Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SEVUS6hyBF_nSMmG5OkrToXrAIE.roa
File: SEVUS6hyBF_nSMmG5OkrToXrAIE.roa (raw, json)
Hash identifier: w0OmfjyC0f4CIvmIcywi42SLj3xhoZpggYHJxmbe88E=
Subject key identifier: 48:45:54:4B:A8:72:04:5F:E7:48:C9:86:E4:E9:2B:4E:85:EB:00:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B5ED7A14095281A0477D0D436B8BE3DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SEVUS6hyBF_nSMmG5OkrToXrAIE.roa
Signing time: Thu 30 Jan 2025 06:37:06 +0000
ROA not before: Thu 30 Jan 2025 06:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.243.8.0/23 maxlen: 23
151.243.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:ed:7a:14:09:52:81:a0:47:7d:0d:43:6b:8b:e3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 30 06:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4845544ba872045fe748c986e4e92b4e85eb0081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:a7:98:89:8c:c8:b4:b9:13:75:4e:93:2f:
10:7e:ff:6f:5d:d8:f6:98:2e:0b:d4:37:30:7a:fe:
aa:5d:0c:c2:0f:99:c7:01:53:3c:ec:c7:77:ea:6b:
e1:b7:b2:53:49:9f:3e:26:b6:df:30:06:85:95:d8:
61:39:d1:7b:ca:1a:df:40:64:a5:64:b4:60:be:7c:
e6:2c:6c:fe:65:30:00:ec:b5:73:65:c9:43:73:0b:
64:1a:fe:0a:4b:d1:7e:4b:dc:58:5e:e2:92:4c:4b:
36:6a:ea:b0:6d:40:f6:b3:88:a0:7b:1b:50:43:c8:
74:6c:89:8b:e0:6f:89:af:3a:ee:85:38:09:4f:35:
32:46:62:97:e9:33:55:42:8c:81:1c:07:ce:ff:77:
c3:90:d0:7a:90:70:ca:d9:f3:89:ea:97:e1:09:1b:
55:d0:e6:f3:67:f0:c3:13:6a:94:6a:1c:54:b4:33:
e6:87:92:19:e7:e5:7a:d6:8f:bd:24:b3:eb:54:6f:
ae:f3:35:6a:ad:7e:da:1e:72:f4:fd:ee:86:23:cb:
59:c4:58:08:ff:ea:5c:65:6f:21:23:4e:9d:0c:b7:
18:26:d1:a5:64:f9:ca:9d:7f:20:1e:97:ea:4b:49:
fb:fd:d5:32:71:d9:a0:ba:0f:37:45:3d:35:89:81:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:45:54:4B:A8:72:04:5F:E7:48:C9:86:E4:E9:2B:4E:85:EB:00:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SEVUS6hyBF_nSMmG5OkrToXrAIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.8.0/23
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e4:0b:6d:7d:ea:f9:69:43:72:67:85:8e:d8:d3:7f:92:19:
08:83:d0:89:a1:1e:6a:9e:98:48:ea:d4:af:5b:ce:8b:73:6b:
35:a9:c8:3f:26:54:0c:b9:f4:2d:b5:d0:a8:30:11:b6:89:e6:
ad:bd:08:da:e5:53:1a:b4:c8:fe:ea:2b:7d:21:74:c2:70:95:
57:2d:b3:7c:a1:03:a3:b2:63:02:c5:b4:52:47:3b:76:32:6f:
4c:b7:8e:dd:fe:b8:00:30:9d:6d:30:96:29:86:93:1b:ac:b8:
88:e7:c4:85:43:1b:8a:02:e9:f2:75:ec:01:2f:42:24:ac:4f:
9d:3a:7c:cb:00:dc:c0:cb:64:59:27:9e:ec:03:4a:43:80:92:
f9:2b:5f:fe:88:03:33:bd:24:8e:cf:c2:c1:b8:f3:a4:ac:1c:
5f:b2:9d:20:31:a7:e7:3e:d5:eb:17:ce:12:05:ad:7d:31:75:
cc:0d:9d:7e:e5:45:0b:ae:7a:2f:4e:5d:00:1a:43:f5:ba:b7:
0f:9f:d8:ea:db:6c:37:fc:ca:40:68:58:85:2a:fc:fd:19:1b:
e3:8b:14:a7:69:19:f9:eb:86:12:84:d9:15:55:20:81:81:41:
22:75:1f:a5:39:02:77:49:d2:95:b9:0c:6d:1d:1e:63:b9:71:
fc:b2:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:08:44 2025 by rpki-client