Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uuYsyTR-fWPUvZcZ2AcewBee8nM.roa
File: uuYsyTR-fWPUvZcZ2AcewBee8nM.roa (raw, json)
Hash identifier: aqvmWV8S5Pgbx/DjAc3OXeYB79gEi1I6emTTZvX21dg=
Subject key identifier: BA:E6:2C:C9:34:7E:7D:63:D4:BD:97:19:D8:07:1E:C0:17:9E:F2:73
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01958AC3E92B32DC70340C77149991EAC88B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uuYsyTR-fWPUvZcZ2AcewBee8nM.roa
Signing time: Wed 12 Mar 2025 14:30:49 +0000
ROA not before: Wed 12 Mar 2025 14:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 159.148.137.0/24 maxlen: 24
159.148.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:c3:e9:2b:32:dc:70:34:0c:77:14:99:91:ea:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 12 14:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bae62cc9347e7d63d4bd9719d8071ec0179ef273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:d3:b9:fe:d9:78:c2:6b:73:e5:0c:a0:30:
0b:8d:df:2b:aa:c2:e8:b1:31:3b:ef:d1:72:04:c0:
95:7a:11:5c:82:73:13:21:23:58:c8:a1:66:ae:e1:
e6:10:26:a2:9f:02:a2:d8:f6:a7:c8:58:e4:6a:4f:
2e:79:b5:7b:cc:e7:92:91:16:96:7b:73:99:35:c5:
ba:9e:ee:6c:04:4c:49:af:69:52:fe:08:00:46:dd:
70:b2:d1:9d:a9:76:11:a0:59:ef:4e:6f:af:8f:08:
45:8a:e9:33:1b:46:f1:1c:78:44:49:c9:d9:ab:fc:
e7:2a:d9:3b:fb:d0:dc:f4:21:54:66:2a:45:ff:0f:
51:03:77:4d:d4:56:c9:bf:10:bd:3a:ee:e9:c6:f3:
17:b6:ec:31:21:30:6b:c9:ff:57:f4:87:0c:09:99:
1f:70:43:08:4c:a5:ae:cc:40:7f:88:b8:e2:43:6b:
e8:2b:b6:f4:5e:0e:9b:35:ee:b8:2a:55:34:4e:d3:
ac:56:56:4b:39:32:41:28:78:ee:66:32:5b:6c:d3:
de:ab:19:f1:ea:6d:c0:95:bd:f6:c9:60:96:b2:15:
3d:69:ec:a7:20:f2:65:a0:d5:62:f7:1d:b6:3c:0a:
52:5f:3d:53:d9:71:54:fa:f4:47:d1:e7:9b:7a:4a:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:2C:C9:34:7E:7D:63:D4:BD:97:19:D8:07:1E:C0:17:9E:F2:73
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uuYsyTR-fWPUvZcZ2AcewBee8nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.137.0/24
159.148.225.0/24
Signature Algorithm: sha256WithRSAEncryption
27:80:c2:ed:8f:6d:9e:d6:db:26:a9:e6:1e:aa:8a:98:db:d2:
cb:61:9f:32:6d:d4:e2:9a:82:7a:84:89:76:b1:10:9c:de:27:
aa:ff:ac:96:3f:57:56:8d:4e:62:10:91:fa:ec:4f:f0:55:3f:
65:be:53:05:9b:61:d3:7f:d5:53:7b:c0:1a:7f:24:96:7b:1e:
16:1d:65:1a:99:28:2f:96:56:bb:45:bd:c7:83:3d:83:fa:e0:
9c:2c:43:d6:2f:85:bc:13:2c:ee:da:c8:be:bf:52:66:58:c9:
c3:2e:b0:71:37:59:96:24:29:8f:ed:bb:b2:36:2d:47:a0:76:
20:26:8f:ad:62:d5:6f:e2:b2:7f:80:ec:e1:08:62:e5:ac:b2:
95:21:77:c4:32:6f:8a:7f:01:9d:ab:f0:17:61:36:e9:93:2d:
84:81:25:cf:9e:c3:4b:20:a7:46:b9:9e:27:0f:21:c5:24:2e:
d6:99:95:93:34:08:d2:15:6c:61:2d:53:da:a6:c7:d4:22:c9:
38:cc:cf:f0:5a:7c:1c:b0:a2:41:9e:2f:7c:c5:b3:a3:9a:8e:
c4:02:d9:41:7c:65:f0:72:6b:c8:a2:24:3a:9a:ac:11:ae:2f:
0e:d8:ed:cd:ff:50:5e:2d:df:91:d9:8d:fc:d7:53:02:ed:09:
a1:65:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:02:36 2025 by rpki-client on console.sobornost.net