Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IlRPVGwhVio6wesWjA8PzUm61mE.roa
File: IlRPVGwhVio6wesWjA8PzUm61mE.roa (raw, json)
Hash identifier: l8UOAuEt0EzNQXEPo37gRFhOH8gOjMa0uCgf/0i0Q4c=
Subject key identifier: 22:54:4F:54:6C:21:56:2A:3A:C1:EB:16:8C:0F:0F:CD:49:BA:D6:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946B6A75C9072C91176DF5024097B5F2D7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IlRPVGwhVio6wesWjA8PzUm61mE.roa
Signing time: Wed 15 Jan 2025 19:22:06 +0000
ROA not before: Wed 15 Jan 2025 19:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199218
IP address blocks: 151.243.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:6a:75:c9:07:2c:91:17:6d:f5:02:40:97:b5:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 19:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22544f546c21562a3ac1eb168c0f0fcd49bad661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:0e:96:b1:5c:cf:f7:75:b7:04:86:40:5b:
f7:4c:b3:34:d0:6e:88:f6:80:b3:41:12:1f:0d:f7:
11:44:33:c3:a2:2b:80:18:69:4e:ac:5b:cf:73:48:
f5:58:ed:55:03:c6:d2:8d:b3:bb:fa:19:56:03:4b:
56:83:47:75:cc:07:a3:36:71:13:51:eb:8b:70:6a:
0b:c1:92:e4:43:0b:35:4c:18:05:aa:6d:cc:29:f1:
3c:ff:d5:b0:c2:04:43:19:2a:74:a9:b5:0b:2f:61:
ce:ea:9a:85:c4:9a:4f:89:bc:c9:66:42:29:bb:d1:
b9:0d:d7:91:a9:47:58:e9:0e:25:06:e7:9d:28:8f:
23:d9:74:7c:cf:62:0e:f4:38:51:04:90:e2:91:c1:
aa:4c:1a:97:ad:cc:9e:e2:1b:dc:1e:fd:24:4d:cf:
86:34:f2:f2:b9:a8:e5:07:5b:09:69:dc:0f:34:22:
90:03:8f:71:cf:cc:be:30:92:b2:c2:70:9c:a0:33:
03:e7:67:f1:d0:22:52:1b:90:a7:df:86:da:dd:00:
5b:63:18:fd:96:50:f8:ad:b1:82:54:9c:27:e3:88:
94:b6:99:7b:14:6c:21:4e:ec:64:c7:e1:f5:29:3c:
14:5e:f2:57:28:57:70:63:ee:e5:14:95:d3:f9:85:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:4F:54:6C:21:56:2A:3A:C1:EB:16:8C:0F:0F:CD:49:BA:D6:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IlRPVGwhVio6wesWjA8PzUm61mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.141.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:cb:c1:bf:6b:e8:03:1f:80:97:69:28:fc:7e:c8:2d:26:
4d:fb:b1:a1:76:ed:ce:55:a5:b7:c8:e8:7b:f7:ed:d0:49:ce:
58:66:50:1b:91:0d:48:bd:9f:de:05:5e:a2:c9:26:da:43:8c:
54:54:99:27:d9:d6:3b:13:12:2c:74:30:c5:78:b0:b1:64:e1:
41:a8:c4:87:53:17:a9:b8:d7:5e:a1:80:0d:e5:c0:58:5b:dd:
cc:93:41:77:6d:ae:c3:3d:f5:aa:cb:76:5f:7d:37:fb:16:8d:
c5:be:6a:89:5a:74:49:bc:67:4b:40:71:ce:0f:61:8c:8e:0c:
3d:5b:92:4a:a8:69:19:c4:6d:7e:93:7a:ea:66:4e:c5:66:5a:
0e:4e:c1:4a:09:07:ed:ce:99:47:40:b9:cb:c7:82:9c:4b:b6:
a0:bb:87:80:72:94:f8:f0:92:08:2c:7a:93:eb:69:d7:6d:8b:
bb:5e:1c:0b:9c:69:dc:c8:c2:e8:16:74:8b:91:4c:cd:f7:5d:
05:26:cf:44:63:ee:96:b7:fa:f9:ea:47:0f:c4:0a:c6:0e:46:
97:1b:52:86:33:eb:06:ad:9f:38:9a:d8:77:00:ad:ee:ea:25:
23:52:97:c1:5b:7d:5a:0d:bb:ed:6b:11:35:04:36:8c:74:99:
c5:6a:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:45 2025 by rpki-client