Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BtLQVAqv4CpYzE6y63ZtPiAKuM0.roa
File: BtLQVAqv4CpYzE6y63ZtPiAKuM0.roa (raw, json)
Hash identifier: Z6Zpi3Jsri4hoj6YgUSefvz+Eu8vtR4SSeq3v5Mvdkg=
Subject key identifier: 06:D2:D0:54:0A:AF:E0:2A:58:CC:4E:B2:EB:76:6D:3E:20:0A:B8:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CF3380EB6184780AEC5C889585ED286B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BtLQVAqv4CpYzE6y63ZtPiAKuM0.roa
Signing time: Tue 04 Feb 2025 04:24:06 +0000
ROA not before: Tue 04 Feb 2025 04:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:33:80:eb:61:84:78:0a:ec:5c:88:95:85:ed:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 4 04:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d2d0540aafe02a58cc4eb2eb766d3e200ab8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:c1:af:3a:fc:bd:e2:34:1a:10:a6:45:bb:
a9:72:b7:f8:9c:7d:59:9a:28:6e:2d:40:d0:41:5f:
29:bd:20:f4:ad:db:e9:dd:51:ac:00:cb:2b:3d:ad:
bf:e2:2a:f7:8a:8c:ed:90:89:1f:1b:cc:2e:d5:b5:
c0:1e:c8:9c:4d:a3:00:44:0f:43:a2:3f:02:7f:c2:
bb:cd:6d:04:29:f7:30:ba:3c:28:af:27:7d:1a:c9:
13:fd:8a:bf:cd:6b:13:24:83:38:87:b7:62:52:c3:
37:6a:26:0f:06:3a:09:30:58:6d:ec:c6:e4:0d:9b:
4b:c7:62:0f:3a:06:7e:54:72:0d:10:3d:6e:e5:ab:
9b:87:eb:ce:54:36:bc:0e:ff:cc:4d:c5:c6:dc:ce:
16:b6:38:6d:df:46:27:4e:75:dc:9f:ad:5f:b5:84:
a1:86:31:32:01:c8:e6:45:37:ff:34:47:0d:27:9e:
40:d7:b3:b6:e5:2d:aa:2e:16:e5:5c:e9:8a:4e:42:
d5:50:75:02:a3:05:42:a3:19:5c:1b:03:5f:80:6e:
f0:94:96:a0:cf:e8:6a:83:ac:6a:17:ce:e0:61:b7:
22:fa:db:41:12:31:0c:cd:7c:98:70:67:73:c3:6e:
4c:fa:7c:74:41:a6:bb:b7:7e:7e:01:21:d4:75:38:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:D0:54:0A:AF:E0:2A:58:CC:4E:B2:EB:76:6D:3E:20:0A:B8:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BtLQVAqv4CpYzE6y63ZtPiAKuM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2f:e2:04:33:63:52:9c:c1:fb:f2:9f:50:b2:87:05:2b:23:
56:74:5f:41:b9:c5:ad:92:26:fc:96:43:ee:75:00:6f:60:51:
0f:6f:a8:65:1b:b5:20:47:f9:d9:17:43:8d:95:a5:e5:97:23:
e6:3d:e7:7d:c1:46:32:57:74:d8:43:e7:c6:87:0a:8a:a3:5d:
52:43:eb:84:4a:e1:de:ae:c2:c1:bb:fd:73:b8:92:46:bd:ae:
f5:24:04:87:87:49:94:09:3b:08:ac:81:f8:dd:bc:e4:db:00:
38:41:6c:68:10:5b:6c:bd:47:50:47:26:0c:98:98:95:be:d0:
ab:df:c2:a7:fc:ef:2c:6d:f7:00:d3:ae:71:d8:dd:6f:9e:22:
59:ba:82:ad:f4:20:1b:a0:15:11:ec:b6:85:ac:50:ba:36:40:
07:c8:de:93:89:0e:c4:33:9a:82:b6:35:6a:f0:fb:96:8b:fa:
9e:e5:c4:0f:dd:15:4f:c9:00:b3:76:6b:6d:17:a5:c0:6d:b6:
a5:d8:af:a0:6d:ed:90:ce:87:b1:5d:c3:bf:56:63:f3:a3:5c:
65:46:83:47:6c:61:49:48:a8:e9:a6:f1:a7:03:1c:67:69:4b:
a5:0b:68:14:27:b7:e9:d6:9a:8d:31:06:0f:9a:82:7c:31:d0:
d3:87:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:02 2025 by rpki-client