Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa
File: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (raw, json)
Hash identifier: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=
Subject key identifier: B1:92:2C:7E:5D:92:1F:16:D8:80:1A:7A:C0:11:AD:84:E7:D8:77:B4
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019426D9F9184728B2A54B972FFF91273F44
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206685
IP address blocks: 159.255.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f9:18:47:28:b2:a5:4b:97:2f:ff:91:27:3f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1922c7e5d921f16d8801a7ac011ad84e7d877b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:f3:b8:fd:69:48:57:d0:2b:2c:bc:19:a5:
da:67:1f:2e:d4:98:3f:6a:aa:55:c2:54:94:cc:d2:
6b:6c:52:97:2c:c5:b1:f1:5a:20:18:47:8f:7d:3e:
ae:dc:31:03:0a:28:ac:74:4e:9b:b1:fe:a9:7c:2f:
a7:13:92:ca:50:c2:f8:cd:94:61:d6:4d:e1:3f:e9:
38:f2:6f:be:42:58:0e:04:de:f4:77:6d:00:cb:4a:
79:80:ce:c4:19:bb:72:25:8b:f4:db:f0:31:c5:fb:
f7:66:22:41:58:da:99:17:5b:1a:5a:f0:c8:6d:16:
b0:ba:1a:54:27:49:11:98:83:ae:c2:d3:e7:34:62:
f2:da:b8:42:9f:38:e8:3f:c3:95:57:c6:4a:29:fc:
e3:e3:9d:90:0e:7a:81:35:39:a7:9c:dd:43:c0:7a:
33:c1:a6:58:03:7f:c7:51:1e:b9:f5:28:72:72:08:
6e:e8:fd:6d:73:54:0c:91:bc:52:ae:e1:c3:60:75:
fd:b3:b0:08:91:dc:34:3d:ff:6a:9d:27:4a:5b:c5:
87:9c:3d:06:2f:30:21:a2:d5:9d:bb:8d:15:21:55:
ac:b0:05:99:ee:e8:f4:bd:0e:ea:13:67:7b:0e:88:
b2:fb:c2:76:41:9b:2c:51:70:ed:54:1f:62:30:bd:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:2C:7E:5D:92:1F:16:D8:80:1A:7A:C0:11:AD:84:E7:D8:77:B4
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7e:2f:1b:f9:d5:58:47:b6:86:5d:ed:09:a4:2e:5e:4e:dd:
22:d7:f2:59:99:4c:fb:30:5e:a4:35:1a:3a:d6:fb:15:47:32:
fa:2d:7a:b7:94:af:e5:55:17:e0:d8:f4:bc:c8:6c:a3:76:cd:
18:58:b6:89:49:49:81:2d:9a:a2:a2:17:31:6e:62:95:91:92:
09:98:fe:41:d1:8a:f6:0e:fc:4b:38:c9:a3:83:c4:79:84:7d:
9b:9e:20:b0:e9:c7:21:cb:a7:6e:4a:b8:13:dd:53:72:4d:fc:
27:84:5f:c2:6e:c7:7a:2e:7d:9c:7f:ac:8b:d3:13:0b:41:97:
83:a2:18:ba:75:d8:40:f5:60:48:dc:f3:e6:9b:0a:ef:38:6a:
04:90:ae:ee:b2:e0:3d:b3:c0:d0:e9:5c:19:6b:1a:65:9b:ed:
7f:5f:b2:0f:3b:ba:b4:9a:e3:a8:a5:90:76:65:15:7b:c1:9f:
32:cc:ea:91:e6:f7:b1:c2:ee:ce:0a:15:95:b6:ed:8a:e8:30:
20:56:e1:75:0e:70:d3:b5:ad:ac:b1:ce:09:ea:c5:db:1a:38:
78:b5:e7:3a:25:88:ce:1f:2c:97:17:88:80:b9:f7:4d:6a:b5:
78:d3:3d:83:16:1b:dc:83:64:79:72:a6:46:4a:f3:00:27:0b:
e1:aa:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net