Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/75ugYqhICIZmZqpMRV1MdS-0vkg.roa
File: 75ugYqhICIZmZqpMRV1MdS-0vkg.roa (raw, json)
Hash identifier: PkZAfGeAPuatHseNfIVqx8wsZD4+UH0SfrQu8gpYiB4=
Subject key identifier: EF:9B:A0:62:A8:48:08:86:66:66:AA:4C:45:5D:4C:75:2F:B4:BE:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195A28EEB5969D3CAD0FE1650031E00A43C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/75ugYqhICIZmZqpMRV1MdS-0vkg.roa
Signing time: Mon 17 Mar 2025 05:23:50 +0000
ROA not before: Mon 17 Mar 2025 05:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214140
IP address blocks: 151.242.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:8e:eb:59:69:d3:ca:d0:fe:16:50:03:1e:00:a4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 17 05:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9ba062a84808866666aa4c455d4c752fb4be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:b0:51:b6:72:a7:7b:d1:ec:30:f2:a3:10:
00:6a:cf:d6:c4:66:de:26:b2:94:e4:a4:cb:93:e8:
16:36:cc:30:23:97:a2:27:28:54:03:60:60:9c:28:
e7:83:97:1e:64:3c:ea:fa:81:37:2f:1f:b7:9c:d9:
27:59:a8:7f:cc:75:67:ff:6d:22:5d:dd:bf:e3:9f:
fc:cd:48:c8:80:d0:26:e9:32:20:30:7a:ab:1a:c9:
e0:c2:75:bd:5e:0c:68:8a:68:15:aa:73:a4:4a:90:
02:ad:e6:ea:b3:68:9b:4d:61:62:6a:bd:db:38:a4:
8d:81:56:36:73:5d:0e:c7:26:b0:d0:61:09:85:05:
e1:73:5c:55:6c:c7:13:31:0d:58:20:73:d5:33:3a:
84:62:87:d7:38:0d:66:b5:5c:ae:b7:36:ff:7f:45:
7b:ae:cf:41:a8:ad:64:db:e1:a5:fd:33:0d:d2:83:
2f:87:ba:d3:c4:47:71:71:59:81:58:9d:0e:0b:f1:
60:99:24:21:e4:76:dc:e8:44:ea:6a:5a:db:70:c2:
16:ca:e1:57:cd:7a:24:19:78:d8:43:d3:2a:70:30:
1b:5b:b3:e9:be:8b:5c:eb:ec:31:ef:50:3d:7b:12:
e1:97:a4:5f:54:1f:07:20:d4:a2:c8:14:82:8d:54:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:A0:62:A8:48:08:86:66:66:AA:4C:45:5D:4C:75:2F:B4:BE:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/75ugYqhICIZmZqpMRV1MdS-0vkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.38.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6f:40:d6:e3:7d:75:57:1b:0c:5e:55:61:ca:47:00:05:a7:
4e:c4:5a:3e:f7:f6:5d:85:4a:3f:1b:ef:14:4b:48:26:ee:00:
40:5e:f2:69:10:aa:26:f6:88:a2:8c:b9:fa:7a:4d:a6:61:b3:
09:13:87:62:28:47:79:a9:52:9b:ff:f2:e0:39:a6:28:10:47:
a4:bc:80:0b:48:9c:c4:0b:72:8c:a2:c1:e8:01:4a:2a:0c:9e:
e6:a2:58:cf:ec:b6:7e:88:d1:ec:e1:e6:94:d4:e9:1a:ce:5c:
e5:04:13:17:25:a4:8d:76:0c:22:56:92:b7:e6:a7:3c:e9:b4:
29:66:6b:44:d5:6a:4a:b7:8a:5a:52:65:d5:b9:55:dd:df:50:
5e:be:a5:19:d9:15:a8:db:c8:54:c6:12:fa:b8:4f:aa:29:fb:
36:31:b3:90:5f:ad:93:34:8f:64:23:54:6f:19:1b:6f:05:05:
c7:96:d2:ba:7a:8f:aa:21:fe:2e:9b:d5:5e:94:82:fa:dc:db:
d1:aa:98:60:32:96:de:6a:3b:36:0a:92:da:e8:80:1a:91:57:
a3:66:d6:46:68:3e:1d:72:e8:b7:f4:89:74:8d:cf:43:d5:2b:
b3:90:8f:bf:28:70:0b:24:a2:d4:ec:77:94:a6:f2:cc:4d:95:
d3:8f:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:52 2025 by rpki-client