Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aabTohMseB0jsfEtzMcuJ98v4aA.roa
File: aabTohMseB0jsfEtzMcuJ98v4aA.roa (raw, json)
Hash identifier: jBSAnrqkfwxfgshrB7jwepdva9uCyo4DnS2gjvdsUCk=
Subject key identifier: 69:A6:D3:A2:13:2C:78:1D:23:B1:F1:2D:CC:C7:2E:27:DF:2F:E1:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FE3DC9E27A1670DA46E1A6BCEB34355
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aabTohMseB0jsfEtzMcuJ98v4aA.roa
Signing time: Thu 13 Mar 2025 14:23:49 +0000
ROA not before: Thu 13 Mar 2025 14:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:e3:dc:9e:27:a1:67:0d:a4:6e:1a:6b:ce:b3:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a6d3a2132c781d23b1f12dccc72e27df2fe1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:d3:ae:74:73:b4:77:9a:a2:4b:7b:f2:b2:
a5:1d:a1:01:5e:45:d7:01:a7:a8:09:e4:cd:ce:29:
4e:00:d3:13:86:90:28:c6:55:51:83:13:0e:43:91:
65:26:50:b6:ea:57:f0:03:11:bf:a2:1d:6d:84:97:
7c:c0:a2:5b:db:bc:05:4d:b6:94:f4:bf:64:e9:e5:
2c:1d:c3:75:00:49:c0:13:15:d8:50:a0:6c:bb:62:
59:cb:e3:70:78:ef:1b:79:6f:34:2f:bd:5e:77:0c:
28:33:18:18:7b:6d:fb:de:d2:48:54:53:d6:06:36:
08:10:25:d0:17:80:e9:15:f4:8c:92:4e:2f:28:9c:
c8:fb:5d:3a:99:39:46:db:d1:33:f6:20:4a:dd:d8:
69:cb:6d:b0:e1:61:d8:68:cc:75:54:64:c1:77:d2:
1a:1b:49:4c:6c:1f:a4:de:14:54:59:e8:41:ec:fc:
af:fd:a8:fe:6b:1b:f6:40:35:a7:41:33:ad:e2:0e:
cc:fc:db:86:25:0b:57:0f:73:53:85:d9:44:30:08:
9c:b5:96:4d:4a:64:fd:ea:4c:82:bb:1b:e2:cb:77:
32:f9:62:e0:15:3f:aa:c3:8e:32:1b:3a:98:38:43:
7f:d0:ff:b3:f3:33:a4:ea:f7:f2:bf:a6:3c:60:16:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:D3:A2:13:2C:78:1D:23:B1:F1:2D:CC:C7:2E:27:DF:2F:E1:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aabTohMseB0jsfEtzMcuJ98v4aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9f:7b:25:98:8d:69:cc:65:b7:c6:55:d4:eb:44:a8:06:62:
e5:89:c8:68:fb:3e:5d:3a:67:19:53:e0:4f:5a:6b:c5:0b:f1:
49:50:b8:3d:b3:db:b4:1e:d8:da:0f:9b:d4:7e:b5:10:cf:91:
61:e2:2c:cc:30:65:7a:a5:d0:45:6d:66:1a:a4:9c:c6:92:b8:
6e:4d:29:0a:f4:d3:99:51:94:57:d9:bc:35:98:a8:20:95:62:
55:e7:fe:de:38:c0:42:6a:6d:f5:ca:d3:af:49:17:d8:be:c6:
1a:f4:72:6a:04:be:dc:ff:c2:6a:3e:aa:fb:ec:d1:c3:0d:47:
9b:72:59:ac:0c:77:a4:53:28:ce:8a:dd:46:38:5e:83:75:18:
4c:ac:07:cd:a7:c9:02:46:a8:a9:cc:ae:03:f7:03:73:c2:6b:
81:de:49:eb:f8:44:dd:6e:3d:ac:3a:2c:ef:39:74:ec:d6:d3:
e6:e0:65:d5:58:06:d5:c3:57:76:c6:ff:47:84:19:cc:24:b0:
fe:fc:08:1a:57:11:8f:00:29:53:1f:34:b8:23:b0:3c:06:19:
dd:25:49:e7:a5:e7:aa:02:ee:39:de:38:40:a0:9a:07:96:b5:
00:c8:db:0d:fa:31:1c:73:88:e5:b8:f7:0a:e2:12:96:6a:d9:
e6:f6:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:31 2025 by rpki-client