Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FNQFH3rD5zv0zbcV350lgkwf2Hk.roa
File: FNQFH3rD5zv0zbcV350lgkwf2Hk.roa (raw, json)
Hash identifier: 9Z/chHm1fDMMG1CFPnCgpd1T58EtVWh7l7kDOMtaHqE=
Subject key identifier: 14:D4:05:1F:7A:C3:E7:3B:F4:CD:B7:15:DF:9D:25:82:4C:1F:D8:79
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01952BDBD90B488E292B2F25962462A58303
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FNQFH3rD5zv0zbcV350lgkwf2Hk.roa
Signing time: Sat 22 Feb 2025 04:13:02 +0000
ROA not before: Sat 22 Feb 2025 04:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56367
IP address blocks: 151.243.4.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2b:db:d9:0b:48:8e:29:2b:2f:25:96:24:62:a5:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 22 04:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d4051f7ac3e73bf4cdb715df9d25824c1fd879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:51:62:81:e6:47:cc:86:d3:bd:94:90:6c:
e2:ac:12:bc:cf:bf:32:97:e3:e4:f2:24:66:e9:c5:
35:16:0d:12:a6:96:24:ab:d3:aa:f3:1f:30:d2:2c:
0d:11:3c:7a:ff:4f:6f:fb:12:6e:ad:6c:91:26:b6:
74:ee:1b:75:45:28:f0:81:c7:e4:72:85:38:25:8c:
76:a1:93:a7:16:0e:23:96:c1:19:2e:67:a4:e4:7b:
f2:e5:de:10:dd:4a:32:20:5b:ff:9b:0f:8f:cd:7e:
22:4e:6c:c8:0a:86:47:3f:85:9f:00:c3:3c:46:51:
bc:41:d3:f5:82:91:b1:1f:43:18:67:05:64:ec:55:
01:fa:b9:27:d3:00:f5:b0:88:cc:71:40:82:71:7d:
f7:02:32:cb:58:71:a3:f7:ed:84:b5:3e:b4:a6:98:
f5:e5:e3:7f:98:24:c0:22:c5:0f:77:2d:55:93:47:
40:e8:fe:c8:06:f9:67:41:53:d5:bf:bf:67:9c:5d:
ea:a9:d6:fd:41:b9:1a:bb:6e:51:ed:da:ac:dc:30:
33:e3:b9:94:37:0e:c6:8c:dc:cd:05:83:7a:7c:17:
16:8e:37:4d:01:2b:17:25:a5:ef:1e:bb:fd:e7:25:
26:43:88:b0:ca:cd:44:be:b8:55:c8:15:63:6a:e6:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:05:1F:7A:C3:E7:3B:F4:CD:B7:15:DF:9D:25:82:4C:1F:D8:79
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FNQFH3rD5zv0zbcV350lgkwf2Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.4.0/23
151.243.52.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ef:9e:c1:0d:36:25:e6:8e:e0:05:86:7f:c5:19:d6:9b:b0:
f0:03:94:29:2e:8a:10:d2:85:c0:aa:7c:85:b0:a9:19:ad:c5:
30:ae:4e:ac:4b:ea:b9:b7:47:ac:57:9f:78:f6:20:1f:5c:7f:
ec:e4:44:c1:8b:21:16:03:a1:dc:e4:c6:5e:a5:16:e2:17:a2:
1b:00:be:fa:a8:46:88:96:e9:32:ae:35:05:07:52:02:46:31:
40:7e:d8:4f:0b:e1:6a:98:b0:1a:0d:e9:35:60:0e:af:42:e1:
80:44:eb:8a:db:10:a4:e8:c8:81:52:2e:c8:c9:47:3b:30:97:
58:a4:93:03:7b:6d:65:19:20:1c:e7:f0:8a:79:32:e3:5c:d1:
20:b4:58:eb:58:13:f8:34:96:56:86:0f:05:3f:fa:d8:ca:e6:
59:60:b4:c0:5e:85:ce:93:7e:8c:bb:3c:03:67:f4:f3:af:4d:
18:54:8f:6b:15:d8:d8:eb:54:7e:fa:e2:11:b2:76:ab:e4:bc:
99:73:1f:4e:93:5b:3f:40:a1:e2:eb:77:1d:8c:ae:c7:83:f3:
b7:1f:8c:dc:ad:24:79:ef:70:a0:6e:d1:98:cf:12:06:b0:48:
ba:43:70:10:fc:db:61:3d:ae:38:c2:6c:f8:d9:a5:63:af:51:
80:91:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:58 2025 by rpki-client