Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wf0Qj632jw8QDuISxP5W9m6dR8w.roa
File: Wf0Qj632jw8QDuISxP5W9m6dR8w.roa (raw, json)
Hash identifier: QQwFJODpYtDrGSD95BQnA5DPTFf9TAMRFQMleqXDFSs=
Subject key identifier: 59:FD:10:8F:AD:F6:8F:0F:10:0E:E2:12:C4:FE:56:F6:6E:9D:47:CC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195B4CB3181A1908AF780F0944D5718AC92
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wf0Qj632jw8QDuISxP5W9m6dR8w.roa
Signing time: Thu 20 Mar 2025 18:22:50 +0000
ROA not before: Thu 20 Mar 2025 18:22:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 151.243.113.0/24 maxlen: 24
151.243.117.0/24 maxlen: 24
151.243.119.0/24 maxlen: 24
151.243.121.0/24 maxlen: 24
151.243.122.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
151.243.236.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:cb:31:81:a1:90:8a:f7:80:f0:94:4d:57:18:ac:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 18:22:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59fd108fadf68f0f100ee212c4fe56f66e9d47cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:d6:41:73:23:a7:e7:6e:51:05:93:4f:6f:
9b:a3:96:f3:62:8d:a8:81:30:28:02:42:83:f9:1c:
9f:37:4c:9e:14:56:2a:15:ac:39:63:5c:4b:30:a1:
bb:7c:24:34:90:5e:23:d3:6f:dd:e0:8d:56:4c:41:
89:cf:99:11:56:40:8e:93:8e:5d:47:e6:a0:bb:66:
e8:90:32:df:b2:3e:6d:47:21:c6:96:71:bc:24:2d:
d7:06:18:97:d7:87:3b:2b:59:b1:a7:f5:fb:be:dd:
46:95:72:d4:f1:5e:37:28:22:23:66:3a:34:8d:da:
aa:2d:6d:d8:d8:d8:f7:af:de:ad:bd:7c:27:80:4c:
54:8c:c2:6a:75:49:17:9e:20:f9:eb:32:a4:ce:fd:
a4:23:d8:72:19:29:81:e7:34:27:27:62:ff:c1:47:
7b:b0:7d:2a:2c:4c:70:bd:44:c6:b0:80:9b:5b:bb:
a3:da:3d:f6:a6:5a:e2:75:c3:ac:06:e3:47:91:2e:
f4:5e:9f:69:ad:fa:41:d3:13:d3:9c:99:4b:4b:bb:
45:31:d0:4f:71:fa:78:4e:df:71:8b:7f:f6:a7:e6:
56:32:42:c2:6a:32:19:0e:3a:0f:f1:e3:47:2d:17:
e7:ad:2e:36:99:d8:23:a5:be:dc:97:34:76:62:60:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:10:8F:AD:F6:8F:0F:10:0E:E2:12:C4:FE:56:F6:6E:9D:47:CC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wf0Qj632jw8QDuISxP5W9m6dR8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.113.0/24
151.243.117.0/24
151.243.119.0/24
151.243.121.0-151.243.122.255
151.243.124.0/24
151.243.232.0/24
151.243.236.0/24
151.243.242.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2c:11:6a:8f:b0:5a:5b:2e:83:3d:ca:9f:65:22:da:00:44:
6a:22:30:6d:3c:ea:2a:51:a8:5d:a7:84:1b:7a:f8:80:f1:c7:
ac:93:3a:e8:9f:6c:35:cc:e6:08:aa:2b:e6:77:22:f0:11:9a:
47:08:7f:59:02:6c:65:62:ba:cd:61:4b:9f:01:81:01:3d:b0:
3b:eb:02:84:f8:2f:64:f6:77:1d:6e:2b:d1:82:f7:e7:a7:b5:
22:ee:db:a2:77:7f:88:77:3d:fa:d4:74:d8:e2:05:55:64:0c:
5b:52:b0:4c:2a:f6:ea:7f:ac:20:60:7e:b2:98:29:9a:f6:31:
5c:0d:74:eb:6d:a5:b3:00:6f:1b:5b:4c:d5:df:c8:b0:8b:89:
37:8a:fd:0b:ae:aa:bc:8e:f6:7e:ed:23:a1:80:1a:18:0c:04:
0a:8d:df:59:64:bb:78:24:fc:3b:e4:db:a1:1d:ca:e5:7a:85:
e9:83:ef:19:14:e2:b0:42:68:b2:9e:b6:f2:01:44:f6:05:8d:
c5:80:91:1a:fe:8a:76:83:e7:60:c6:58:39:36:bc:d0:17:c0:
7d:0c:14:2b:bc:fb:a5:29:4d:52:a7:bf:f0:18:a4:28:99:b9:
4f:b0:8b:f1:42:ac:fc:c6:01:8a:40:33:88:e5:43:a7:0c:29:
02:4e:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:10 2025 by rpki-client