Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/psNnDsOb3MJQFpyT8HfsVNSnwog.roa
File: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (raw, json)
Hash identifier: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=
Subject key identifier: A6:C3:67:0E:C3:9B:DC:C2:50:16:9C:93:F0:77:EC:54:D4:A7:C2:88
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019425FD7CFCFA639D14B6655EFE5E30CBD0
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/psNnDsOb3MJQFpyT8HfsVNSnwog.roa
Signing time: Thu 02 Jan 2025 07:49:17 +0000
ROA not before: Thu 02 Jan 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 144.2.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7c:fc:fa:63:9d:14:b6:65:5e:fe:5e:30:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c3670ec39bdcc250169c93f077ec54d4a7c288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:b7:0e:9b:9c:bf:14:5f:f1:37:4d:bd:53:
1a:89:03:45:9d:0e:23:07:d5:fa:e3:ee:0c:bb:9b:
73:eb:7e:0e:0b:14:24:59:dc:8f:7f:6d:8b:ac:a6:
93:1c:da:da:6a:e1:a1:73:28:43:3f:d2:3e:d2:89:
3e:b2:2e:c1:c6:b1:ca:ce:6b:6a:76:e6:9a:f7:44:
e4:f6:38:64:f8:39:05:30:5c:d9:a3:62:55:2e:bb:
21:3a:66:f0:f1:4b:e9:b9:55:86:0d:e3:8e:8a:6f:
6d:40:f8:04:48:82:a8:c9:8f:c5:c0:cd:f9:5b:b2:
9c:8d:9f:b7:a9:ee:fd:ab:69:2a:5e:47:18:c9:b6:
08:fa:77:0c:e8:99:b8:2c:85:75:42:15:44:0e:07:
99:d8:7b:ee:d9:27:bc:20:17:b2:42:a7:ae:52:29:
a8:c3:65:66:00:e6:4e:52:9a:39:bf:3f:50:46:b5:
ed:64:01:3b:07:82:b5:0c:63:11:77:4f:d8:f6:f6:
6a:55:df:01:24:ce:ff:b8:fd:84:28:1d:9a:0d:7e:
04:e5:15:7d:23:97:3c:70:cb:d3:60:2f:be:11:02:
47:71:98:b8:be:83:a9:a6:70:25:2d:3c:6f:2f:04:
a6:66:7b:42:ab:25:06:4e:5e:18:ae:1b:06:2f:de:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:67:0E:C3:9B:DC:C2:50:16:9C:93:F0:77:EC:54:D4:A7:C2:88
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/psNnDsOb3MJQFpyT8HfsVNSnwog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.154.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f3:46:32:1d:c1:28:95:66:6d:69:81:12:94:62:bc:29:85:
1b:80:46:27:00:ce:1a:54:1a:90:5a:48:0e:3a:ba:30:cf:0f:
7c:37:e4:06:55:aa:ba:5b:33:e9:b2:f4:b1:b4:26:37:1a:27:
d8:e4:e2:03:7b:31:95:17:1c:0e:cc:64:ba:96:f4:06:ba:56:
23:56:9e:dc:bb:8b:7e:f7:e1:3d:3f:8d:e2:46:3b:a0:6a:dd:
da:f6:f1:6e:3e:a3:2f:49:45:7f:84:bb:a0:de:b6:bc:98:f4:
e4:d6:e2:77:88:b2:f4:50:8d:d1:d7:ad:5f:a5:87:0a:5f:e6:
38:05:56:f8:36:e3:6b:2e:f4:82:c8:77:2f:65:68:66:a2:e5:
ab:14:74:39:5c:8b:d4:12:35:7b:e3:76:1e:5a:bd:8f:29:9c:
a1:8f:28:31:61:df:79:4a:e9:f6:ae:16:a7:1a:bb:83:99:dd:
a9:dd:2d:a1:a8:e9:38:a1:ea:4f:1f:85:6b:cc:b3:73:dd:2f:
eb:69:4f:ae:7f:0e:4a:6e:ed:d1:e2:de:62:87:89:95:1d:4c:
1a:2a:cf:ac:8c:ca:19:39:fb:6d:b4:d3:bb:37:87:14:07:a2:
80:ea:79:a8:51:1e:ab:99:04:fb:8a:ee:ea:ba:3a:37:50:ac:
6f:a0:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:15 2025 by rpki-client