:3e:fe:b8:d7:f4:68:88:35:1d:41:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:D7:BF:DC:9C:51:FD:07:04:AB:A9:46:BF:54:CF:0F:03:77:1C
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/_f_Xv9ycUf0HBKupRr9Uzw8Ddxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
159.101.252.0/22
Signature Algorithm: sha256WithRSAEncryption
be:25:81:67:21:e7:3c:52:96:68:1a:b7:42:13:70:2b:ba:f4:
1b:ff:9d:fd:75:24:53:92:c8:d9:2e:77:e6:b5:be:6a:21:0d:
99:92:fb:44:93:8b:92:c6:1f:6d:05:46:6a:b7:c6:42:ca:32:
dc:63:50:a0:af:ba:44:a7:a4:b8:26:0b:07:c1:66:34:ba:1b:
51:b1:5e:54:c9:b0:a5:bc:cb:c6:53:6a:fa:5b:b3:62:0d:44:
da:26:24:33:1e:8a:67:33:d8:80:87:5d:fd:11:87:c1:00:98:
8e:75:7a:1a:fb:14:e6:5e:77:72:6c:07:cf:22:ad:bc:71:7f:
15:f2:82:a1:75:cf:74:8a:e6:37:b8:f6:8c:c9:1e:ba:02:73:
19:2c:96:c0:5b:18:8c:71:6b:6a:79:f9:ab:b5:70:f5:93:4e:
4d:4d:63:1b:1c:c4:c0:68:cb:44:17:64:8e:7a:89:e8:92:66:
e9:58:78:bb:ac:a4:6a:e9:0f:2c:f3:da:2f:b4:61:e3:c2:17:
d7:3d:83:d7:bd:dc:f8:c4:79:ad:dd:d7:3a:ef:df:75:67:55:
e7:8b:ce:e6:e1:47:bf:92:0a:af:c4:07:7d:ad:cb:82:26:3b:
bd:72:74:a8:4e:c5:56:e1:e6:7a:5c:41:2d:7d:8d:ad:aa:69:
7d:3e:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:02 2025 by rpki-client