Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lHpBDckqa07-PnL7fQJDFEG_JY.roa
File: 7lHpBDckqa07-PnL7fQJDFEG_JY.roa (raw, json)
Hash identifier: eShzOuXFVA0Bcx76Tqw6pYQwi5bl1BAHW8iGLMJPtK4=
Subject key identifier: EE:51:E9:04:37:24:A9:AD:3B:F8:F9:CB:ED:F4:09:0C:51:06:FC:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01955B1C0E8B0BFDF2462CF1837B3C56FD57
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lHpBDckqa07-PnL7fQJDFEG_JY.roa
Signing time: Mon 03 Mar 2025 08:25:19 +0000
ROA not before: Mon 03 Mar 2025 08:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 151.242.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:1c:0e:8b:0b:fd:f2:46:2c:f1:83:7b:3c:56:fd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 3 08:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee51e9043724a9ad3bf8f9cbedf4090c5106fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:54:9e:f3:a3:ce:af:02:08:0f:ef:84:14:
6d:35:cd:a7:53:c8:f2:b0:01:89:a4:aa:60:19:3f:
3a:1b:c6:be:51:be:cd:96:c2:fd:fa:73:74:f0:a8:
1e:0b:7f:af:3d:28:76:87:1e:e3:1c:8e:85:68:c6:
23:82:67:87:9e:e6:86:63:eb:d4:e1:02:f8:0c:d4:
bc:16:cd:de:d9:bb:14:e6:4c:7f:e6:ea:81:e3:1c:
76:d6:86:a5:b9:f0:85:32:79:d7:56:c1:87:ec:3a:
b3:fa:64:48:e5:1f:30:7e:42:93:67:f1:13:ce:95:
ee:4c:10:21:28:07:71:1c:a0:a0:b8:54:28:be:3c:
d8:3a:a2:38:ce:22:43:66:7a:29:02:1a:ba:0b:f1:
52:47:80:db:3d:d6:d8:2e:44:67:b4:a9:d5:91:b5:
32:aa:f7:1d:1f:79:21:7b:42:55:09:af:59:1d:18:
65:72:4e:f8:d5:f3:be:0e:5c:f0:d5:c4:ad:1c:fb:
b0:a2:5f:3d:d8:01:17:71:0c:73:6d:fc:3b:0d:cd:
a4:67:f0:a1:c1:86:89:62:45:40:7a:e5:8e:39:27:
b8:bd:93:a6:f6:7c:3d:f9:c5:87:be:af:c5:9c:16:
22:27:7e:58:59:22:29:1a:1f:47:ec:16:28:9a:9b:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:51:E9:04:37:24:A9:AD:3B:F8:F9:CB:ED:F4:09:0C:51:06:FC:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7lHpBDckqa07-PnL7fQJDFEG_JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.66.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2b:da:d1:ba:5d:34:08:0d:28:7f:3c:a0:9c:1f:eb:14:7e:
89:f7:09:f7:b6:a0:9f:cc:2a:6a:2f:1b:ff:90:7e:96:66:6c:
5d:ad:e4:02:58:d1:2f:9b:f7:8a:d2:d3:20:06:69:48:14:30:
21:27:7e:62:a0:8f:59:05:96:c8:5c:d5:44:42:1c:8c:96:e4:
cb:99:6c:b9:af:03:f9:eb:f7:72:a2:15:7d:d6:c6:dc:41:3d:
0c:2c:d0:84:ee:32:a0:11:f5:ed:17:9f:1a:b1:6c:06:13:26:
4b:29:91:f5:dc:e4:fc:13:b5:1a:13:a9:20:7c:0b:37:9a:b9:
bc:93:a2:bc:95:18:bc:2b:71:0b:09:bc:65:61:4a:c4:2b:1d:
41:de:e1:00:cc:b5:8c:98:10:3d:67:55:8b:0c:1b:02:19:f1:
fe:07:ae:5f:1f:32:b8:2d:db:6a:85:14:2c:dc:85:5b:46:78:
ce:07:25:3c:31:61:f6:50:e3:20:50:62:a0:2b:18:ef:2c:54:
61:75:52:9c:63:7a:49:d0:7c:36:bc:01:59:33:14:f4:3c:9e:
a7:6e:6a:78:51:a5:5d:48:28:7c:5a:12:93:5f:e0:53:bd:8a:
f6:75:f5:78:bf:d8:07:2a:bd:88:72:c5:85:b5:68:fc:12:30:
b0:21:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client