Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQ1q_RssXRJPsKGkKNBlDZG9lxI.roa
File: VQ1q_RssXRJPsKGkKNBlDZG9lxI.roa (raw, json)
Hash identifier: E5Q6+5Beg2+r2DRec41LJ2uJdJMHmgrBNaw7CLIs4eA=
Subject key identifier: 55:0D:6A:FD:1B:2C:5D:12:4F:B0:A1:A4:28:D0:65:0D:91:BD:97:12
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D1B712DCD237B74A7638DFC3C39B1F9D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQ1q_RssXRJPsKGkKNBlDZG9lxI.roa
Signing time: Wed 26 Mar 2025 09:09:50 +0000
ROA not before: Wed 26 Mar 2025 09:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213920
IP address blocks: 151.242.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b7:12:dc:d2:37:b7:4a:76:38:df:c3:c3:9b:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 09:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=550d6afd1b2c5d124fb0a1a428d0650d91bd9712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:4c:37:46:48:3e:66:27:40:02:ba:58:ad:
e7:16:3d:61:af:4f:47:99:e2:1b:52:89:73:4b:b6:
53:69:73:95:2c:dc:b4:07:0e:9a:07:bb:77:fb:4c:
df:22:da:39:0b:d0:cf:61:4f:f8:ea:51:a9:98:61:
98:61:ad:16:80:a7:e9:fb:2f:73:ad:e9:6c:d1:7e:
ba:2f:de:56:05:2f:7a:57:c5:b3:d1:f3:27:b1:68:
26:1c:55:c0:4e:b9:a6:83:99:fa:43:e9:93:f8:1d:
0a:16:6e:3a:0a:80:ec:a9:0f:a9:33:83:3b:19:62:
90:70:73:9a:39:91:dc:96:3a:cf:f8:ca:c9:b9:6b:
a1:56:ef:da:f9:62:2e:b4:ab:32:dc:71:5f:c2:f8:
34:b6:95:74:c8:df:d4:59:7d:5f:e8:15:67:81:bb:
7c:27:d9:a5:e7:6d:3c:c5:ce:8e:9f:90:c7:7b:e0:
f6:87:72:1f:bd:6a:e8:54:9a:94:33:8e:b9:de:5d:
38:d6:d7:e3:28:3d:0a:6c:a6:be:08:96:fc:29:af:
ea:22:7a:b0:88:a7:09:a9:5e:ad:a7:0a:2c:c2:e9:
fc:f3:3f:15:3a:6b:fd:66:2a:af:3e:ce:f6:38:d6:
36:19:47:03:8c:50:26:6b:14:29:6e:9c:b8:d2:f4:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:6A:FD:1B:2C:5D:12:4F:B0:A1:A4:28:D0:65:0D:91:BD:97:12
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQ1q_RssXRJPsKGkKNBlDZG9lxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.25.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0a:7c:51:e9:0b:fb:aa:d7:79:41:e9:2f:b4:0a:ac:d2:96:
92:78:0b:26:66:92:a4:ee:4b:d9:21:59:b4:f5:47:e9:bf:e5:
38:ab:99:4a:25:09:93:97:44:f9:15:46:35:ca:7d:53:c9:be:
ce:a8:90:d9:37:2f:4c:2d:c3:74:aa:41:58:95:0b:f3:ba:38:
ce:00:3f:e2:5b:2c:37:81:9e:8c:fd:bf:5e:76:45:29:58:f7:
6d:3c:0a:22:3a:03:ff:14:dc:9c:23:63:d6:d5:10:a2:17:49:
4e:67:0d:18:23:ef:f7:4c:fa:22:20:89:fa:55:3a:56:fe:cd:
97:e7:fc:50:13:e6:69:de:c3:59:cd:9c:cf:70:5f:90:1b:88:
7c:df:f0:3e:3c:4d:de:5a:8b:80:7b:3a:4f:08:7b:61:1d:3a:
ec:a9:9d:b1:34:ed:78:81:d2:be:a2:7f:92:bc:24:58:b0:3a:
fd:c3:45:04:e2:1c:ff:75:80:d5:67:dd:8a:20:a6:0a:ac:af:
09:67:78:80:42:11:fc:55:ca:f4:12:c7:ba:40:d1:ba:be:ff:
d2:43:f5:33:cf:ea:ca:fa:14:d6:ce:55:32:8c:99:9a:ae:a3:
be:8f:ff:a8:a9:44:b2:e1:8e:cb:69:c6:10:45:19:96:f1:fe:
36:8e:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:01 2025 by rpki-client