Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QkNste6bH6oo--laZ3U-NfgFMtk.roa
File: QkNste6bH6oo--laZ3U-NfgFMtk.roa (raw, json)
Hash identifier: pfi5e5UVJk4MYLtN85V4tcnJZnlKdFYmkrT96P7ASbk=
Subject key identifier: 42:43:6C:B5:EE:9B:1F:AA:28:FB:E9:5A:67:75:3E:35:F8:05:32:D9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194AD7EA918CCB30C5BB8A8C213079D9CB5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QkNste6bH6oo--laZ3U-NfgFMtk.roa
Signing time: Tue 28 Jan 2025 15:19:06 +0000
ROA not before: Tue 28 Jan 2025 15:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.52.0/22 maxlen: 24
151.243.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:7e:a9:18:cc:b3:0c:5b:b8:a8:c2:13:07:9d:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 28 15:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42436cb5ee9b1faa28fbe95a67753e35f80532d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:fa:72:5b:1b:6c:89:2a:db:bb:01:86:28:
76:5a:2c:d8:df:ac:5e:ee:87:66:5a:34:64:38:1f:
d0:a6:5a:17:94:55:bf:62:95:e4:64:1a:2e:bf:de:
ff:29:b7:ab:b1:6d:23:b2:00:01:8b:fa:ea:fd:9c:
99:8d:3d:13:e5:78:c5:b6:c6:9a:ee:f2:bc:42:9e:
59:a0:2a:69:d2:cc:36:2d:7d:0f:83:2d:d0:af:5c:
71:9d:4c:15:e7:56:a1:bf:dc:e2:5a:45:75:81:ff:
5d:e3:79:0d:f0:2c:e0:9f:16:d2:dc:2a:34:07:a9:
32:10:46:86:9e:be:a4:a3:19:7f:5d:74:e1:0f:03:
17:d0:8c:d9:f0:3e:f8:77:81:d9:cf:35:11:19:52:
9f:4b:8b:cf:c5:00:c5:44:7c:10:03:56:e5:66:68:
cc:ce:bf:04:d4:85:3e:6d:2d:0a:63:ed:db:1d:90:
a0:10:00:c8:7e:c8:63:d2:85:f8:d2:09:17:8b:fe:
2b:76:ac:19:5d:eb:f7:59:08:d0:0e:76:a8:6a:35:
51:79:2f:de:06:4b:74:52:6b:5d:4c:1d:39:ae:5b:
15:46:e5:dc:9e:a5:64:2c:37:30:3d:b0:8b:47:2a:
c4:06:75:90:22:e5:57:8a:cb:ac:34:57:0b:c1:d0:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:6C:B5:EE:9B:1F:AA:28:FB:E9:5A:67:75:3E:35:F8:05:32:D9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QkNste6bH6oo--laZ3U-NfgFMtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/22
151.243.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:08:16:f9:83:5e:e7:c7:e0:90:2f:11:1e:d6:1c:d7:75:a5:
fb:1c:82:02:7b:4a:74:f8:c4:aa:01:5e:1c:38:b7:43:bb:76:
2c:f8:32:56:3a:37:52:ff:59:69:03:6e:1f:d5:66:ad:27:b7:
e8:02:44:80:d0:59:6d:9b:46:fd:38:b5:fc:95:ad:ca:e7:6c:
5b:6e:2c:6f:dc:4a:11:f4:fe:c4:6a:08:a2:1c:9a:8d:46:9f:
6b:3f:ae:1d:a7:da:0a:a4:97:ea:83:b0:a9:ed:4c:47:2e:9a:
68:ca:63:d0:4f:66:8f:09:c8:e4:60:2d:6f:9f:3e:97:7c:7b:
af:6e:07:71:87:e0:3d:1e:0a:f6:ef:2f:0b:a6:a3:4c:4b:5d:
82:e9:e5:3b:84:da:f9:34:dc:0d:ae:71:85:08:50:ff:c6:32:
be:2e:c8:69:eb:24:5c:01:ad:2e:f1:b0:46:93:80:74:c8:5d:
6b:f8:e8:78:12:0d:11:82:84:0e:65:66:d6:24:b3:fc:02:3d:
cb:58:6a:4e:0c:be:77:b7:9b:ac:83:dd:aa:80:8e:63:8f:b3:
96:36:80:e8:10:a1:2b:61:dc:4c:64:21:fc:83:51:b5:1d:57:
6d:6c:87:8d:28:46:e8:76:ff:79:3e:1a:1a:2f:4f:bd:60:b1:
88:77:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:52 2025 by rpki-client