Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F-FuvsXA5LSc2gzBckx1uQB7mDE.roa
File: F-FuvsXA5LSc2gzBckx1uQB7mDE.roa (raw, json)
Hash identifier: mZtsTQHUBmIlPeA7XcygVFOMbAzb0DagqHmKmpvImwI=
Subject key identifier: 17:E1:6E:BE:C5:C0:E4:B4:9C:DA:0C:C1:72:4C:75:B9:00:7B:98:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195376380FEF2B592F9B418DB07C3375092
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F-FuvsXA5LSc2gzBckx1uQB7mDE.roa
Signing time: Mon 24 Feb 2025 09:57:02 +0000
ROA not before: Mon 24 Feb 2025 09:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 151.243.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:63:80:fe:f2:b5:92:f9:b4:18:db:07:c3:37:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 24 09:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e16ebec5c0e4b49cda0cc1724c75b9007b9831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:61:e2:d3:62:4e:2d:39:4a:af:39:a5:35:
27:ac:9e:da:bd:a1:b5:c4:40:60:e0:d5:f0:7e:eb:
91:a5:2a:c5:77:78:f7:6d:3d:10:69:ba:e3:8b:e3:
21:01:c7:97:26:6d:19:cc:1e:db:68:f1:8a:bf:50:
e0:1a:b0:f9:7f:97:62:4c:40:8d:8f:c5:98:bb:6e:
70:50:fc:d5:51:11:71:47:91:f4:a2:c1:90:44:a4:
07:70:00:4f:77:9f:d4:a2:10:09:c6:f0:3d:86:db:
15:57:0d:85:7e:cf:64:cf:09:54:98:f8:43:57:22:
57:45:4c:f2:de:30:e7:3a:a8:c7:bc:2b:a8:a4:3c:
6d:c5:47:0f:d3:ac:c4:29:eb:6b:ef:ce:00:f0:5e:
dc:e7:85:90:88:d1:dd:93:24:27:60:75:43:6e:7f:
a7:ed:45:91:27:cc:be:2d:1d:4a:f8:02:dc:c2:ef:
b3:4b:0d:d2:6a:46:52:4f:45:b6:5b:8f:1c:2d:ad:
17:dd:35:8e:9c:28:11:99:97:c9:ac:74:c1:64:68:
84:ad:c3:af:01:d5:d1:d7:52:39:a6:55:b6:b7:b9:
f6:1d:90:34:ae:b2:7b:50:76:d1:22:6d:5c:64:5f:
43:08:93:50:3e:ab:ea:e3:eb:29:45:a3:be:cd:01:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:6E:BE:C5:C0:E4:B4:9C:DA:0C:C1:72:4C:75:B9:00:7B:98:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F-FuvsXA5LSc2gzBckx1uQB7mDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.12.0/24
Signature Algorithm: sha256WithRSAEncryption
27:83:20:74:c5:29:5a:35:b8:2f:41:ad:77:df:aa:5c:e4:50:
15:fb:84:b1:04:53:1d:ca:73:ba:69:63:57:7c:ed:e0:90:c0:
fd:a2:ec:1c:d0:3b:81:e1:70:03:77:aa:a6:4d:5e:d4:b0:9a:
48:96:f0:18:80:c2:5a:47:90:12:6b:c1:cf:35:62:d8:78:45:
f3:de:5e:42:4c:e3:b4:1b:fd:49:82:07:b3:1d:bb:5d:47:0c:
71:6d:f0:0e:6a:84:ba:72:6a:35:9e:ec:4f:fe:bb:90:c0:44:
84:05:cf:fa:2e:cb:99:e6:94:67:e7:af:46:67:4f:1e:37:02:
d8:f7:b8:ba:fd:27:72:a0:d7:54:cc:2e:66:43:bc:34:f9:57:
e5:ae:9e:d1:2d:6a:69:1d:b1:d2:19:82:94:d4:e3:a3:4d:60:
cf:63:b9:64:fd:89:10:91:77:a0:32:d2:5f:4c:12:2e:5e:c1:
2a:d7:33:af:d4:5b:b1:36:bb:c7:15:33:30:4d:fa:64:26:e2:
d9:8b:74:85:15:a1:b6:6a:fe:e9:7f:0a:c4:ae:36:06:21:4e:
13:45:eb:8f:07:e6:d8:b0:f3:eb:66:da:b9:16:18:23:05:9d:
77:ea:a7:f0:ca:68:af:5b:0e:20:0e:de:3c:71:1f:73:73:87:
fe:f6:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:20:21 2025 by rpki-client