Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9nCk9LybhUA3recfHSMnD8VvBjc.roa
File: 9nCk9LybhUA3recfHSMnD8VvBjc.roa (raw, json)
Hash identifier: ETz6bZ29q8KAs5EYKmlMr392d3lijLF5pLZcXdXtb/0=
Subject key identifier: F6:70:A4:F4:BC:9B:85:40:37:AD:E7:1F:1D:23:27:0F:C5:6F:06:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01959DAE2375AAE306D6AA71F03FE77AC953
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9nCk9LybhUA3recfHSMnD8VvBjc.roa
Signing time: Sun 16 Mar 2025 06:39:50 +0000
ROA not before: Sun 16 Mar 2025 06:39:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.188.0/22 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:ae:23:75:aa:e3:06:d6:aa:71:f0:3f:e7:7a:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 16 06:39:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f670a4f4bc9b854037ade71f1d23270fc56f0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:4c:79:0c:eb:28:19:d0:e2:d4:a8:12:86:
6f:05:b9:d5:66:0a:a0:de:9e:14:74:5e:a0:35:c7:
6b:dd:f3:a2:9e:66:1b:2b:63:32:37:a9:80:da:0f:
d7:79:65:1d:6b:a4:5c:08:57:4b:bc:00:da:53:79:
24:b0:6f:73:b2:b0:e4:75:e6:d5:ba:cf:97:25:7e:
8b:50:d9:69:fb:08:be:fb:b8:4f:9d:d9:68:a3:c1:
9b:fb:72:94:8b:f9:ba:6c:d6:9c:61:06:9b:cb:97:
4e:4f:d1:76:7a:55:0a:41:5a:65:94:41:56:3b:f8:
b0:51:cb:e3:c9:3a:4e:80:18:59:f3:c3:02:39:0d:
c4:27:76:7c:73:57:f5:29:35:c6:7a:a6:48:ac:26:
cd:28:b0:43:38:1e:00:bd:2f:b0:49:63:ca:d0:c2:
29:ec:3b:60:00:ed:b4:ec:bd:bb:1a:aa:43:b5:83:
b1:00:6e:db:8e:de:6a:d1:eb:b0:e7:c9:fd:95:e7:
cf:30:8e:61:84:aa:65:06:e3:8d:f9:a6:8d:31:57:
4b:50:cc:c4:34:e0:58:64:11:4e:53:bb:d5:46:b8:
40:b2:23:05:23:f7:0e:53:40:7f:f1:5f:e1:e3:e9:
d3:ec:a0:2e:d5:78:d8:41:a9:55:f2:6f:6b:cb:38:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:A4:F4:BC:9B:85:40:37:AD:E7:1F:1D:23:27:0F:C5:6F:06:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9nCk9LybhUA3recfHSMnD8VvBjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.188.0-151.243.199.255
151.243.217.0/24
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.237.0/24
151.243.239.0/24
151.243.241.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:51:50:79:81:b3:25:98:83:95:5b:ee:8e:aa:7b:14:a6:
58:a9:f9:e2:be:a8:2f:be:5a:21:1c:38:0c:fa:99:44:06:d9:
5b:54:38:04:c7:09:a5:87:e7:42:c7:f0:32:eb:cd:31:28:3c:
02:2e:66:e8:42:18:cf:9a:0a:ac:47:9a:38:3c:a3:3d:02:b0:
26:b4:b5:f8:c4:ca:17:56:0a:dd:54:d5:33:27:a7:2a:23:50:
e2:e1:0f:08:11:ed:d9:09:fd:d2:4e:f0:d2:0a:b4:70:04:4c:
c4:8f:ce:1c:da:13:e2:15:b8:13:bd:71:92:e9:ed:fb:cb:18:
12:b1:0b:a4:c5:e8:a7:b7:f8:98:d3:50:fb:cf:59:de:7b:bb:
ca:4a:ad:0f:e5:72:37:f0:1b:a2:21:fb:74:00:ac:8c:1b:d2:
8c:b4:be:fa:d5:fa:15:4e:6f:a6:80:46:78:27:de:df:90:11:
a4:83:a8:ba:f5:e8:b3:ec:81:86:54:a4:e8:15:ee:fe:58:8d:
b8:4a:f4:17:88:28:ea:75:37:04:77:0a:13:4f:d1:a6:4e:2a:
af:5f:da:15:b0:68:af:ff:9d:5c:cb:ae:d7:1e:d3:77:c9:82:
e4:63:32:a1:86:04:b4:17:76:8f:42:46:f6:dd:37:d8:b3:6c:
dd:e5:68:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client