Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JL4duKNltic8Kau-iDMX9rUXTnk.roa
File: JL4duKNltic8Kau-iDMX9rUXTnk.roa (raw, json)
Hash identifier: 323Byj2SDKaonoFQBpU8LCiArpMf+fX0xzWGQE9M7bs=
Subject key identifier: 24:BE:1D:B8:A3:65:B6:27:3C:29:AB:BE:88:33:17:F6:B5:17:4E:79
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019531B5C4C4791BBDCADA756CD93DC88EBF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JL4duKNltic8Kau-iDMX9rUXTnk.roa
Signing time: Sun 23 Feb 2025 07:29:10 +0000
ROA not before: Sun 23 Feb 2025 07:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136691
IP address blocks: 151.243.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:31:b5:c4:c4:79:1b:bd:ca:da:75:6c:d9:3d:c8:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 23 07:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24be1db8a365b6273c29abbe883317f6b5174e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:5e:4b:75:35:2e:1e:aa:64:9f:16:b7:d4:
d0:80:4a:b5:28:01:08:a5:5f:79:7e:d3:67:8b:50:
fe:b8:c8:b9:57:e5:e6:bb:70:a6:7f:e7:0d:07:aa:
20:87:61:06:ee:61:22:32:80:99:4d:c7:20:45:22:
81:98:26:5c:62:3e:55:2e:01:e3:18:9c:bd:fd:a3:
dd:0b:f1:40:58:b4:77:45:36:c4:52:bf:2d:57:a6:
77:e0:ee:8f:8a:3f:37:94:e9:52:76:ad:c9:e1:e9:
d5:7e:b1:fc:19:ac:57:f1:52:ec:4f:90:f7:14:6f:
4b:d0:12:e3:73:ea:18:73:19:7a:56:4d:97:55:10:
0d:fc:17:20:f6:b9:2d:30:62:e9:58:46:ee:70:d0:
e0:48:a2:08:ca:3f:0e:a5:dd:87:29:bb:d3:40:87:
53:02:38:73:8a:d2:f2:ff:3b:aa:ef:95:73:da:c4:
23:52:6e:b5:d4:64:4a:6e:67:60:22:7e:d2:4a:7d:
a5:bb:02:fd:c1:0b:5f:b9:50:41:ad:ee:e3:f2:c6:
96:4e:af:47:86:eb:b3:27:16:88:31:bc:97:19:f6:
50:5f:b3:8b:ef:56:2a:c1:41:a5:1f:92:6d:42:6c:
a5:47:b3:1f:d7:bd:0b:a8:0d:f7:25:4e:1b:d7:77:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:1D:B8:A3:65:B6:27:3C:29:AB:BE:88:33:17:F6:B5:17:4E:79
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JL4duKNltic8Kau-iDMX9rUXTnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.40.0/24
Signature Algorithm: sha256WithRSAEncryption
08:09:fa:b2:e9:c5:d0:73:25:c5:f5:67:db:62:26:e2:6d:03:
e9:ef:b6:03:78:1e:27:da:cc:28:8f:a3:86:7c:7a:88:9e:eb:
2b:68:48:e4:c4:b2:08:a2:d5:99:5a:94:00:68:76:76:c1:31:
34:19:70:e6:e2:b5:13:f0:fa:f0:31:e4:00:cd:4b:33:d7:48:
a7:bc:a1:e0:41:a5:3d:f9:e6:f1:ac:9f:1c:30:94:6d:5a:88:
f7:9f:3f:10:4b:dc:09:27:60:da:fa:b3:2b:15:8b:27:10:60:
32:91:9c:e2:1e:59:a5:c4:c0:62:cd:6d:ad:1f:ed:2e:b4:e1:
c0:d9:da:de:d9:f1:fa:24:eb:e9:54:5f:c9:fe:c2:2e:fa:6f:
23:53:2f:42:02:e3:a4:b6:2f:1e:4a:36:22:ed:e4:22:9b:69:
f6:81:c2:ad:0c:ee:e5:09:85:f9:de:59:a5:4e:d0:7a:d7:8f:
50:ed:83:b7:cc:bb:4c:b4:2d:7b:70:44:e3:55:4d:06:ba:f0:
e2:36:d4:9f:19:3e:34:c0:d4:f1:a1:37:52:6b:18:30:d2:90:
d3:b7:b5:53:01:1e:14:70:f7:bc:ea:14:8d:82:90:d0:dc:b9:
54:12:85:dc:98:f5:bb:6e:0b:92:38:9b:86:74:e7:60:16:99:
79:a6:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client