Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9mWK-QpDYyQfpD12KIqnimgDZnw.roa
File: 9mWK-QpDYyQfpD12KIqnimgDZnw.roa (raw, json)
Hash identifier: LDB2qN8V+EGbH1jRahJCRmrEdbaYroJ4+pK7voePEns=
Subject key identifier: F6:65:8A:F9:0A:43:63:24:1F:A4:3D:76:28:8A:A7:8A:68:03:66:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CFB66D1CDA5FBCB8326804CFA9FDC378
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9mWK-QpDYyQfpD12KIqnimgDZnw.roa
Signing time: Tue 04 Feb 2025 06:47:06 +0000
ROA not before: Tue 04 Feb 2025 06:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:b6:6d:1c:da:5f:bc:b8:32:68:04:cf:a9:fd:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 4 06:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6658af90a4363241fa43d76288aa78a6803667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:13:41:c6:91:40:f2:85:2d:e7:42:62:6a:
ca:b7:dd:d5:a4:6e:02:bb:2c:08:ce:43:fc:7c:98:
2e:ec:83:75:b3:34:6a:e7:1d:52:5e:75:86:b9:b8:
6f:2f:25:7a:1a:4a:12:e6:52:34:bb:f0:a7:a2:4d:
6e:e8:00:1b:e6:bd:21:34:5f:1b:4c:02:03:dc:95:
08:7b:ca:b8:f0:e2:32:b4:2c:a6:d2:7b:fd:ce:3d:
b4:30:2c:6b:27:bd:43:a3:3b:46:61:c4:d9:cf:26:
b3:12:93:08:09:b4:b4:8e:c3:9d:e7:ce:ff:7b:03:
ec:f1:a0:8d:b1:0f:04:c9:e5:53:e7:0b:2b:8f:c9:
a0:61:07:ca:a9:b3:e0:ab:37:15:d4:60:dd:83:41:
cc:42:f0:92:69:5c:25:39:51:bc:d6:75:13:da:7f:
8f:6c:7f:d9:14:f7:8e:a5:3a:c1:45:d0:49:f5:20:
82:b6:19:2e:9f:91:4a:af:9b:07:1f:12:a5:b4:1e:
2e:99:a9:11:2a:13:ab:ae:d1:0c:84:25:a0:0d:a9:
43:56:4a:0f:0c:57:0b:67:d2:be:52:a9:29:64:63:
39:b2:f7:a5:6a:36:67:39:77:a7:2b:37:93:95:e4:
45:54:dd:18:61:31:a4:4d:6f:66:18:44:3d:58:a4:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:8A:F9:0A:43:63:24:1F:A4:3D:76:28:8A:A7:8A:68:03:66:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9mWK-QpDYyQfpD12KIqnimgDZnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.242.56.0/24
151.242.64.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:46:57:f3:77:26:e5:4f:3b:10:71:8e:22:e6:10:dc:f2:45:
7b:95:43:f8:1d:30:da:9b:19:9d:ee:48:98:82:33:b8:bd:8c:
c8:5d:35:93:79:d5:6f:95:c3:c7:94:7d:1d:88:4c:c6:1c:4c:
7c:8a:6a:d2:fd:84:df:ae:f7:cc:c7:2e:49:54:53:d0:73:5f:
15:8b:1e:67:81:26:98:61:46:05:b0:84:03:93:b8:ec:7b:bd:
7e:a9:c6:0c:8d:cf:aa:1a:12:dc:1e:f4:26:92:f1:0e:51:9a:
e7:a9:16:40:de:1e:b1:c5:63:00:f0:7a:20:90:7c:f3:f2:95:
ae:c8:7b:4c:af:a7:a5:1d:50:ba:91:2a:ac:f9:a8:8d:5a:de:
38:00:2b:bb:80:aa:b7:aa:67:34:ac:d6:bd:51:75:2c:91:6b:
e8:44:9a:a9:54:74:2c:31:ad:a7:5f:ab:1a:39:1e:dc:9f:64:
29:0f:d3:33:ad:cf:1d:ad:20:63:9e:c6:ee:6e:51:09:ca:1d:
80:6b:e0:69:95:e6:16:54:34:40:46:8b:1e:99:16:bc:e6:c4:
fa:b2:74:cd:68:13:3f:c7:2b:ad:91:b9:61:fa:30:33:ed:47:
43:45:c4:97:c6:fd:ad:45:ab:81:44:cc:df:75:01:5d:68:31:
ff:c5:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:28 2025 by rpki-client