Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JzWIDrXeAn7rfYQB4Yhou2msfNU.roa
File: JzWIDrXeAn7rfYQB4Yhou2msfNU.roa (raw, json)
Hash identifier: mlTE2vYKe5RZa3BOnqWJBGXu7+PR/2pBbmicHBI8kY4=
Subject key identifier: 27:35:88:0E:B5:DE:02:7E:EB:7D:84:01:E1:88:68:BB:69:AC:7C:D5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019475093BFC5D7D3AE4D356D62C40CA4F5D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JzWIDrXeAn7rfYQB4Yhou2msfNU.roa
Signing time: Fri 17 Jan 2025 16:12:06 +0000
ROA not before: Fri 17 Jan 2025 16:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.243.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:09:3b:fc:5d:7d:3a:e4:d3:56:d6:2c:40:ca:4f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 17 16:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2735880eb5de027eeb7d8401e18868bb69ac7cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:e2:42:e6:ce:88:0a:6f:a6:48:c3:b2:27:
7b:40:d0:be:6b:d4:f3:66:46:6c:7b:08:e1:a9:4e:
9a:a4:63:ea:67:91:04:1d:b9:c2:03:ae:39:f7:cd:
b4:d5:a9:ea:59:d2:92:c1:c5:a8:f5:a8:14:28:d2:
b0:75:3f:6b:ae:65:60:2d:8b:99:64:d9:cf:d5:9d:
c1:53:1a:df:95:3c:1a:27:86:fb:66:3f:00:ea:b6:
e9:24:f1:fe:0a:70:cd:51:6f:d1:16:ae:ba:07:8f:
f7:d3:55:75:70:d2:09:39:79:9b:4a:2a:f1:e4:07:
6d:fd:ae:7f:a4:6c:78:a6:22:5d:de:bd:93:df:26:
9e:15:cc:b2:08:4f:cb:38:b6:df:84:4d:d3:7f:4e:
9b:bb:de:d1:2e:59:04:d4:91:a5:86:bb:19:df:82:
88:65:92:e9:88:29:e4:9e:0d:51:4a:e2:e0:0f:93:
d3:f4:7f:bb:7d:d7:b8:05:8e:d8:59:a1:9a:a8:ab:
e5:30:ef:9d:76:a0:62:f9:7e:5f:05:75:26:ac:b1:
21:f9:d9:97:d3:27:20:28:e9:cd:52:e9:f2:30:f7:
66:05:5c:7d:e5:b2:d8:c6:12:9d:83:6a:c3:f8:ce:
71:cb:92:13:65:57:fc:f7:f1:90:d3:2f:b1:31:26:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:88:0E:B5:DE:02:7E:EB:7D:84:01:E1:88:68:BB:69:AC:7C:D5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JzWIDrXeAn7rfYQB4Yhou2msfNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c0:0f:41:06:53:c6:c4:9f:b5:69:f9:c5:da:1f:81:ee:34:
13:82:86:f7:6a:d0:8e:93:74:4f:d5:b3:e7:58:94:13:34:aa:
33:6d:a9:ed:20:46:dc:e8:be:1c:9e:fe:31:18:be:72:9f:36:
f7:9c:ca:0c:b3:86:7f:8f:57:cd:fa:31:bb:dd:6e:02:ff:c0:
2e:c5:b7:56:1d:f8:11:e0:66:1d:ab:0d:bc:4e:d5:b2:c7:b8:
f2:98:0e:86:3c:7a:cf:12:58:7c:56:ca:45:b8:fa:55:bc:6a:
83:fc:44:92:e5:70:50:18:63:6c:bf:b2:86:b6:27:4b:86:43:
42:a8:24:20:86:f8:f2:d0:b9:0b:8b:6a:f1:81:b7:f0:d3:9f:
7a:e6:46:68:a4:8f:32:f5:2e:5f:d3:d4:7c:c4:59:83:13:e2:
c6:c2:2e:0e:b1:4f:cf:b2:62:75:1e:f2:24:5f:7c:64:cb:06:
c2:4a:3f:6f:08:40:0c:cc:a3:5e:c6:0a:84:3b:a0:7e:b4:ed:
25:cc:0d:c2:4d:b0:2e:18:1f:83:5b:ee:36:4a:80:13:c3:3a:
3b:eb:1e:b3:55:01:fd:16:b7:9c:ae:4b:13:06:f5:5c:d0:e1:
ff:05:07:26:cb:62:cb:34:90:15:0f:0d:47:8c:10:aa:d4:f2:
fe:54:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:17 2025 by rpki-client