Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Ube254XC5M4yaLxIsTFk91SnnE.roa
File: 0Ube254XC5M4yaLxIsTFk91SnnE.roa (raw, json)
Hash identifier: hwa9a7mZqGLItJ8JBlzlPY2EFt4xMdvo8A7FUi/e2yA=
Subject key identifier: D1:46:DE:DB:9E:17:0B:93:38:C9:A2:F1:22:C4:C5:93:DD:52:9E:71
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282809BFB6BD65B2B79C7301DFD9591A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Ube254XC5M4yaLxIsTFk91SnnE.roa
Signing time: Thu 02 Jan 2025 17:55:00 +0000
ROA not before: Thu 02 Jan 2025 17:55:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8672
IP address blocks: 151.251.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:09:bf:b6:bd:65:b2:b7:9c:73:01:df:d9:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d146dedb9e170b9338c9a2f122c4c593dd529e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:d3:e2:85:10:7d:51:d7:22:c7:ef:1e:4c:
7d:5b:0d:cf:03:49:47:a2:f0:db:00:38:73:42:ff:
6a:e3:50:e2:b2:85:98:d5:1d:06:ac:16:0c:ae:52:
75:2c:8a:c3:14:88:2e:b7:9d:b3:a1:16:b0:a8:80:
2a:5b:5f:9d:f0:9b:7c:d4:49:59:49:62:b4:01:2d:
47:95:b1:6e:2d:d9:93:66:39:d9:6a:15:d7:4f:fb:
1d:46:df:77:f4:c4:80:0f:61:77:3f:b8:f8:da:eb:
cf:0c:2d:c6:96:1d:6a:82:d0:9e:9f:ae:46:19:11:
3e:72:30:a2:aa:e9:f2:d6:8f:9e:e4:f9:25:02:8b:
1e:0f:b6:c1:10:54:be:57:70:34:0e:8f:31:64:f1:
9f:22:e1:5c:c5:c9:63:bd:13:07:bc:9c:53:7f:86:
53:9a:72:d1:46:72:cc:f3:5d:92:e5:ae:01:78:2f:
b6:df:a1:43:f5:7b:db:4a:e3:78:36:6a:41:7d:e8:
50:87:12:0c:87:98:9a:3c:71:04:89:a0:9d:4a:88:
67:66:b6:dd:d4:99:78:cb:92:35:ff:9e:72:54:c2:
04:8d:3d:1f:89:ea:0c:cd:3c:e9:ca:44:75:1d:4f:
15:41:85:0c:25:b2:98:97:58:57:21:0e:e0:5d:4b:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:DE:DB:9E:17:0B:93:38:C9:A2:F1:22:C4:C5:93:DD:52:9E:71
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0Ube254XC5M4yaLxIsTFk91SnnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.39.0/24
Signature Algorithm: sha256WithRSAEncryption
58:90:7a:14:23:1f:1a:f1:48:89:8b:5f:33:f0:48:1b:70:09:
8e:a3:51:83:ec:55:a3:1b:68:6f:9f:75:02:29:47:ce:5c:e7:
18:59:3e:1a:14:77:37:b0:13:3b:51:05:50:82:df:eb:9e:13:
09:67:bc:f6:d0:fa:b9:c5:ed:ef:ce:ba:35:66:24:5f:0f:52:
ef:c9:d9:5a:33:ce:04:bd:4a:f3:d7:de:12:8a:0e:84:42:6f:
3b:1e:5d:ce:9d:91:f0:0c:71:a7:46:50:a1:db:03:4c:36:04:
f7:6c:ad:12:2b:24:e2:ec:82:3f:63:ba:18:e7:b7:20:eb:50:
f7:ec:1c:82:82:8c:a9:25:21:88:9e:f6:27:d9:9a:0b:2f:03:
b9:24:f4:f6:98:d0:b4:14:ca:75:12:e1:c4:ee:0b:41:23:d3:
56:bb:b0:7f:9a:e2:ac:e4:d4:09:4b:fa:3d:e0:50:1c:2e:95:
cc:77:5e:0b:71:16:a0:0c:2b:3b:21:e7:2a:b3:74:9c:28:77:
d1:12:06:e2:6b:f5:b4:22:f5:49:30:c9:65:ec:63:48:93:f1:
58:2d:2d:07:97:43:c1:d4:02:6b:8a:4f:9e:f9:8a:2c:cb:57:
5d:1b:51:ea:be:eb:42:dc:05:04:1d:79:ec:88:3b:de:96:86:
fa:c6:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:51 2025 by rpki-client