Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa
File: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (raw, json)
Hash identifier: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=
Subject key identifier: 46:11:B0:AA:B5:D6:A0:77:5F:FE:EE:57:C3:C4:F1:6C:FB:7B:5D:79
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019428261FC5057D26873F6D504ABC682F05
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1f:c5:05:7d:26:87:3f:6d:50:4a:bc:68:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4611b0aab5d6a0775ffeee57c3c4f16cfb7b5d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:f3:0f:c7:52:8d:9d:3c:b1:27:15:dc:5b:
12:ce:a1:0d:1e:f7:9f:e6:16:a8:e9:45:18:a9:a4:
bf:2b:a4:8e:f7:c2:be:e0:d4:a8:9a:b6:31:e0:e3:
ea:f7:1e:67:d4:de:60:c6:20:34:80:f4:cf:4d:62:
a5:ef:02:95:5f:50:01:05:a7:29:f0:06:15:96:e5:
78:c0:44:7f:fb:86:4d:57:c5:3b:f8:dc:4e:8a:6d:
ce:22:b3:6e:94:7a:71:5e:d2:98:02:73:40:0d:0e:
14:cd:48:16:af:38:2a:03:f2:3b:0f:54:ac:d0:75:
68:cd:b0:10:3b:71:0e:80:30:df:d9:2f:ea:a8:8c:
6c:36:39:93:57:f3:73:9c:81:ce:4e:b8:30:f5:07:
49:fa:f8:de:05:44:75:7a:71:ac:83:d2:ff:59:95:
04:29:28:a4:70:1e:b1:4e:b6:90:88:66:22:b3:32:
07:a5:5f:ed:2a:eb:91:31:29:ef:c2:96:fa:d2:bc:
0c:a6:8f:ef:93:d4:4c:23:8e:a2:d1:d7:7a:59:aa:
a8:67:59:5e:44:ca:a1:b0:fe:9c:27:0c:84:e7:76:
7f:9a:29:b3:33:06:dc:79:ee:0f:34:0e:08:b0:9a:
8c:bc:15:b0:f9:23:fb:35:b1:90:ad:09:b7:ca:7c:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:B0:AA:B5:D6:A0:77:5F:FE:EE:57:C3:C4:F1:6C:FB:7B:5D:79
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
0b:5d:9c:8a:03:a2:52:b4:ac:16:6a:2f:42:3b:03:83:3c:2c:
2c:5a:e7:32:ef:b5:a5:f7:07:8d:2e:a5:b5:2a:ee:ee:de:a7:
9d:5a:b7:bc:5d:64:66:94:28:f2:3a:82:1f:2e:55:4f:96:9d:
21:dc:2f:b8:f6:78:69:c6:69:da:f6:2e:02:f3:20:7f:c4:5f:
ff:e5:5c:d8:c1:61:52:c8:7d:6a:f0:0f:fd:82:4c:c1:4e:51:
69:b1:32:37:98:83:6e:60:72:25:50:a5:27:f2:d9:b9:b4:84:
d0:fc:34:a0:a9:af:53:e5:e3:b2:25:38:0f:5a:cd:a8:24:68:
f9:ca:8d:c6:0c:34:e2:9d:d8:48:07:be:d2:98:25:db:cd:fb:
9b:e7:49:b0:d6:54:b2:a2:2b:b0:10:17:63:04:69:a5:ba:8d:
2b:b1:eb:38:30:b2:d8:57:57:01:0c:dd:9c:17:f3:43:60:32:
a0:63:25:e0:64:ff:fd:38:f4:62:3a:4e:3c:13:df:c3:8c:47:
3e:4f:06:a1:7d:6b:e9:04:f1:dd:c1:ce:38:fc:c7:e0:5b:5a:
71:20:a8:14:a5:b3:37:0d:66:8c:bc:fc:fa:d1:2e:f6:fc:3a:
04:c6:cf:f7:75:49:33:18:de:a4:08:f1:17:8f:f9:f9:42:f3:
60:30:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:30 2025 by rpki-client