Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XIJ6-wF8F2TUyPuiPQJUxZVnQRw.roa
File: XIJ6-wF8F2TUyPuiPQJUxZVnQRw.roa (raw, json)
Hash identifier: 3kspRPUURylBgo5/cnoAwB14oApq2piwCU8F56TXhZE=
Subject key identifier: 5C:82:7A:FB:01:7C:17:64:D4:C8:FB:A2:3D:02:54:C5:95:67:41:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D1B7127CBC486303DE90E05DBC4B65A7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XIJ6-wF8F2TUyPuiPQJUxZVnQRw.roa
Signing time: Wed 26 Mar 2025 09:09:50 +0000
ROA not before: Wed 26 Mar 2025 09:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 151.242.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b7:12:7c:bc:48:63:03:de:90:e0:5d:bc:4b:65:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 09:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c827afb017c1764d4c8fba23d0254c59567411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:75:49:52:12:16:aa:09:19:02:6d:6d:a9:
a0:35:a3:fa:48:eb:57:22:4b:4a:17:86:9c:b4:2f:
1e:58:38:8c:5c:78:ca:d9:f3:5f:aa:f6:7f:27:a9:
a4:bb:ab:ec:13:6e:66:08:51:c3:95:da:99:2e:3a:
f9:90:21:74:6e:e6:1c:d6:97:58:10:86:bc:18:c8:
ca:84:37:78:28:df:a8:0a:bc:02:50:8f:5d:b6:2d:
8c:af:34:2e:74:f2:c9:bb:0b:be:33:97:90:85:af:
6b:3e:3f:29:b5:f8:ec:27:85:03:00:6e:b6:3a:d7:
14:5e:7f:96:9b:1b:ac:a7:29:3f:d4:b0:31:bd:11:
26:1c:5e:36:cd:18:9a:35:cd:0d:03:50:50:8f:4b:
71:bd:50:a1:24:37:b9:c6:3c:19:98:be:76:e0:3f:
7f:f9:2f:42:40:f4:eb:44:68:84:8f:a5:c5:46:c7:
9f:fa:87:42:ca:b9:f4:4a:68:c8:0d:d6:cf:57:84:
20:a9:44:7a:14:6d:fd:b9:0c:57:79:28:0e:dc:68:
19:d4:b8:3f:9c:52:08:b7:58:b9:18:84:dc:66:c9:
14:20:1f:dd:77:5c:23:6a:24:8b:aa:a4:1d:1a:85:
91:d8:55:02:c6:5b:91:0d:a8:31:b6:c0:b7:2c:47:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:7A:FB:01:7C:17:64:D4:C8:FB:A2:3D:02:54:C5:95:67:41:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XIJ6-wF8F2TUyPuiPQJUxZVnQRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.36.0/24
Signature Algorithm: sha256WithRSAEncryption
17:65:96:32:d1:7a:d0:db:09:f1:88:96:f4:6d:5c:d9:e1:9c:
e8:6e:5c:b7:07:1c:78:d3:1b:ef:c8:b5:70:cf:d8:59:03:bb:
1c:46:e5:b7:6e:f6:e8:32:84:d6:5a:40:4e:71:e5:d8:24:c7:
6b:67:e4:ef:a6:e4:06:60:00:75:eb:f1:51:6b:ca:79:78:3a:
54:bc:cb:0a:9a:9d:13:46:43:fc:cd:f6:0d:d7:7e:46:38:e2:
f1:39:a7:37:4b:a3:63:d8:cd:83:e8:d6:bf:4e:de:cb:97:4b:
43:5b:0f:d0:18:9f:fa:e5:7a:70:bf:05:8d:9b:87:d5:2f:73:
fa:86:45:e1:5b:00:aa:59:eb:ac:30:c2:ff:25:ee:62:29:56:
bb:61:ab:05:97:06:89:cf:3e:bd:0e:50:63:33:4d:26:26:50:
b7:a1:0c:6f:f1:97:f3:c3:d7:de:96:44:9b:c4:3e:4f:45:10:
03:f0:d4:43:e4:76:6d:7f:c0:21:08:ab:b5:63:5d:d7:65:a2:
8b:92:a4:46:38:9f:a3:a0:82:48:17:36:45:b4:3d:54:27:7b:
0b:3f:bd:b1:ba:4a:11:50:c6:31:bd:e9:ed:3c:76:85:41:17:
10:01:2c:53:8c:d3:64:10:67:83:20:fa:a6:95:6d:54:cc:c9:
71:e5:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:40:04 2025 by rpki-client