Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K6FMVfMKFKApUurqlRO7n_GYRnI.roa
File: K6FMVfMKFKApUurqlRO7n_GYRnI.roa (raw, json)
Hash identifier: bi9Q0uZnNxRsUtkHozErsWljo5xVDbNE/HfgZrMN5Ds=
Subject key identifier: 2B:A1:4C:55:F3:0A:14:A0:29:52:EA:EA:95:13:BB:9F:F1:98:46:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019496C2A8794DE0E904CC5553D7ABB1DCDD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K6FMVfMKFKApUurqlRO7n_GYRnI.roa
Signing time: Fri 24 Jan 2025 05:22:06 +0000
ROA not before: Fri 24 Jan 2025 05:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.34.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:96:c2:a8:79:4d:e0:e9:04:cc:55:53:d7:ab:b1:dc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 24 05:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ba14c55f30a14a02952eaea9513bb9ff1984672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:10:07:47:dc:ad:e1:c0:17:10:5a:29:93:
bc:68:88:e7:6c:cd:2d:99:e0:39:04:8f:1f:87:91:
b1:e0:31:bf:93:de:c4:6f:a7:10:36:66:26:67:a9:
57:38:da:1f:e0:50:7d:93:04:d4:b1:b5:53:af:57:
6c:70:aa:c4:08:e2:cd:a4:76:0b:7a:e6:21:fb:26:
b2:fb:30:3e:9e:ab:c6:40:31:41:5d:f5:ac:5a:fe:
56:d0:bb:b5:34:97:4a:5e:25:68:1b:7f:1d:ca:9e:
27:50:bb:fc:0a:c0:17:57:47:e6:30:d4:06:03:00:
51:71:69:24:64:7b:e9:7d:bb:8b:78:74:95:55:94:
ff:38:6a:ff:08:39:d8:49:51:c8:67:48:e2:c8:90:
1f:f1:f1:92:f5:86:7c:09:eb:96:6a:89:de:b0:54:
b9:fd:2d:e5:26:79:80:a3:20:4c:3f:9f:f6:72:70:
ab:49:b6:e6:6e:15:18:30:10:40:15:3d:9c:e6:4e:
62:4b:c5:5c:b1:eb:f7:44:65:f9:96:e5:76:30:72:
f0:2b:3a:23:10:a4:e2:af:fc:e8:d2:80:8d:dc:b6:
9e:11:d8:85:20:d9:24:73:e2:71:b8:76:b3:01:d1:
fc:e9:a1:ee:91:f7:02:73:8b:e6:8b:6f:8c:82:41:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:4C:55:F3:0A:14:A0:29:52:EA:EA:95:13:BB:9F:F1:98:46:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K6FMVfMKFKApUurqlRO7n_GYRnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.34.0/24
151.242.44.0/24
151.242.56.0/24
151.242.64.0/24
151.242.110.0/24
151.242.117.0/24
Signature Algorithm: sha256WithRSAEncryption
72:aa:7a:44:85:2b:67:ad:18:33:7c:84:38:ea:7d:ac:82:26:
a5:8c:1e:d0:e1:07:2f:4d:04:b8:cd:7c:44:ca:5d:6d:7a:09:
3b:a4:8b:1f:1a:13:68:a9:f2:c4:c5:c6:94:be:9f:49:24:0c:
a6:b8:ac:e5:82:fb:56:3d:23:66:97:55:a8:5f:f6:3e:c6:24:
bf:7c:62:58:e3:43:d5:4b:5e:7c:dd:81:d3:e6:9b:cc:a6:89:
89:50:11:ef:ce:be:cf:b9:3b:d8:73:d1:38:14:19:ba:b7:e1:
78:af:37:bc:a3:0f:08:09:d5:ed:cb:e2:1d:34:b8:59:d6:ff:
85:7d:05:1f:36:e5:30:56:af:46:71:af:d2:6d:d3:85:ca:20:
88:69:df:0f:6a:e1:04:ad:3d:15:84:9e:5c:8e:15:45:24:35:
37:7e:61:6d:26:dd:f0:10:c7:f5:b7:32:8c:12:ae:79:c1:fc:
3d:db:af:04:13:f1:d5:85:4d:96:7f:11:5e:c1:f4:4b:11:66:
92:c7:71:32:21:f6:2b:f4:dc:a4:82:17:8a:d9:fb:fe:49:21:
5f:1f:60:6e:59:ba:84:ef:d6:ed:3e:d2:cb:86:de:92:2d:76:
50:2a:ec:59:1f:a0:80:63:2c:43:e2:b3:b1:49:02:99:27:66:
30:e5:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:15 2025 by rpki-client