Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/337e3OH_sZZ__GFHnHCVfunc8FU.roa
File: 337e3OH_sZZ__GFHnHCVfunc8FU.roa (raw, json)
Hash identifier: JEND5yItY3Jz08t9HpPLxEuIOIYErdx/5s5vM93l7kI=
Subject key identifier: DF:7E:DE:DC:E1:FF:B1:96:7F:FC:61:47:9C:70:95:7E:E9:DC:F0:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01952D1D3138827A94C553F60E534FCEA16C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/337e3OH_sZZ__GFHnHCVfunc8FU.roa
Signing time: Sat 22 Feb 2025 10:04:02 +0000
ROA not before: Sat 22 Feb 2025 10:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 151.243.2.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2d:1d:31:38:82:7a:94:c5:53:f6:0e:53:4f:ce:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 22 10:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df7ededce1ffb1967ffc61479c70957ee9dcf055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:2b:8f:cb:77:63:b8:b1:00:70:cb:14:73:
ba:d7:a8:84:96:6e:1e:8a:a2:81:d5:8f:d2:33:8a:
84:d2:be:43:99:9e:c7:3a:4f:c5:1f:cf:6e:de:d7:
9a:f5:2f:7a:c7:8b:ac:28:39:2b:ce:31:2c:9f:19:
6d:89:f1:1d:cc:de:49:fc:04:e5:92:78:90:bd:c0:
b2:f1:b4:9e:83:f1:15:60:55:08:cf:c8:1e:e8:c1:
2f:d2:bf:19:aa:d7:21:46:46:b7:ee:6c:49:eb:bb:
5a:b0:8b:f6:90:54:97:f0:3b:d7:f5:bb:ab:8b:cc:
fd:ee:ca:61:25:40:04:2e:93:b4:d5:ea:71:cb:28:
8d:d6:41:0d:7f:67:ca:53:b1:ef:1f:95:89:b6:2b:
10:49:a8:50:2f:9f:2b:72:90:97:ca:05:90:fd:d0:
9f:a7:9d:05:15:b2:8f:e3:3f:05:39:7a:05:b3:f6:
83:b2:d9:3d:16:f2:ba:23:93:17:ff:ce:e3:52:14:
93:87:a3:0f:85:eb:1c:81:b0:11:02:3a:57:71:47:
e3:74:4d:e8:d7:cd:2e:f2:86:8d:26:2e:fe:0f:1b:
0d:e4:1a:14:05:be:18:9d:67:b3:7c:5d:de:41:b4:
ce:4c:32:19:87:b4:d2:a3:9c:24:fb:65:aa:eb:37:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7E:DE:DC:E1:FF:B1:96:7F:FC:61:47:9C:70:95:7E:E9:DC:F0:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/337e3OH_sZZ__GFHnHCVfunc8FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.2.0/23
151.243.10.0/24
151.243.35.0/24
151.243.37.0-151.243.39.255
Signature Algorithm: sha256WithRSAEncryption
35:ff:94:fa:45:c2:55:30:e4:8e:b9:6c:b9:b1:7e:dc:da:48:
55:73:a9:94:b0:48:81:56:f4:5c:fe:08:f9:90:3c:3a:0d:cb:
da:23:f2:83:ff:7b:2a:cb:ed:0f:af:ae:53:ec:e0:bc:18:93:
5e:91:37:67:96:de:86:31:1b:5b:6b:a9:75:3d:c0:9f:00:90:
26:53:00:32:9f:78:29:f6:0d:1c:5d:4d:8e:76:c7:73:3e:9e:
62:bb:87:ad:33:c5:c2:1b:2c:eb:29:a0:ea:47:ce:a6:9a:9a:
85:0e:3f:18:2e:10:bd:e1:01:3c:88:4b:f7:b7:2c:30:68:d5:
ed:e5:65:34:8c:47:ee:5c:58:eb:49:4b:fa:58:7b:2c:07:8c:
3c:71:ff:a8:68:f9:83:68:ad:c5:f8:e5:13:95:de:b1:af:30:
0b:d8:d2:46:e0:4d:e1:b8:50:a1:f6:0e:6c:f4:3c:02:6c:65:
cc:eb:e4:03:42:c4:7d:5f:34:82:29:93:25:0a:e7:6e:c4:74:
cc:f6:f0:f0:88:50:e4:76:a1:68:f3:c5:85:b0:46:f6:2d:35:
e0:f9:7b:41:1e:ec:82:a1:39:e5:c1:b1:ec:20:95:39:b5:83:
65:ff:3e:74:cc:e4:2f:41:02:9a:84:c9:ea:e3:91:79:61:6a:
0e:3d:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:11:03 2025 by rpki-client