Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa
File: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (raw, json)
Hash identifier: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=
Subject key identifier: B3:F5:99:AE:D1:CE:94:D7:7B:C2:49:14:84:51:AA:D9:E8:F0:0E:24
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019420D618BFCDD3C48466A6E22AD1498AA6
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29399
IP address blocks: 159.146.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:18:bf:cd:d3:c4:84:66:a6:e2:2a:d1:49:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f599aed1ce94d77bc249148451aad9e8f00e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:a9:b5:59:0a:ea:fc:5a:6f:91:78:6e:a0:
c7:86:0e:ff:c1:e4:fc:5d:5e:2c:3c:3c:22:d9:57:
19:80:de:a3:68:0b:02:3a:46:04:b8:b8:ff:ad:81:
38:44:94:23:2a:5e:1e:2c:da:e5:4e:2e:e2:9c:6c:
41:fc:2a:2c:e0:4d:aa:91:33:90:6e:b7:e7:f2:21:
5f:76:08:af:ad:24:15:c9:f8:f1:fd:56:2f:d5:55:
c7:8b:86:c8:30:e5:1a:91:e6:88:c6:a8:fd:13:67:
0f:02:af:79:dd:c5:c6:62:29:b9:e9:ff:14:a5:90:
fc:05:3b:1c:b2:8b:ed:14:f0:2c:d5:6c:f6:b8:9b:
7f:f1:a0:9e:c9:36:3e:3d:c5:60:8a:da:b6:5c:73:
26:65:da:55:5d:86:e9:f3:8f:2f:e9:5d:8f:83:9a:
e3:b6:4b:a3:66:0c:d5:68:bd:9a:39:7e:3a:69:c6:
e1:aa:51:e5:a4:10:a0:8f:3e:c7:8d:73:1f:5d:b0:
da:1e:69:a7:19:43:16:73:17:c5:a5:6f:fc:65:9a:
9a:e2:1e:4c:6b:09:9f:36:a4:81:cb:81:92:1a:e0:
f5:32:b5:c9:53:07:51:87:48:6a:15:c2:73:b1:40:
29:92:65:42:2d:b7:83:07:ba:aa:a3:45:4c:2a:04:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:99:AE:D1:CE:94:D7:7B:C2:49:14:84:51:AA:D9:E8:F0:0E:24
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.146.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:62:71:66:e2:31:4b:9d:c4:88:d4:ec:48:5e:40:53:5b:e0:
da:fe:c8:e3:3c:93:75:a3:67:79:4e:6d:31:7a:14:bc:bd:30:
e7:ca:0b:69:f3:ec:43:ac:3a:46:34:a3:f9:12:ec:0b:9d:aa:
3e:12:e6:e8:fd:cb:1d:76:ba:e4:fe:2d:ef:05:18:f8:dc:3d:
e9:51:36:69:74:3f:33:c5:5c:e8:dd:e5:b2:be:c7:fa:be:09:
07:5a:e9:da:da:9c:f5:aa:88:fa:bd:d7:01:1e:bb:90:c0:c4:
75:0a:bb:0e:20:6f:06:29:28:cb:6d:03:67:3a:94:f7:b8:d5:
18:94:b5:fc:0a:5e:e8:0d:5e:a0:bb:b3:7b:b7:02:e4:e1:51:
33:eb:8c:c4:6f:5d:54:97:ca:25:a3:a5:c3:40:bb:e5:e1:e4:
53:b5:ce:27:d1:c8:1a:1d:3a:79:c1:1c:00:f2:28:74:14:94:
27:59:66:7b:13:1a:5d:fa:55:e0:91:13:11:3b:48:23:cb:c4:
31:17:6f:f0:b2:48:6f:19:e7:d6:45:2f:9f:3e:cf:3e:fd:4f:
32:ca:ec:da:83:94:5e:ee:e7:7d:05:9e:94:2b:bc:05:fa:11:
29:79:18:75:06:25:6b:69:3c:15:85:88:74:55:10:96:a9:18:
26:37:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net