Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OSn13ELrYmRkMmf6psrkaENDXuY.roa
File: OSn13ELrYmRkMmf6psrkaENDXuY.roa (raw, json)
Hash identifier: /hC4XHNNpjMh2zu1qEwclwLKCMlsMNVu+HNxg1CNyM8=
Subject key identifier: 39:29:F5:DC:42:EB:62:64:64:32:67:FA:A6:CA:E4:68:43:43:5E:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194E437F78282D358CD26D2198582A3EFCE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OSn13ELrYmRkMmf6psrkaENDXuY.roa
Signing time: Sat 08 Feb 2025 06:21:00 +0000
ROA not before: Sat 08 Feb 2025 06:21:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:37:f7:82:82:d3:58:cd:26:d2:19:85:82:a3:ef:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 8 06:21:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3929f5dc42eb6264643267faa6cae46843435ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:4e:98:b3:52:00:cf:c1:91:28:1e:f2:68:
8a:cf:d1:5c:fa:a7:d7:2a:ff:a4:7e:65:9b:9c:82:
71:07:f5:e6:f3:a8:8a:15:11:73:c4:7a:9e:3b:52:
06:7c:c1:ae:42:18:d3:b0:e0:c7:8d:57:95:32:1b:
3f:7e:05:49:30:bf:25:3e:80:90:12:bc:2d:02:24:
f5:7f:c4:44:b3:36:fa:e6:06:a5:58:30:24:7f:7d:
66:1a:89:95:c2:12:0c:36:c8:b9:dd:e5:05:e7:23:
89:d0:4c:75:dd:9a:48:4c:75:4f:38:c4:79:0c:c1:
1d:be:d0:9f:71:94:c7:a5:ec:79:c7:46:93:9f:fb:
82:bc:4d:5a:f8:06:c7:71:28:cf:60:48:75:02:29:
c4:c7:3a:e2:a1:da:5d:26:83:e8:b3:bc:e7:f3:1f:
78:47:47:65:0b:e9:7f:85:ba:bb:d9:20:66:01:55:
03:2a:03:3c:61:02:df:29:5a:9d:53:41:6f:a1:55:
bf:08:04:df:8b:1c:de:33:f8:f9:33:90:0b:a2:b5:
64:7e:ab:2d:b4:19:91:33:4d:ee:94:d1:0e:86:46:
c7:07:ed:1e:eb:da:64:1c:0f:5f:06:a3:d2:b0:ff:
56:5c:0f:3b:90:19:54:3e:24:f8:bc:2d:c4:3d:3e:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:F5:DC:42:EB:62:64:64:32:67:FA:A6:CA:E4:68:43:43:5E:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OSn13ELrYmRkMmf6psrkaENDXuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.60.0/22
151.243.88.0/23
Signature Algorithm: sha256WithRSAEncryption
23:81:31:3d:c6:bc:18:c9:e9:7e:e2:ee:e4:f4:76:5c:11:fd:
66:57:92:d2:16:d1:0f:a3:33:a8:a8:73:04:67:0e:44:c6:eb:
a6:8a:80:5c:d7:85:63:42:bb:5c:9e:46:55:3a:d5:29:bc:0e:
09:d0:7e:34:65:6c:79:1b:09:8a:eb:6e:b5:61:34:60:01:34:
1d:40:21:87:a8:0c:6e:89:31:2e:7a:ac:a9:e6:30:cf:b6:84:
a6:bc:93:d8:40:8e:f5:05:c4:27:e5:34:54:eb:79:16:6c:96:
51:9b:7d:9b:c2:13:51:ec:64:14:6f:f2:18:b2:1b:ce:de:c1:
e9:9b:13:50:5c:5f:04:18:84:e5:fd:75:80:81:c3:6c:ac:c1:
5c:74:d0:b4:73:e7:1a:cb:36:cb:df:9a:53:a2:bc:8d:ae:18:
c9:f1:6e:2d:6a:58:42:99:c4:86:0c:9e:b2:a4:d7:c3:55:1c:
b8:29:17:a3:85:49:ed:92:7e:66:5f:c2:dc:e3:3f:d7:57:89:
58:e2:4f:d3:b2:bb:e7:9f:78:5d:a9:be:d5:0d:9e:9d:cd:e5:
15:d4:ac:f7:b3:b3:17:38:3a:7f:2a:90:43:30:4d:9d:73:64:
33:7b:29:ba:89:9d:d2:6f:c2:c0:6f:83:56:22:d6:75:eb:b9:
73:6b:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:06 2025 by rpki-client