Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1h_JQjRYo-tAqzyEjQBfFmM0Cb8.roa
File: 1h_JQjRYo-tAqzyEjQBfFmM0Cb8.roa (raw, json)
Hash identifier: B7hsRQay/vRylbV709U4t7zBRO/vCfo3BOVVyHeeM9w=
Subject key identifier: D6:1F:C9:42:34:58:A3:EB:40:AB:3C:84:8D:00:5F:16:63:34:09:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019439DFD9BE3F2D9F6E6DA139BD2EED46A0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1h_JQjRYo-tAqzyEjQBfFmM0Cb8.roa
Signing time: Mon 06 Jan 2025 04:29:19 +0000
ROA not before: Mon 06 Jan 2025 04:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153377
IP address blocks: 151.243.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:df:d9:be:3f:2d:9f:6e:6d:a1:39:bd:2e:ed:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 6 04:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d61fc9423458a3eb40ab3c848d005f16633409bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:b9:f3:50:5d:57:6e:72:4d:5b:0c:7e:33:
05:1c:05:0b:90:68:cf:be:a3:2b:80:13:f2:b0:f2:
6c:91:08:d4:a3:40:17:b1:4f:4b:98:be:6a:e8:8e:
11:1e:5b:88:dd:53:c4:ef:03:52:ef:12:21:22:e7:
02:48:f3:b1:b0:2a:4f:8d:b1:fc:81:be:93:4a:92:
30:45:9e:d8:32:ff:35:7f:6d:be:7a:67:aa:2d:7b:
ca:8c:2d:72:a6:e6:a5:de:17:d1:c4:09:54:89:c5:
80:66:a4:b2:1e:99:ba:67:f1:63:b5:61:98:33:b2:
18:6e:f1:d0:18:46:f1:73:ba:94:78:ab:52:f4:7c:
7a:06:a3:af:bf:3c:a0:b8:d8:9a:dd:c1:6f:f2:35:
31:db:8f:a3:48:5e:e4:1c:d6:60:f5:f4:1c:58:af:
bd:34:57:89:0d:59:50:75:82:af:e7:b4:8c:b7:d6:
ef:06:82:cf:f9:66:2a:8e:21:b7:cb:39:ec:b2:a3:
91:60:0a:9b:47:97:f7:4e:10:c9:88:5b:b0:ba:7b:
d4:26:a4:a7:32:dd:68:04:6e:17:dd:cc:98:30:df:
1b:61:e2:e4:74:22:90:69:71:25:9f:88:a0:f9:34:
bd:4b:59:86:6e:5f:8c:78:e2:76:e4:2e:a7:14:ac:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:C9:42:34:58:A3:EB:40:AB:3C:84:8D:00:5F:16:63:34:09:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1h_JQjRYo-tAqzyEjQBfFmM0Cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a8:94:4b:86:39:43:a8:58:cc:8a:82:ca:fb:27:88:97:2f:
4d:c6:24:a7:98:e7:ed:7f:ba:df:9e:5c:c4:72:d7:40:0e:cd:
46:96:e1:fe:73:12:85:9d:0f:e0:ea:5e:b9:4f:41:08:ab:58:
71:46:9c:f8:73:50:eb:ce:f2:17:ad:4b:60:d0:d3:2f:95:15:
96:e8:86:d8:63:a0:d5:89:81:e7:62:30:b6:6c:35:5b:1a:c2:
a3:c6:0a:90:a1:31:c1:b7:09:8a:cf:7a:5b:d1:c2:a5:d3:0b:
5a:24:15:07:84:bd:23:d9:cd:e1:54:d4:42:e1:79:4a:78:c5:
2d:33:b4:97:ab:ce:75:86:81:fb:2d:26:e4:65:87:f0:45:3f:
69:9a:df:68:5c:38:ab:8a:97:fe:9a:0f:fa:96:5e:23:a0:29:
2d:2f:ab:46:48:3c:4d:fb:c7:0d:ce:0d:da:a5:da:cb:fe:19:
c6:c6:b1:1c:6f:a5:39:47:ab:26:17:99:8a:99:19:94:9c:59:
6f:3a:01:c2:2b:43:b4:5a:39:de:fc:3e:29:47:a6:f4:1b:ee:
82:d5:93:f8:fe:e6:50:20:f6:9c:32:7f:60:b8:6f:89:6b:27:
da:55:23:62:b1:8d:16:42:3a:01:83:88:d9:07:81:be:11:f5:
7f:f5:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:44 2025 by rpki-client