Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LsGkCbPBFvLE-TfTrdOTUxySHH8.roa
File: LsGkCbPBFvLE-TfTrdOTUxySHH8.roa (raw, json)
Hash identifier: M42ncg4RF4IsrYrk1Ud7oT6hODnxRYnu879vNSqqZn4=
Subject key identifier: 2E:C1:A4:09:B3:C1:16:F2:C4:F9:37:D3:AD:D3:93:53:1C:92:1C:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D1B71228BA40201CA402FCB1DA3D97D2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LsGkCbPBFvLE-TfTrdOTUxySHH8.roa
Signing time: Wed 26 Mar 2025 09:09:50 +0000
ROA not before: Wed 26 Mar 2025 09:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15353
IP address blocks: 151.243.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b7:12:28:ba:40:20:1c:a4:02:fc:b1:da:3d:97:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 09:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ec1a409b3c116f2c4f937d3add393531c921c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:68:54:8b:2c:04:d9:c7:b0:79:5b:d4:22:
06:ed:15:30:95:ff:e1:1f:6b:e3:76:ce:16:be:f2:
ed:79:ab:bf:9e:67:ac:0e:89:b6:20:58:96:d0:c2:
e9:a7:88:12:50:66:98:60:25:70:28:13:90:86:50:
01:f6:1c:0e:dd:7d:6f:85:52:fe:95:b7:71:1d:da:
08:80:17:7d:43:e7:cc:c5:76:06:37:ee:c7:bd:1e:
4f:dc:5a:f2:4e:a5:f4:2a:2b:0b:5a:69:02:5f:87:
fe:39:ae:17:81:a5:d9:15:fa:50:01:0f:52:2d:b7:
70:d6:3a:66:b6:13:0c:74:72:c6:e8:e7:c6:8b:90:
f2:af:36:86:e1:38:75:1e:cd:31:8e:b8:b9:01:36:
52:89:ae:a2:c6:40:d1:61:75:1e:8f:f5:c3:fe:75:
99:b2:05:f3:da:e0:bf:ae:f6:20:54:69:a5:df:4b:
35:2a:2e:da:5c:39:d9:73:83:d6:e0:a6:c6:0f:b2:
aa:9d:bb:7e:db:82:41:f6:00:9c:cc:44:b8:62:c3:
bb:05:74:d6:bc:7f:b4:47:b6:44:39:31:49:d4:54:
05:82:82:46:a9:b4:77:88:d5:ff:d7:84:57:66:58:
63:cd:a2:29:aa:92:e9:18:7c:d1:36:02:b4:78:b0:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:A4:09:B3:C1:16:F2:C4:F9:37:D3:AD:D3:93:53:1C:92:1C:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LsGkCbPBFvLE-TfTrdOTUxySHH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
47:75:4f:d5:a5:63:26:a4:6f:95:e2:b4:3b:4f:e2:37:88:a1:
5b:63:ea:a4:04:00:b7:df:9b:26:e6:3d:9e:27:08:1c:30:e0:
79:93:32:6b:f3:b4:ee:3c:84:d9:0c:63:a2:04:0d:29:9f:4a:
b8:54:ef:d9:72:fe:b1:62:6e:5f:fe:53:74:d3:8e:c7:40:88:
ac:bf:ee:70:cb:5e:c1:be:25:d8:3a:73:1d:6e:f2:b5:1a:d5:
a7:74:f5:65:19:b3:1a:98:f2:de:fe:72:70:7e:c1:ee:50:d1:
de:46:57:94:39:67:7d:be:dc:cc:55:a7:e1:75:bc:a3:48:80:
01:60:8b:6e:e9:0f:ca:c3:94:6f:30:78:87:55:26:56:db:b7:
20:a3:ce:b9:f4:2a:e3:62:5a:4c:1f:b9:18:11:1c:98:7a:ae:
a7:75:37:55:42:43:59:a6:ac:e0:17:ec:ca:17:bf:01:32:56:
6c:2b:4c:e2:d1:d3:57:6f:90:30:67:37:ef:a0:14:e4:ea:d9:
13:1f:85:c5:d8:f2:12:9a:55:94:a5:2e:c5:65:d1:16:70:f3:
71:8e:6a:2c:3b:b5:ea:4b:6e:d8:98:cc:53:e8:1f:5a:b8:59:
fb:db:b1:65:c0:44:8e:76:b7:98:90:b0:a2:f0:99:88:63:e4:
b0:4f:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:48 2025 by rpki-client