Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/SKlifCETEAFXBdWkk-WfdsNy0YY.roa
File: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (raw, json)
Hash identifier: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=
Subject key identifier: 48:A9:62:7C:21:13:10:01:57:05:D5:A4:93:E5:9F:76:C3:72:D1:86
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B6178945258B9A1B63C803CC308CD0
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/SKlifCETEAFXBdWkk-WfdsNy0YY.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56596
IP address blocks: 147.234.6.0/23 maxlen: 23
147.234.6.0/24 maxlen: 24
147.234.7.0/24 maxlen: 24
147.234.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:17:89:45:25:8b:9a:1b:63:c8:03:cc:30:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a9627c211310015705d5a493e59f76c372d186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:b2:b7:5c:e8:e6:4b:9a:58:82:78:ee:d9:
a2:d8:5d:eb:85:a9:e8:4d:ab:70:9f:09:7c:c1:99:
34:f7:71:86:8a:c6:9e:e1:de:a3:97:cb:45:f9:57:
8e:51:52:06:42:c1:c6:51:af:e3:1b:db:91:21:6f:
ff:ec:84:ea:c1:a8:8d:cc:cb:6a:d1:38:ae:67:22:
4b:90:05:c1:d9:b7:aa:23:91:d2:be:99:77:ae:78:
56:ed:26:05:01:1b:32:ef:01:22:00:4a:f5:d7:5d:
f0:60:d1:9b:52:d3:3e:c6:2a:3d:17:48:6d:d5:e8:
e2:16:82:00:64:f6:12:76:6d:56:f8:e5:5d:d6:d5:
75:76:b3:93:fe:c2:77:9b:51:96:38:52:0a:38:ec:
ef:33:22:c2:44:ad:48:31:ea:db:24:47:9a:ea:e0:
f1:55:e9:29:59:91:61:1b:74:cb:ec:46:b3:21:ae:
f3:51:1a:06:01:f5:c4:70:fa:55:6c:8b:72:08:81:
56:bf:38:0a:62:05:29:10:77:49:72:02:b7:fb:fb:
0b:fc:1c:90:73:63:e9:c1:8d:1e:23:91:63:08:e7:
da:dd:b5:19:d0:c5:a8:1a:5b:4d:04:d8:3e:49:44:
e4:4b:58:e9:09:85:2c:a8:da:d7:ef:3c:d5:f0:36:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:62:7C:21:13:10:01:57:05:D5:A4:93:E5:9F:76:C3:72:D1:86
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/SKlifCETEAFXBdWkk-WfdsNy0YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.6.0/23
147.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4a:a6:0f:f5:d0:ce:65:90:ae:cc:f3:06:70:af:cc:3c:f1:
ac:53:46:3a:15:55:f1:c9:28:93:d6:34:8d:ad:3f:d3:a7:6a:
09:0b:a2:da:e2:b2:11:49:3d:4f:9a:50:f6:00:ca:74:c4:61:
a5:4b:76:93:d4:e2:07:21:f5:34:8b:78:bc:81:cb:8e:8d:90:
91:18:7c:dc:b1:ec:40:71:6b:81:d8:e7:95:f0:4f:a3:4e:62:
7a:55:d3:20:91:e8:18:84:e6:88:6a:50:75:82:b7:32:57:e2:
ab:dd:99:e9:17:93:26:50:01:c2:5b:4d:79:cd:8c:2e:d1:ae:
fe:15:28:04:95:a9:f8:41:6d:d1:ea:19:fd:e8:bf:3e:41:8c:
67:19:cb:41:07:35:1d:a9:9c:10:cd:9c:6e:83:00:cc:6a:77:
f7:d0:09:42:8f:31:df:10:e0:95:24:59:a4:e6:0c:bf:3d:06:
fc:3b:49:f8:1f:87:7b:a1:05:ba:5d:c6:d3:57:8d:66:41:f1:
5f:85:9c:24:bb:37:65:ae:34:9c:96:13:e8:c9:db:87:e1:c6:
92:68:2a:96:54:2a:b0:a0:72:07:b5:c6:4e:85:30:be:9b:94:
f1:48:02:9a:0c:68:b7:cc:87:4d:e5:21:28:0b:23:0c:4e:3d:
f2:a3:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:43 2025 by rpki-client