Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K625WclTifYNv9EmAGvybrFyoRs.roa
File: K625WclTifYNv9EmAGvybrFyoRs.roa (raw, json)
Hash identifier: Kz02xdzBGgNPM0Jq04s70ixbyeUNTGxQFwBNFnVNyjs=
Subject key identifier: 2B:AD:B9:59:C9:53:89:F6:0D:BF:D1:26:00:6B:F2:6E:B1:72:A1:1B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195B4CDEF849C1A69E7748581DB054999F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K625WclTifYNv9EmAGvybrFyoRs.roa
Signing time: Thu 20 Mar 2025 18:25:49 +0000
ROA not before: Thu 20 Mar 2025 18:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30083
IP address blocks: 151.243.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:cd:ef:84:9c:1a:69:e7:74:85:81:db:05:49:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 18:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2badb959c95389f60dbfd126006bf26eb172a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:fc:b5:60:fc:11:09:95:8d:03:18:24:09:
f0:cb:cf:77:bb:5a:47:f3:0b:71:b7:59:c5:dc:a0:
49:41:d4:3b:ec:ec:32:44:25:08:1e:a1:f2:17:1d:
60:4a:61:5a:27:93:2e:3c:a7:60:ac:89:23:75:0b:
a7:d0:ba:ee:c3:a9:7f:a5:4f:b9:40:81:3b:fb:c5:
24:a8:08:77:1d:5c:df:22:be:18:aa:73:06:11:c0:
00:e0:56:16:33:43:b2:80:43:0a:f1:27:4f:e3:2b:
3b:67:3f:e4:b7:5c:e2:ce:d3:8f:1b:96:c9:e2:ea:
60:6c:fc:a0:7a:77:e4:2b:f8:93:21:0e:12:f6:1d:
95:e5:ca:bf:4f:78:be:4c:38:32:8e:76:0d:4e:c4:
93:9d:74:fe:1b:88:7d:f4:7e:2e:0b:a5:c6:62:98:
68:d1:70:f0:62:ef:77:18:a2:31:23:73:75:86:2c:
88:97:74:fd:21:6c:89:04:e7:28:96:aa:65:d4:8f:
3e:39:fd:d5:43:13:f4:be:ab:c8:6c:9d:a8:1a:30:
8b:36:34:bc:2a:e1:77:dd:14:6f:78:4e:b4:d6:c3:
fb:f7:7d:83:49:39:dc:2e:45:8c:a9:17:44:cd:28:
c6:2b:67:72:f8:a2:75:a0:2b:a0:88:62:18:81:1a:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:B9:59:C9:53:89:F6:0D:BF:D1:26:00:6B:F2:6E:B1:72:A1:1B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K625WclTifYNv9EmAGvybrFyoRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.201.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c7:77:f3:ee:59:de:f0:7f:1b:e4:ac:61:68:75:ad:f4:66:
5f:d9:8f:e9:8d:9c:4f:bf:f4:e8:67:5f:0e:f1:b6:b6:72:be:
a4:3d:0f:74:30:81:24:03:0f:b7:b2:96:13:8f:14:b2:b2:f3:
50:a5:43:6f:14:ea:47:87:90:cc:7e:bd:77:5e:e4:11:b4:cf:
28:9f:5c:a2:db:68:fd:78:8a:1d:0b:1f:c0:53:46:cc:4b:ad:
c7:30:cc:be:0c:10:4e:9a:af:30:60:cb:f0:cd:37:de:0f:cf:
33:ca:4e:bd:d7:ef:92:7a:90:08:0a:b0:72:30:e3:1d:90:b1:
3b:35:bd:87:34:fd:56:38:d9:0c:60:e4:a5:19:71:74:53:f3:
b8:18:6d:7e:42:45:40:4c:ed:da:f7:79:5b:8c:ab:63:61:5b:
b6:74:b2:b7:b6:8c:10:06:98:65:89:49:fd:fc:da:5b:c7:6e:
40:f5:e4:90:85:3b:58:e7:a9:0c:df:3b:88:e8:0e:9c:9e:51:
3a:3c:c9:5b:53:08:fc:4f:04:06:25:09:cb:d0:b8:ea:a9:80:
30:8c:a7:25:6c:fb:f1:43:34:fb:ff:1a:95:7a:8a:22:4a:50:
c3:3f:a3:7c:46:01:8a:d1:d9:73:1a:30:31:26:de:4c:0f:3e:
5f:d9:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:32 2025 by rpki-client