Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1AoNeiFy7-T1Dq_4EIaBEOfZTaU.roa
File: 1AoNeiFy7-T1Dq_4EIaBEOfZTaU.roa (raw, json)
Hash identifier: Yp3kN0jq9Y8I5d+oqReH5Vaq5cQUSloF/3iaszuNSks=
Subject key identifier: D4:0A:0D:7A:21:72:EF:E4:F5:0E:AF:F8:10:86:81:10:E7:D9:4D:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B5EE64422234DCC465704D1C39B77DAE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1AoNeiFy7-T1Dq_4EIaBEOfZTaU.roa
Signing time: Thu 30 Jan 2025 06:38:06 +0000
ROA not before: Thu 30 Jan 2025 06:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.243.8.0/23 maxlen: 23
151.243.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:ee:64:42:22:34:dc:c4:65:70:4d:1c:39:b7:7d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 30 06:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d40a0d7a2172efe4f50eaff810868110e7d94da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:f3:87:01:17:01:39:5d:9d:0b:e0:c6:0c:
87:24:7a:3a:d8:5e:00:7a:a0:9c:24:90:53:6c:ed:
dd:6a:17:92:20:30:4d:aa:31:dc:98:df:18:b5:e7:
8c:1a:d3:a4:e7:56:dc:82:2d:67:45:98:52:e8:31:
4a:c5:b0:b9:56:8f:fb:23:9b:19:a7:ce:79:51:0d:
fc:a3:1e:c3:08:ad:97:37:28:e2:ef:58:b3:72:22:
d7:d4:d6:e7:51:d9:ce:e6:7a:0f:fa:5f:49:60:53:
97:47:d5:9e:fb:c0:cf:62:4a:d5:18:c1:b6:76:23:
3c:f5:f1:1f:97:4e:b5:ef:75:c8:f8:1c:64:19:1b:
c3:08:da:4a:87:61:a8:a7:3c:95:db:37:93:15:10:
c4:75:be:da:93:e3:cf:5e:75:2a:e4:55:82:a9:c3:
8c:3a:c5:94:0d:7a:c2:96:1d:37:94:a0:a9:c8:1d:
cb:d4:66:20:ad:49:ac:61:bb:15:23:d4:d6:4f:23:
2d:39:dc:bd:21:0b:da:56:43:2d:c9:aa:db:03:2e:
9d:d2:e6:dc:5e:23:a3:a3:c2:70:6d:1b:74:3f:09:
0e:16:ee:19:e7:cf:32:b3:64:0b:9a:e1:a2:ab:c1:
08:6d:b8:64:91:3d:9c:1f:2b:a2:50:86:a5:7f:69:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:0D:7A:21:72:EF:E4:F5:0E:AF:F8:10:86:81:10:E7:D9:4D:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1AoNeiFy7-T1Dq_4EIaBEOfZTaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.8.0/23
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:b6:98:a6:39:0f:3d:83:f4:48:ae:03:82:ee:44:81:fd:
f8:18:3e:37:57:f0:f3:8e:e0:07:a9:d7:45:69:7d:40:ec:67:
ef:90:d1:4b:56:4c:d0:81:94:be:fe:c8:48:56:4e:bc:e0:7d:
ca:f4:ad:5b:07:f4:b9:9b:c5:8f:b0:4a:9f:fa:59:21:2a:96:
87:c7:d2:80:2c:58:a2:42:d1:75:eb:60:f2:e7:5d:31:1a:57:
78:9a:32:5a:fd:9c:fc:40:6b:eb:0b:34:f1:b3:d0:5f:1e:cf:
00:f6:36:42:fb:8b:b1:a1:6e:33:a2:9c:02:c8:e5:4a:10:b2:
dd:b5:30:4c:25:7d:86:c7:04:8a:b8:35:15:7b:5d:1e:66:83:
47:5c:2e:37:09:48:e2:13:a5:7b:25:7c:eb:b1:8d:7a:92:5c:
e3:b3:70:3d:54:ab:c4:7a:a8:dc:3c:7a:b6:14:e0:c1:40:a8:
c8:e6:0e:5e:41:cd:ce:1d:28:55:ed:f8:b1:8a:aa:25:28:f7:
5e:65:4c:ac:a6:73:6f:51:07:d4:84:16:cd:ee:e4:89:e0:71:
0d:12:bb:96:99:52:7a:c7:63:f3:d6:68:b5:7f:ad:a3:99:12:
5d:cc:a6:66:d8:18:87:f0:1c:30:fb:49:d4:d0:5c:05:bc:55:
15:0c:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:49:18 2025 by rpki-client