Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RNNKJqLLEC86_j7VBhu4Ty6N0Vo.roa
File: RNNKJqLLEC86_j7VBhu4Ty6N0Vo.roa (raw, json)
Hash identifier: /Y8tjfF8NFxxAR161hQTSlphscith/Q8sMEEsDDmdjg=
Subject key identifier: 44:D3:4A:26:A2:CB:10:2F:3A:FE:3E:D5:06:1B:B8:4F:2E:8D:D1:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193E39F2D2D5427817649430057B1B3DC12
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RNNKJqLLEC86_j7VBhu4Ty6N0Vo.roa
Signing time: Fri 20 Dec 2024 10:31:19 +0000
ROA not before: Fri 20 Dec 2024 10:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 151.243.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:9f:2d:2d:54:27:81:76:49:43:00:57:b1:b3:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 20 10:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d34a26a2cb102f3afe3ed5061bb84f2e8dd15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:48:39:9f:47:64:00:6f:95:a4:19:bf:11:
40:e9:f0:c1:3e:7a:a6:2c:c4:af:46:94:42:22:96:
5e:66:c1:66:91:65:7b:90:8a:76:fd:eb:16:84:46:
7e:f1:98:43:8e:ce:69:dd:ac:c2:b1:b8:b4:31:60:
15:d5:6c:0c:19:ad:10:36:ad:aa:ce:23:9b:50:d0:
44:33:d5:bd:3b:20:3c:27:21:a8:2b:3d:e8:37:95:
82:36:00:49:8f:08:15:88:33:cc:29:13:c5:59:12:
a6:c7:47:4c:82:4a:c1:de:4e:39:a3:f8:8f:b7:5c:
62:a0:b5:2e:a9:ce:e8:eb:b3:a4:6e:9c:a1:e7:30:
18:dc:77:8c:e9:b5:1d:a7:f1:65:92:44:d4:07:37:
5c:22:64:10:b0:e3:4e:dd:91:bc:65:6e:af:57:b3:
89:bd:ad:b0:1d:29:f8:bf:49:75:40:01:50:cb:6e:
3b:40:4e:91:0a:09:1e:25:c9:81:12:e8:a2:51:96:
7d:1b:8b:88:5f:1f:c6:6e:fa:23:62:94:08:15:ee:
bc:91:f3:1c:31:88:a7:0f:69:e6:12:b7:b6:db:b7:
f7:12:73:70:b9:68:12:4d:81:df:cd:dd:b8:e8:63:
80:8b:e4:d0:5a:01:4e:96:26:91:69:84:4e:ee:2c:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:4A:26:A2:CB:10:2F:3A:FE:3E:D5:06:1B:B8:4F:2E:8D:D1:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RNNKJqLLEC86_j7VBhu4Ty6N0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:5d:03:2d:06:a2:c2:22:3e:5b:9c:87:61:ce:f6:b6:cd:
15:27:74:a0:50:17:8f:bf:93:67:dd:18:35:db:98:f6:e2:49:
ad:a3:54:8f:fb:76:55:4a:e5:99:63:13:90:9d:06:f8:d5:e8:
4e:63:ca:e3:5d:01:7c:b5:3d:d3:35:35:8c:0d:90:31:65:d4:
4f:77:fd:24:29:4a:4b:60:c1:1a:f1:0f:aa:1e:41:84:e1:b0:
06:8a:bd:23:9a:41:d4:de:60:59:35:40:24:be:0f:29:ca:89:
58:ca:03:4c:e1:91:59:1d:07:a9:c5:57:8d:8e:ff:30:bd:00:
1f:ae:74:5d:5d:46:18:79:7d:8d:ae:1f:63:d6:2a:c5:bc:75:
28:0d:1e:e4:5e:26:37:4e:c5:50:6d:f8:aa:16:25:28:40:9a:
be:44:7c:37:ba:9c:73:2c:49:73:50:7c:35:48:6b:2b:44:2d:
d8:f8:9c:e3:2b:90:e9:7a:5c:a0:ac:26:71:d2:20:d6:8e:bd:
9f:16:5d:77:33:75:06:17:a0:be:8f:c5:5c:dc:97:a2:c5:cc:
ec:15:1a:ab:df:06:03:ae:b0:60:ab:c3:0c:3b:a5:ee:b0:e5:
3b:63:58:c9:09:17:7d:9b:fe:6c:11:eb:91:a9:8d:a9:b7:0f:
ec:5c:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:47 2025 by rpki-client