Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YcwnDleB__7RPE2djsBvOu2bLAk.roa
File: YcwnDleB__7RPE2djsBvOu2bLAk.roa (raw, json)
Hash identifier: kyfhT5gkwrhFsLyNpcJZUYCOnhkgvdTEi1KX/WRKH8s=
Subject key identifier: 61:CC:27:0E:57:81:FF:FE:D1:3C:4D:9D:8E:C0:6F:3A:ED:9B:2C:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194873A83C9897008AF40B5D7439DEA0825
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YcwnDleB__7RPE2djsBvOu2bLAk.roa
Signing time: Tue 21 Jan 2025 04:59:06 +0000
ROA not before: Tue 21 Jan 2025 04:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 151.242.52.0/22 maxlen: 22
151.243.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:3a:83:c9:89:70:08:af:40:b5:d7:43:9d:ea:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 21 04:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61cc270e5781fffed13c4d9d8ec06f3aed9b2c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:25:db:f1:c5:f2:b5:3a:2b:58:5c:ca:09:
29:a7:21:99:45:90:a6:82:4d:98:ff:2c:e9:7a:1e:
1e:5b:8d:f1:15:7e:3e:20:79:fb:ea:09:9c:52:a2:
11:35:38:61:e5:95:24:a9:ab:1b:43:6d:a5:86:6c:
3d:41:fa:e0:79:6d:c0:f7:5d:6f:aa:bf:13:d6:76:
a0:83:b8:aa:dd:79:15:ff:6d:b5:44:7f:40:59:4d:
67:34:71:b9:f1:64:1a:46:25:71:51:12:1f:d1:49:
d0:73:38:d0:0d:be:d6:3b:b9:23:77:48:99:1f:99:
d6:d7:b7:d1:06:10:50:63:d6:aa:c6:14:b9:55:89:
a3:78:f4:ec:7d:32:ce:c7:26:d9:29:bb:45:d6:ca:
bf:4d:d3:a8:4d:87:29:6c:74:29:ee:cb:a4:a6:7a:
8e:5e:42:ee:e3:cb:bf:14:21:60:8e:c5:32:af:d3:
06:ba:ba:98:55:2c:f4:95:d6:57:1c:f0:06:28:f4:
ba:56:00:54:52:9b:ac:2e:b0:4d:70:69:0d:19:2a:
59:ef:fc:3d:a5:8c:39:40:80:71:8a:9f:df:8c:31:
ae:c2:39:cd:11:48:b5:72:f1:03:f3:22:27:f0:07:
3a:26:df:08:65:35:f4:5c:dc:89:c6:70:d8:7f:66:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:27:0E:57:81:FF:FE:D1:3C:4D:9D:8E:C0:6F:3A:ED:9B:2C:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YcwnDleB__7RPE2djsBvOu2bLAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/22
151.243.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:bc:60:00:d2:8c:be:cb:ab:18:e8:d1:ff:9d:18:e7:a6:d3:
53:cd:c4:68:c1:04:97:08:50:d1:a7:2c:ed:77:d9:2e:37:28:
0c:d2:cc:07:b9:e0:56:64:61:aa:99:ff:cd:78:d9:4a:7a:7d:
e6:9b:7f:01:d4:c6:fc:97:37:78:a1:1b:67:69:56:dd:2b:e1:
18:fd:91:ff:e7:56:ce:d7:cb:89:15:d8:f8:89:98:1d:5e:16:
16:55:e7:c7:f2:0e:b2:d8:cc:e6:ff:96:4b:9b:11:f8:ad:10:
74:95:66:ea:e8:44:d9:fa:08:f2:59:8c:a7:b4:9b:d5:8c:85:
6f:36:13:bd:e8:d7:cb:f4:cc:2e:f6:a9:c6:33:7e:b6:9a:3d:
3b:3b:4a:0a:16:b9:a3:d2:ec:b1:fd:79:7e:83:43:8a:8e:35:
7e:a2:1a:b8:89:e6:f1:e4:9d:5a:cd:05:a5:7d:d8:30:47:55:
02:aa:2c:2d:cd:24:16:9a:f9:6c:80:60:be:48:f3:52:dc:97:
5a:ce:e9:a2:75:4f:3d:23:ca:2c:39:81:0b:79:43:eb:b1:a4:
b5:e4:65:e1:77:71:bb:39:30:05:1c:a7:24:1e:13:30:86:f2:
2c:43:2b:9c:34:91:0d:79:e5:fb:73:e1:b4:90:00:a9:c7:8d:
19:29:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:21:20 2025 by rpki-client