Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1dXQ-tlxlxMvdqCkVfjIQsbWkM.roa
File: R1dXQ-tlxlxMvdqCkVfjIQsbWkM.roa (raw, json)
Hash identifier: iEMDufXdmMeWTm9mdJAhKS/ADpD630lGCg4B6gnul/k=
Subject key identifier: 47:57:57:43:EB:65:C6:5C:4C:BD:DA:82:91:57:E3:21:0B:1B:5A:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FD7F5C7E4F5B629C493BA646D8547CE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1dXQ-tlxlxMvdqCkVfjIQsbWkM.roa
Signing time: Thu 13 Mar 2025 14:10:49 +0000
ROA not before: Thu 13 Mar 2025 14:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.243.44.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:d7:f5:c7:e4:f5:b6:29:c4:93:ba:64:6d:85:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47575743eb65c65c4cbdda829157e3210b1b5a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:1f:d5:8f:25:50:37:15:f3:46:f0:04:05:
23:3d:54:cd:33:92:5d:b1:fd:08:40:11:c9:76:39:
75:77:17:03:e0:80:4d:a3:bb:2f:a4:cc:62:f0:bc:
82:f2:7f:1a:be:18:17:56:50:e5:8d:36:92:29:28:
3a:1e:24:1c:af:c9:13:ac:92:4f:90:81:ec:66:d9:
11:27:d1:27:4f:eb:db:99:3d:90:2a:2e:62:b6:51:
2c:0f:35:81:75:3b:01:76:04:df:1a:1e:6e:1b:80:
72:87:0b:5d:9c:e8:8f:e0:cb:dc:32:3d:04:72:66:
40:9f:ac:8a:42:33:d0:7f:2a:b0:82:77:08:bf:b2:
c6:df:3d:0a:69:4a:ce:9d:d5:2b:65:4e:31:ad:93:
8f:02:60:ea:eb:39:92:c7:1c:3a:54:35:be:41:66:
f4:dc:ea:d9:8e:8e:0f:b0:1b:85:ab:48:f9:0e:13:
4e:8f:3c:3a:49:b3:1f:0f:b0:23:4c:e2:8a:24:b6:
b0:df:9d:49:20:2c:79:06:6c:bd:7a:8a:77:69:75:
4a:38:7b:f4:ca:bc:87:39:cd:b2:68:b7:0c:31:95:
68:f6:6e:68:26:ee:2b:2b:7c:7b:6c:03:7a:0a:66:
f6:85:a3:45:05:75:0f:b6:8b:1a:5d:d9:db:5b:af:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:57:43:EB:65:C6:5C:4C:BD:DA:82:91:57:E3:21:0B:1B:5A:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1dXQ-tlxlxMvdqCkVfjIQsbWkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.45.0/24
151.242.57.0/24
151.243.44.0/22
151.243.105.0/24
151.243.159.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:45:67:6b:d5:87:d8:67:f7:62:9c:6a:62:d1:42:5a:7f:
de:b1:9f:e3:3f:ae:a1:41:07:f2:dd:94:91:74:f1:66:1a:a9:
08:63:3f:c3:1f:27:b8:c0:e0:13:55:67:72:11:bf:67:04:8c:
30:62:b3:3f:e7:35:1e:4f:dd:47:08:26:28:43:ad:e1:7b:84:
79:f6:ae:c7:30:60:09:73:00:c4:4b:bf:de:ee:3b:37:26:1b:
5f:ca:a5:2c:98:56:1b:4c:61:1d:77:a7:9c:19:89:9a:75:f7:
02:a7:03:ae:31:00:89:94:ae:0f:b2:00:cc:88:6d:62:30:30:
f3:14:54:62:9b:21:65:b2:b4:e5:09:ba:2a:0c:7f:1d:f2:76:
65:41:15:95:b2:0b:1f:3a:b8:41:73:78:31:cf:f5:d1:2c:c4:
30:c7:1f:34:e5:37:97:fc:20:5c:9e:fa:68:82:67:fd:bb:cc:
05:85:a5:07:43:57:71:a7:26:f9:82:dd:d2:bd:04:51:6b:aa:
84:47:e8:f7:51:8b:1b:48:bb:90:48:5f:7f:8c:6b:27:e9:db:
8a:7e:49:e4:c2:68:aa:7f:dc:99:4b:d7:18:eb:b1:98:cf:e4:
45:8e:cb:13:04:8f:03:c7:c6:40:f1:dc:52:5a:52:4c:d0:ed:
81:a5:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:48:29 2025 by rpki-client