Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LUCcj-3UePxbQOO2NvOx48iii4Q.roa
File: LUCcj-3UePxbQOO2NvOx48iii4Q.roa (raw, json)
Hash identifier: qhcpY+71yFv0lydybldeokd4KAWFboS2udgVpOEHOoo=
Subject key identifier: 2D:40:9C:8F:ED:D4:78:FC:5B:40:E3:B6:36:F3:B1:E3:C8:A2:8B:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CA80803A8C54D717FEC3C125420F0FDB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LUCcj-3UePxbQOO2NvOx48iii4Q.roa
Signing time: Mon 03 Feb 2025 06:30:06 +0000
ROA not before: Mon 03 Feb 2025 06:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 151.242.34.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:80:80:3a:8c:54:d7:17:fe:c3:c1:25:42:0f:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 3 06:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d409c8fedd478fc5b40e3b636f3b1e3c8a28b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:22:96:88:ae:1a:74:18:69:55:f7:ff:23:
4f:d5:4c:96:80:a0:a9:ec:e1:53:c7:48:58:44:7d:
6b:1d:62:fb:79:23:3d:b6:a4:50:d2:63:ec:e5:fe:
f7:bb:a4:c3:c4:4f:a5:66:75:1f:2d:31:81:00:b5:
90:26:d2:e2:bb:cc:40:6a:5f:5e:f8:3d:7f:33:fd:
c9:23:b3:fe:f7:a7:eb:1f:51:b5:51:4d:a1:0b:cb:
a1:c4:ee:01:c0:2b:8b:de:cb:70:a9:3a:19:02:e5:
8e:e7:f7:d3:9a:cc:6e:be:36:17:a1:91:db:b0:9b:
95:d5:31:bb:db:f9:33:bd:75:21:98:ee:44:bb:b7:
90:8e:6b:dc:0f:47:bc:63:ad:5f:c2:30:82:45:95:
09:09:7a:71:41:cd:81:d2:3c:19:22:bf:00:f5:d9:
37:ef:ca:8f:4e:e2:49:f8:d6:a2:0f:6e:27:48:61:
6b:33:a1:08:ff:4c:98:a2:76:53:42:31:e1:a4:2e:
bf:3a:96:2a:e5:30:9b:20:ea:d9:5a:64:be:85:11:
ac:44:20:1f:00:aa:d8:b8:53:b6:98:9f:a6:2e:14:
99:fa:8b:0a:c0:1c:8a:0f:ca:ae:59:d5:13:37:e2:
b8:0d:36:28:fc:5a:1f:c7:4c:b2:4d:77:6d:8d:3a:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:9C:8F:ED:D4:78:FC:5B:40:E3:B6:36:F3:B1:E3:C8:A2:8B:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LUCcj-3UePxbQOO2NvOx48iii4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.34.0/24
151.242.44.0/24
151.242.56.0/24
151.242.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:90:f6:82:f7:a2:1c:39:0e:1e:84:24:74:d1:98:34:6d:ac:
a3:2d:08:34:c0:5e:d8:a8:13:e9:96:71:6c:d0:4f:00:18:96:
80:85:c4:f7:48:c2:dd:0a:49:97:bf:05:c3:3b:3a:34:08:f8:
c3:08:f7:75:77:8c:0a:f2:dc:01:07:e0:69:4f:14:48:f4:45:
88:fd:67:3e:72:6c:80:22:d1:4f:30:80:e0:bc:28:43:44:41:
c8:0a:0a:12:51:7c:d5:bc:76:8f:6d:c5:dd:29:a7:73:78:79:
bb:0d:64:c7:96:df:0f:39:d4:6f:d5:31:02:6d:9e:58:bb:20:
be:21:f2:d1:1d:1b:32:08:7b:55:ca:95:47:6d:c4:44:86:6c:
11:eb:01:1d:75:f3:98:b8:3a:1f:24:4b:1c:89:07:4a:f6:31:
ca:1f:ca:a4:76:b1:8a:54:3c:be:f1:48:e0:2f:c1:05:4c:96:
38:c8:02:16:ae:6c:1a:c2:df:56:d0:96:1f:b4:5c:1e:f7:1f:
56:d4:f4:b4:d5:b4:8a:51:66:2f:76:48:35:90:52:da:c3:56:
db:2a:97:8c:08:fc:51:be:b8:b1:63:37:f5:c2:f4:db:e0:ca:
db:57:2b:87:a9:03:24:e7:60:40:4b:4e:f6:4a:43:30:c6:20:
85:14:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:42 2025 by rpki-client