Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrBogg1HsuV9L6fFrHO6T7MU9vc.roa
File: FrBogg1HsuV9L6fFrHO6T7MU9vc.roa (raw, json)
Hash identifier: 2aXrA0uxnNtatzxHGdWZows3oV1H1OE46Y+J7iOhGk0=
Subject key identifier: 16:B0:68:82:0D:47:B2:E5:7D:2F:A7:C5:AC:73:BA:4F:B3:14:F6:F7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CA80808ED38D476781F5F0163E52FEE1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrBogg1HsuV9L6fFrHO6T7MU9vc.roa
Signing time: Mon 03 Feb 2025 06:30:06 +0000
ROA not before: Mon 03 Feb 2025 06:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:80:80:8e:d3:8d:47:67:81:f5:f0:16:3e:52:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 3 06:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b068820d47b2e57d2fa7c5ac73ba4fb314f6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:9c:30:cc:6e:4c:42:2e:70:34:0f:76:51:
68:89:3f:8e:41:c1:f6:3c:13:a9:4d:44:6c:32:59:
3a:99:cc:70:34:d5:f0:9d:94:d5:41:7e:63:2e:51:
50:e9:d1:eb:28:48:9c:7e:15:40:b7:3b:6a:55:5c:
0d:11:6c:05:70:53:4b:50:6e:2b:4e:81:53:ae:52:
c1:30:27:a8:21:ca:48:b3:24:50:38:3e:bb:10:ad:
19:c1:c6:de:3e:16:9b:cb:50:5a:60:e0:66:77:78:
40:f2:00:ad:54:cb:fb:78:0d:12:c7:a2:89:4b:ef:
e5:40:d2:2b:fa:9d:5f:c2:c2:2a:31:47:eb:cf:4b:
1a:a2:6e:03:6b:88:85:9e:75:c2:9d:e2:03:8b:cb:
a6:8c:4b:6d:48:38:d8:93:a4:a7:5e:b4:9f:18:0e:
ae:5f:e2:4e:bd:6a:77:a8:fd:00:1f:49:42:8d:de:
b4:e4:e3:c8:fd:49:d2:0a:94:83:5c:2a:8b:b5:0a:
b2:6c:fa:83:be:12:b5:7b:03:ce:df:24:ba:5c:82:
f2:8f:55:39:f8:bf:04:c6:65:4c:ad:12:75:16:5f:
51:7e:29:ff:ce:8a:97:42:4b:fb:36:ad:d6:42:ef:
15:22:05:f0:ad:7a:c1:13:18:82:85:3a:1c:32:ce:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:68:82:0D:47:B2:E5:7D:2F:A7:C5:AC:73:BA:4F:B3:14:F6:F7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FrBogg1HsuV9L6fFrHO6T7MU9vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.110.0/24
151.242.117.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8c:a8:46:4f:42:c8:2b:46:97:0f:3a:ae:44:c6:45:14:f8:
08:a9:8d:86:8e:77:0c:4f:3e:95:f7:81:23:09:b5:f3:9d:98:
23:74:d8:8b:25:fd:62:79:3a:1a:64:08:b1:6a:63:ab:5c:f4:
5d:1a:db:28:c2:46:8d:c2:a4:bf:57:74:d0:3f:46:8e:0e:de:
f0:2a:93:2e:45:9f:cd:0a:aa:d5:9f:fc:28:4a:a4:a8:12:47:
79:61:5a:7e:23:d5:45:38:4c:b6:12:28:25:81:de:5e:23:be:
94:fe:ce:56:71:45:bf:b8:e8:5b:2d:e2:c1:38:a7:2d:64:0c:
f5:23:f2:4f:d9:e6:f3:37:6e:65:bb:38:90:3e:8d:19:e2:3b:
2b:d0:d1:7c:10:62:7f:d2:3c:56:44:2d:0f:a7:dd:fc:b0:9a:
0c:32:4a:df:62:5a:5c:96:cf:9a:c0:33:4b:78:92:7b:fe:a6:
35:56:0c:f2:8b:f3:fa:62:74:55:21:9f:0a:04:23:83:26:eb:
ff:aa:41:37:59:7a:89:12:4b:e2:52:d5:d1:84:30:4f:06:8d:
86:85:ba:78:72:a4:62:53:e7:46:30:62:b6:d6:67:33:ff:6a:
43:5e:be:1d:4d:6f:f8:ff:06:18:56:da:76:83:4a:cf:5f:9f:
13:3a:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:39 2025 by rpki-client