Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa
File: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (raw, json)
Hash identifier: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=
Subject key identifier: 57:F8:E7:EB:C2:EB:30:75:EC:B3:87:99:E2:CF:8E:BB:70:F4:B9:47
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 0195140C7CA908285A74846F2768103D1A1E
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa
Signing time: Mon 17 Feb 2025 13:15:17 +0000
ROA not before: Mon 17 Feb 2025 13:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 159.253.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:0c:7c:a9:08:28:5a:74:84:6f:27:68:10:3d:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Feb 17 13:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f8e7ebc2eb3075ecb38799e2cf8ebb70f4b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:89:b2:6f:6c:9f:35:bb:f8:ad:2a:61:e6:
5c:66:85:7c:71:01:88:08:3c:3f:6f:8e:24:32:1b:
92:e4:5d:30:1d:fa:8d:30:98:b4:f4:41:32:1d:b9:
b6:35:c3:14:ea:74:79:c1:72:23:4b:27:66:d6:84:
d0:eb:ac:e0:00:7d:a4:53:ac:19:ab:33:d3:ee:ea:
e4:3a:d8:d9:d5:6a:79:36:9e:49:06:71:37:2c:57:
0a:d5:4e:3a:be:e8:ca:80:df:46:38:ec:97:b1:6f:
cb:15:c5:82:94:be:fc:c1:26:83:c8:be:9c:98:ac:
4e:b1:71:66:97:ad:42:37:ba:86:2f:03:10:8e:8a:
84:f4:57:32:2b:c1:ce:d2:93:de:9f:49:ab:8d:35:
d3:a0:df:83:20:db:ce:fc:10:be:aa:c9:93:72:cd:
32:b6:91:43:9c:3f:5b:52:74:0b:c7:07:cc:7c:95:
4e:4d:af:26:e9:eb:d8:39:56:0c:0a:b7:e6:ff:14:
1c:2d:93:77:03:77:d4:a7:7a:2a:21:d1:81:91:0e:
f0:e1:e8:60:57:83:51:f0:37:ba:29:38:e0:35:42:
69:76:3f:6b:00:ac:05:d4:b2:43:5d:5f:81:e2:6d:
33:b5:13:da:25:82:40:8c:b4:3e:42:52:fc:40:f3:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:E7:EB:C2:EB:30:75:EC:B3:87:99:E2:CF:8E:BB:70:F4:B9:47
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2d:98:62:ce:da:15:09:e1:92:6c:15:77:9b:76:5f:d7:6c:
2b:26:c0:44:74:22:03:3d:98:a4:8c:31:da:ac:88:c5:d9:ef:
16:1d:00:aa:c8:8f:fc:9d:9d:95:28:5f:3b:20:0d:ec:27:0c:
05:cb:ba:7a:b0:a4:69:0d:4c:93:1f:b6:e2:68:00:69:a7:7f:
db:ea:2b:cd:93:54:bd:03:4f:aa:2f:ff:50:34:a8:16:63:05:
a2:f4:d8:ea:74:4e:29:5e:9c:ad:0b:77:a1:15:be:41:d0:c7:
9a:85:9e:6a:b4:b6:25:30:39:9f:cf:2e:2b:32:79:81:73:61:
2d:9b:8a:86:f2:fc:16:cf:ec:7a:fc:35:59:91:74:cc:c5:99:
df:4b:47:71:91:fb:89:ab:14:d3:55:6b:e7:2a:98:7e:37:23:
fe:9e:56:e9:50:47:87:dc:d3:5c:dc:12:71:2f:a7:27:97:9b:
56:94:22:aa:eb:98:55:6f:14:d1:10:2e:70:0c:85:a4:f7:6d:
b2:32:62:81:bc:bd:8a:43:61:5c:5e:50:15:df:b8:ee:82:b9:
91:01:cf:96:87:6f:f4:bc:b7:ac:10:8f:0b:5d:3c:b1:d8:c4:
3b:78:1f:f7:63:a5:11:94:05:59:09:ce:01:9c:73:1f:dd:e5:
13:ef:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:48 2025 by rpki-client