Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MLOm3XO_ETCPpGpqVxv_9ZuAx9E.roa
File: MLOm3XO_ETCPpGpqVxv_9ZuAx9E.roa (raw, json)
Hash identifier: TLCNkAG0isUGdU0KMczP1cZqQkV61YxLWHQyamFT08Y=
Subject key identifier: 30:B3:A6:DD:73:BF:11:30:8F:A4:6A:6A:57:1B:FF:F5:9B:80:C7:D1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E613049A90B99A78F38ECA7AFD03
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MLOm3XO_ETCPpGpqVxv_9ZuAx9E.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15483
IP address blocks: 159.148.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e6:13:04:9a:90:b9:9a:78:f3:8e:ca:7a:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b3a6dd73bf11308fa46a6a571bfff59b80c7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:97:ff:21:3a:54:ef:00:ab:0d:aa:50:71:
3d:68:2e:41:8a:27:e8:0c:c8:37:84:b0:e8:56:60:
9d:38:42:16:12:a4:60:db:55:7e:e6:23:b2:d4:88:
f9:96:8a:a7:2e:0a:31:bf:2b:3c:5b:46:1d:fc:7b:
28:92:c6:9a:99:80:8c:f4:d7:c8:46:64:32:31:65:
5e:13:38:61:b4:f2:7f:b8:3b:4a:53:00:9e:cf:b4:
cf:d4:66:de:60:bb:db:9b:f1:78:34:27:ab:1d:17:
c3:c3:f1:6e:fd:a3:4f:0a:55:b0:0d:e0:70:7f:21:
9f:fb:61:36:69:a5:55:64:c6:8e:4f:12:22:f2:43:
b3:bf:4b:5f:c1:3f:d3:0a:3f:c4:4d:68:9f:b5:25:
a1:70:b2:c9:cf:79:d0:0c:99:85:43:0f:90:96:20:
35:58:de:fa:5e:18:9d:a1:1d:45:02:d9:d2:e8:6b:
70:1d:c1:03:2a:bd:a6:07:37:e5:a8:67:9b:64:64:
ec:e2:57:e3:c8:37:91:77:46:4f:67:2a:b2:8a:0e:
4c:4c:f4:70:33:b5:cc:41:b7:45:2a:1b:b3:78:a9:
a3:eb:5a:b1:dd:96:ef:5d:bb:7c:29:ff:5a:b4:2b:
3b:63:34:8c:43:6e:97:f0:31:42:ba:66:dd:d4:3a:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:A6:DD:73:BF:11:30:8F:A4:6A:6A:57:1B:FF:F5:9B:80:C7:D1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MLOm3XO_ETCPpGpqVxv_9ZuAx9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.160.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e4:30:4a:c5:31:65:94:26:d5:8a:28:9e:78:5d:b7:f7:a4:
cc:8c:48:b1:9a:d2:3d:d5:91:19:38:17:c8:0a:25:78:7b:d2:
a9:a4:42:0a:1e:80:2c:2a:85:f2:04:87:00:7e:4d:8c:04:f4:
d4:bb:40:9b:80:e8:6e:51:98:83:f5:47:96:11:25:99:35:c6:
1f:ef:28:12:1d:63:5d:0d:03:ea:7a:36:4e:d9:99:68:ea:95:
9a:6e:34:75:df:13:0f:0b:6b:e3:d4:14:78:39:fa:8e:89:f7:
07:1b:5e:ba:4a:51:fb:eb:f1:a6:b8:af:c9:2c:af:0a:c3:0f:
d5:3e:0d:41:33:42:90:e2:c4:b7:de:e5:0b:6b:66:ee:a2:26:
3c:8e:ef:4c:97:7b:bc:49:bd:80:fb:1f:ac:e7:62:81:59:eb:
5f:d9:2a:0d:2b:1b:be:85:61:37:06:80:55:4f:c8:cd:a3:ef:
f4:df:c0:fd:cc:62:ff:0d:9f:db:83:3d:2e:ed:be:64:a4:ad:
ec:9a:0b:a0:dc:3e:f9:33:d2:81:1c:ec:d3:28:9c:5d:c5:1c:
fe:8a:f7:75:d1:8d:fe:9d:0d:85:b3:b5:a5:7b:d0:78:1c:29:
4f:d7:ac:22:0d:5f:9a:df:9c:27:55:d8:fa:aa:bf:32:87:e8:
4d:39:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:54 2025 by rpki-client