Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GE9yb6wA_-AnGhqcdLgGTlugbAg.roa
File: GE9yb6wA_-AnGhqcdLgGTlugbAg.roa (raw, json)
Hash identifier: ZH7PRkS4L/pPq7cycPnu9u0FBb+5BWH3rlBlRKIYJe4=
Subject key identifier: 18:4F:72:6F:AC:00:FF:E0:27:1A:1A:9C:74:B8:06:4E:5B:A0:6C:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194283C7A268EBA8010C678FDD85CF87982
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GE9yb6wA_-AnGhqcdLgGTlugbAg.roa
Signing time: Thu 02 Jan 2025 18:17:19 +0000
ROA not before: Thu 02 Jan 2025 18:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 151.243.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:3c:7a:26:8e:ba:80:10:c6:78:fd:d8:5c:f8:79:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 18:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184f726fac00ffe0271a1a9c74b8064e5ba06c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:0f:ba:87:07:4a:83:71:7e:38:05:7b:dd:
9a:24:92:34:b9:f3:cc:f8:0e:06:41:5f:bd:e9:2e:
1a:54:06:82:2a:65:8d:ba:3d:40:3f:5b:01:1a:47:
d5:f9:b6:94:49:28:30:5a:78:e9:9f:25:c3:04:a8:
db:40:a2:6c:60:ac:12:2b:09:7e:c3:cb:c8:17:43:
1d:e4:4e:66:72:c4:7f:21:bb:f8:42:33:fa:c0:f6:
ad:71:10:4c:a5:cc:bf:de:42:2c:8f:6d:9e:9d:ef:
cf:db:3a:5f:ac:6d:f4:51:50:93:ba:2c:37:42:8f:
39:87:3e:25:f4:18:91:44:09:52:37:27:f3:c8:d2:
7c:4a:b9:b9:02:d1:95:13:b3:2d:c2:61:57:ab:8e:
5b:8d:c1:f6:6e:f0:cd:b7:78:32:b3:86:07:ce:72:
80:6d:73:a6:a2:d7:f6:d2:b3:39:02:70:5d:f8:af:
8d:b2:93:b5:49:ca:db:e5:7d:81:ea:f1:85:12:0c:
fa:95:7d:3f:62:59:fd:07:42:20:f7:81:9c:01:95:
60:8a:af:55:d1:ac:5b:2f:6e:ea:15:2d:9c:6a:d2:
62:7d:f2:09:98:6e:0a:97:8b:2d:dc:e5:d7:31:4e:
88:50:ae:29:98:3d:93:a0:06:29:58:ff:32:9a:e7:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:72:6F:AC:00:FF:E0:27:1A:1A:9C:74:B8:06:4E:5B:A0:6C:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GE9yb6wA_-AnGhqcdLgGTlugbAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c5:0b:83:a0:8b:f1:d6:b9:59:e2:37:5c:2f:3c:0b:8d:73:
3f:81:64:be:44:db:51:bd:00:55:cb:d9:ea:4f:68:c4:c7:4b:
15:33:9e:51:eb:5f:d2:3d:15:3f:82:91:14:64:38:b4:2d:df:
db:55:ff:d8:d4:8f:70:74:82:75:50:45:9c:59:88:15:75:1f:
40:36:20:30:5e:a2:26:03:65:9b:34:bb:20:05:ca:b7:aa:9b:
bd:fc:0f:95:b1:ee:54:63:43:c1:bd:9d:03:7e:0b:14:1a:b7:
dd:ce:3d:e0:76:f6:4b:a0:d2:24:76:b2:81:c1:2c:fe:21:2a:
1f:83:eb:22:1b:0a:71:16:3f:5f:2f:0c:1b:8e:bc:1a:f4:be:
da:7a:45:d1:22:84:c9:bd:79:d5:77:31:2d:07:b3:9b:60:27:
b5:f3:14:67:41:97:5a:88:98:aa:13:07:2f:37:fe:6f:97:5a:
cb:60:ad:01:f6:52:5a:be:2e:b7:70:a2:c2:d2:9e:c7:0f:17:
20:a3:a5:99:e9:76:5f:a4:5b:92:76:dd:93:40:83:56:a0:8e:
ba:7f:95:ad:49:bb:11:fd:2e:c0:08:82:04:e0:70:04:8f:ea:
c0:36:d1:34:7b:50:d9:50:c0:ab:31:df:1e:ec:32:4a:a3:09:
1c:f6:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:17:08 2025 by rpki-client