Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_c6_09Yxn787jF3zOSqN2zi7JHw.roa
File: _c6_09Yxn787jF3zOSqN2zi7JHw.roa (raw, json)
Hash identifier: fF03/QtvVZTD9H3Hq8B1WNlvpPcvYBSCXIRfBWsgC58=
Subject key identifier: FD:CE:BF:D3:D6:31:9F:BF:3B:8C:5D:F3:39:2A:8D:DB:38:BB:24:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B5F123D450612BDF6C2DBCAC252678FC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_c6_09Yxn787jF3zOSqN2zi7JHw.roa
Signing time: Thu 30 Jan 2025 06:41:06 +0000
ROA not before: Thu 30 Jan 2025 06:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 151.243.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:f1:23:d4:50:61:2b:df:6c:2d:bc:ac:25:26:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 30 06:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcebfd3d6319fbf3b8c5df3392a8ddb38bb247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:a6:47:39:42:9c:2c:fc:e8:81:f3:2a:a0:
76:f1:52:0a:f3:c0:51:a5:b7:b6:be:ba:ea:7c:31:
fd:3d:2c:9c:bd:53:5e:e9:fb:1e:c9:a3:d0:e2:b4:
25:3e:24:59:0c:58:54:4e:70:25:61:cb:78:fc:cf:
bb:53:42:8d:2a:99:fe:de:7b:b6:1b:8b:38:90:af:
a7:ef:09:6f:28:8c:b1:3d:2e:ef:4a:cc:f1:7d:c2:
52:c0:ae:f4:bc:3c:ff:24:94:eb:22:ea:52:33:b0:
cb:6d:f9:58:0d:9b:08:7c:0a:c9:61:e2:cb:83:de:
36:92:32:4a:96:00:cd:8c:fe:20:dd:b1:2f:db:20:
cd:24:25:cd:9a:eb:3b:63:c2:5a:9d:b7:c2:20:ad:
f5:9a:b3:30:1a:5b:bf:28:de:5d:4f:a9:bc:b9:fb:
e7:2c:e7:d9:9d:79:97:11:1f:ed:7e:ac:bc:e0:55:
15:c5:56:a6:4c:81:6e:1c:8c:1c:a9:e8:ac:28:74:
67:31:5a:c8:02:e9:51:d4:65:19:2b:a1:e5:b5:22:
b6:19:5e:9a:81:22:18:9b:a6:dc:f0:e0:b4:53:4a:
c7:eb:64:ce:2c:84:fb:f3:e1:d4:14:9f:ef:2c:ff:
ce:11:8b:d8:e4:e0:3c:e1:68:7b:70:82:ce:03:51:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:BF:D3:D6:31:9F:BF:3B:8C:5D:F3:39:2A:8D:DB:38:BB:24:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_c6_09Yxn787jF3zOSqN2zi7JHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:55:e3:05:f8:6d:1c:63:a9:c8:15:51:e7:5f:4d:76:ee:
e8:22:56:9b:cb:7f:38:22:85:98:83:0e:91:ad:f6:b0:8b:af:
78:d1:6b:5f:09:94:53:6e:1f:25:c9:23:92:ea:45:44:db:71:
a0:46:76:e0:ea:f0:07:d5:d9:a9:81:c1:c3:31:c7:a4:0d:7d:
2a:21:ea:ab:7f:bb:dc:a7:c5:b1:92:be:11:72:98:86:6d:ff:
af:e9:b1:63:de:2d:f4:8d:15:ad:8d:7f:78:df:49:ed:97:65:
50:d1:81:1f:55:75:9f:97:d2:6e:e9:4e:d7:27:a8:bd:51:43:
71:da:c7:d3:08:93:11:63:eb:9d:38:59:9a:71:ad:bf:09:26:
72:10:a6:06:19:57:ae:94:49:27:b3:7f:5d:e6:48:06:d8:c3:
14:7d:a6:6e:55:35:c0:5a:d1:38:c1:3b:1a:12:a9:8a:25:30:
d7:f5:84:9b:97:d2:4d:c4:bf:1d:90:ce:6d:f3:b1:4e:a5:47:
92:40:4c:92:7f:8e:f0:7b:a4:0e:2a:25:b1:e5:43:4b:df:d8:
85:ed:23:0b:ff:da:00:8c:10:b3:e2:9d:8e:73:e3:29:01:62:
28:8c:8d:5d:1e:a1:7f:94:3f:f6:21:cf:cf:ee:4a:09:e1:f6:
ba:01:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:15 2025 by rpki-client