Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/0se6oPOZ9FSI_6qzearxcjxlYSY.roa
File: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (raw, json)
Hash identifier: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=
Subject key identifier: D2:C7:BA:A0:F3:99:F4:54:88:FF:AA:B3:79:AA:F1:72:3C:65:61:26
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 019425FDE97EE18990BE73B6EBE39CA73CED
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/0se6oPOZ9FSI_6qzearxcjxlYSY.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 185.36.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e9:7e:e1:89:90:be:73:b6:eb:e3:9c:a7:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2c7baa0f399f45488ffaab379aaf1723c656126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:a0:9a:7b:cd:8b:aa:39:d7:77:35:01:21:
ec:96:5f:e6:01:21:54:e1:36:e6:4b:a2:cb:0a:2f:
44:5d:5a:f7:89:b5:19:8f:ce:ef:34:05:1b:6b:45:
b0:b6:99:c7:64:d0:a7:56:4f:5f:77:58:11:13:f8:
3a:8c:dc:78:90:99:5d:24:00:15:3d:6b:bf:3b:72:
99:56:5e:a9:54:1a:7a:cd:26:76:44:24:62:a5:13:
e2:ea:04:49:2c:bd:85:b6:1e:f7:6f:5e:2c:79:7a:
dc:79:23:b3:7f:e0:1a:14:2b:e1:34:3d:5d:6d:e9:
66:18:b8:d4:b2:e0:1e:cf:e8:c3:54:0b:d5:56:a6:
7e:e9:99:6b:de:ef:3f:de:85:c0:68:2e:47:68:4e:
61:54:62:65:09:e9:63:f0:60:43:91:93:d6:28:54:
ee:ac:26:b5:e5:aa:a5:46:75:5a:8b:e6:0e:50:8f:
e0:f5:2b:b2:cf:a2:82:0b:46:fa:59:43:9c:81:38:
be:75:e3:4b:a8:9a:60:93:e8:9b:5a:fd:95:5d:72:
c7:2c:2d:6b:03:3a:fc:ff:16:b5:4e:eb:15:88:84:
02:41:8b:9a:49:d6:e8:c1:69:e4:b7:80:e7:37:1c:
3c:06:6a:bb:ed:2e:a4:03:32:8e:71:60:d0:01:0c:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:BA:A0:F3:99:F4:54:88:FF:AA:B3:79:AA:F1:72:3C:65:61:26
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/0se6oPOZ9FSI_6qzearxcjxlYSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.147.0/24
Signature Algorithm: sha256WithRSAEncryption
63:50:c1:55:cf:ab:59:f9:77:23:11:aa:0d:be:2a:d3:33:09:
21:87:1b:3a:2b:fb:d2:8e:82:41:55:2d:dc:15:b0:53:09:1e:
d1:96:9e:15:0d:80:c6:2d:cc:fb:97:41:b2:de:1d:18:23:05:
23:85:c4:ea:a3:2f:1e:5d:56:c9:e1:a9:6f:90:7e:af:dc:4b:
b7:06:34:6a:91:d9:b2:8d:8e:23:dc:07:b7:26:75:cd:31:ba:
6a:cf:4a:8b:e3:2c:d6:fb:0e:05:93:1e:13:c8:d9:5c:37:08:
c6:38:93:68:01:51:59:43:b9:1c:7b:05:b5:8b:ea:42:1a:0d:
09:c9:eb:d7:fe:16:15:5d:85:c5:b7:2a:ea:93:7d:fe:c9:9a:
d8:96:5f:34:17:ef:03:f3:f3:9b:e3:6c:ab:0e:15:73:eb:7a:
62:f2:1e:3f:30:ae:b0:47:a2:e5:d8:c4:03:65:f0:52:49:90:
2b:de:df:13:6e:f5:7a:61:a1:66:66:c3:30:60:d3:6e:19:11:
81:42:c2:f8:ad:dc:cf:25:81:a0:3b:83:0d:a4:97:87:b0:e8:
42:6d:f4:fa:73:ff:50:11:c9:d8:14:d9:c5:17:c1:6d:e4:d6:
bb:d3:8a:c7:47:9b:c0:4c:7f:ca:c1:23:ea:03:90:84:da:d1:
d1:34:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:43:18 2025 by rpki-client