Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aszk0V88XUKLbabxSNFWKAKldRw.roa
File: Aszk0V88XUKLbabxSNFWKAKldRw.roa (raw, json)
Hash identifier: IhlU6Lc909MKXo7h3a9kbOBy7idbKfGK59RU0MttNOU=
Subject key identifier: 02:CC:E4:D1:5F:3C:5D:42:8B:6D:A6:F1:48:D1:56:28:02:A5:75:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CFB66CC0E23D1AFE6A6B31AA93FF4285
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aszk0V88XUKLbabxSNFWKAKldRw.roa
Signing time: Tue 04 Feb 2025 06:47:06 +0000
ROA not before: Tue 04 Feb 2025 06:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 151.242.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:b6:6c:c0:e2:3d:1a:fe:6a:6b:31:aa:93:ff:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 4 06:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02cce4d15f3c5d428b6da6f148d1562802a5751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:9b:91:b9:3d:94:d3:b7:34:45:21:93:d3:
75:bb:27:14:c3:7e:97:48:10:82:0d:26:aa:6d:0c:
06:01:48:83:42:f4:a9:60:9d:74:f6:01:5e:5d:db:
fb:0f:b0:12:4b:2a:05:97:16:35:23:9b:d7:7a:72:
b6:65:7c:6c:ad:64:a0:c0:51:21:35:69:49:99:e7:
c9:97:12:4d:ff:d2:86:20:8b:c9:77:17:f5:73:cc:
d6:3a:ca:01:3b:b1:22:ab:a5:a4:55:0c:e6:85:cb:
ee:9e:6c:fb:38:fb:d8:c0:42:b6:84:c2:c0:ab:57:
f4:ff:43:16:69:9a:ca:37:1d:ad:f6:fd:df:72:60:
51:88:eb:97:fd:52:df:2b:b5:f8:7d:17:ef:1e:4e:
ce:c3:59:52:6c:a1:1d:a6:38:bd:93:8b:31:95:d7:
8e:35:92:f8:e0:de:24:e1:df:6a:9f:54:e3:d1:2d:
4a:7c:a2:81:f2:4a:3e:83:59:e9:f4:37:ec:23:54:
16:5b:cc:c0:b2:34:14:d3:ad:bf:29:fe:cb:77:41:
89:79:1b:e0:db:40:f4:f8:5a:b2:a6:9a:9f:36:03:
f2:1b:4e:8e:be:6d:8a:24:8b:9b:67:fe:e5:f4:83:
c2:8b:c0:29:2f:81:d1:81:81:41:6a:60:19:8a:e2:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:E4:D1:5F:3C:5D:42:8B:6D:A6:F1:48:D1:56:28:02:A5:75:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aszk0V88XUKLbabxSNFWKAKldRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7c:93:37:71:19:82:1d:79:25:f5:2e:f7:57:8c:62:16:00:
c2:40:ac:5d:3a:7b:71:8c:0c:09:b9:24:90:85:18:2e:13:6a:
5b:16:87:6f:a5:8a:54:49:8d:85:15:98:b7:03:b9:a0:95:a9:
60:8c:92:0e:10:c5:a3:81:cb:e8:fa:32:e8:20:1d:3d:ec:2c:
c4:a4:5d:d1:48:eb:4b:05:97:23:fe:86:7c:18:3b:db:2e:6b:
2f:0f:16:52:a4:e6:e3:11:2c:44:d9:6c:3c:87:5f:db:ac:bc:
6f:3e:0c:49:46:bf:6a:03:75:b9:25:fc:7e:2d:8c:14:e1:7c:
f2:7d:bd:7d:1f:8c:1a:84:97:cf:cc:b6:20:53:7a:aa:92:b1:
6c:16:8c:d8:44:9e:20:6b:b2:f7:e8:2f:10:95:fa:71:85:74:
f0:74:5b:b7:29:52:28:62:cb:78:f8:0a:6b:5f:9d:34:a3:74:
aa:c2:ea:44:b9:17:32:6b:3e:3e:64:6f:40:1e:1f:4a:63:66:
01:78:c1:6f:e4:df:a7:e6:1d:e3:c6:6d:31:06:35:0e:38:12:
b5:d3:f1:4a:4c:ef:04:d0:2c:ea:0a:dc:90:82:2c:ca:b0:90:
99:2b:ae:4d:a5:5a:1f:18:bb:2a:27:b9:4b:7d:d1:d9:58:cf:
8a:bb:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:09:08 2025 by rpki-client