Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa
File: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (raw, json)
Hash identifier: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=
Subject key identifier: 3E:EF:41:4F:0B:A3:EF:76:35:39:86:44:12:36:34:64:71:F8:1F:0D
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019426D9679CBE209B9294DF6497E581AAA2
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8851
IP address blocks: 159.15.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:67:9c:be:20:9b:92:94:df:64:97:e5:81:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eef414f0ba3ef76353986441236346471f81f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:ee:bf:cc:ae:04:04:47:f6:0c:55:a3:ed:
ac:7d:56:21:ec:65:1b:8a:e9:85:80:3d:5d:5a:28:
32:a3:4b:90:3c:b4:87:90:5c:2f:2e:99:25:87:ba:
28:7c:5d:34:cc:55:5f:39:97:94:27:ad:73:2e:fc:
8b:08:f2:fa:31:a1:42:3b:46:fd:07:37:3d:5c:5b:
1b:e5:78:44:a0:8e:b6:4b:cf:c6:7e:7c:56:80:4a:
90:30:4e:59:8e:0e:f3:9e:b4:4c:36:de:e8:e9:11:
39:8c:d8:45:df:eb:8b:52:3d:80:49:01:d3:b2:87:
5d:71:4a:73:2c:b0:67:fe:99:ed:f6:05:f7:89:ca:
e5:e8:8e:16:0c:26:50:f3:5f:20:37:9e:c7:c9:91:
47:da:27:c5:85:b9:b4:b9:2b:2a:b8:46:c1:b6:50:
93:39:16:61:73:36:29:55:49:78:48:99:2a:1d:18:
79:20:22:fc:c7:4f:cc:d0:14:c3:7b:bd:af:15:7c:
63:4a:1f:54:f0:2d:42:cc:06:51:b2:46:0d:cc:ed:
bc:d7:e0:5f:27:3a:39:c3:d0:a1:b8:ad:89:12:6c:
0d:c1:a2:b8:e2:6d:1a:f4:64:ed:10:b2:fc:42:57:
ca:ab:09:e7:73:73:9e:ce:66:6e:dd:6c:0c:cb:4a:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:41:4F:0B:A3:EF:76:35:39:86:44:12:36:34:64:71:F8:1F:0D
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:a3:0c:04:29:4c:42:7e:62:22:85:0f:9d:ce:75:14:ac:ee:
0f:80:5d:9c:fb:bd:b2:16:62:18:1d:1a:aa:0c:53:f2:f4:2c:
53:d1:e3:d7:76:da:7b:c4:1c:7d:76:b1:d8:b0:74:a6:fb:08:
0f:0d:8e:56:c8:28:4f:ce:cd:a7:8b:63:b2:5b:3b:1c:5e:30:
49:f9:40:c3:41:a7:d9:a3:c3:fe:91:62:69:dc:18:4c:7d:29:
36:9b:90:f7:e3:bf:5a:58:be:59:d1:5c:c0:a4:34:4a:d1:35:
81:04:a4:26:58:93:75:ab:c4:af:0d:02:f3:d2:3a:c9:91:21:
7a:a2:53:87:e3:6e:78:55:eb:f6:ae:7b:a7:03:d7:df:08:35:
29:62:57:8b:73:4f:af:e4:c7:88:0d:87:6d:ad:19:7d:b2:b5:
c6:7b:d1:a5:8b:79:a9:37:15:97:57:5b:dc:01:30:1d:98:d3:
93:96:64:4b:c0:74:55:91:48:86:cf:bf:e7:ad:9e:37:67:fa:
e1:16:3c:c2:6c:2b:67:3d:ba:c1:66:07:e2:32:97:10:fc:26:
16:a2:da:34:90:a7:89:45:49:02:2a:a8:70:98:d8:e9:22:5f:
54:d7:69:65:95:65:dd:39:0b:de:9b:72:11:ad:95:a8:03:71:
c1:c9:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:10 2025 by rpki-client