Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bIi_4fRE0tlXlxYvdUIuaKV1DLA.roa
File: bIi_4fRE0tlXlxYvdUIuaKV1DLA.roa (raw, json)
Hash identifier: LZgJv8vnMelTJyUJgwwJ3tE1MMZPwPE3xlOGvtnFEQ0=
Subject key identifier: 6C:88:BF:E1:F4:44:D2:D9:57:97:16:2F:75:42:2E:68:A5:75:0C:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194A656B1774283C497AF7BDC0F3C8E052C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bIi_4fRE0tlXlxYvdUIuaKV1DLA.roa
Signing time: Mon 27 Jan 2025 05:58:06 +0000
ROA not before: Mon 27 Jan 2025 05:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 151.243.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:56:b1:77:42:83:c4:97:af:7b:dc:0f:3c:8e:05:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 27 05:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c88bfe1f444d2d95797162f75422e68a5750cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:ec:91:d9:9f:50:46:65:67:d0:47:08:74:
d5:66:41:bf:a3:d5:8f:89:7f:b8:3e:f6:66:38:9c:
93:ea:3e:db:41:f6:11:78:4c:6e:7e:60:12:ed:91:
c8:6d:be:fa:3a:15:13:d5:0b:2b:f6:8e:f4:5d:c9:
59:ae:e0:6c:2d:2d:16:25:bb:ee:e8:40:1a:2f:50:
27:0b:33:d4:31:e5:ae:9f:53:95:de:73:f5:83:23:
0c:36:cf:db:86:e9:d6:50:9c:c8:62:e2:34:16:49:
66:8b:6d:a3:ab:d0:df:99:df:6b:b4:0f:9b:dd:55:
6a:fb:5f:28:55:59:4e:28:2a:4f:97:fc:7b:34:4d:
cd:94:9c:1e:8e:84:19:f2:a8:28:77:26:90:cc:7f:
d8:b1:50:30:04:b0:f4:a4:5b:46:95:eb:a7:8c:f4:
d7:c3:c3:0c:36:d2:38:9c:b6:95:cd:f4:e2:ff:00:
0c:81:61:14:26:66:4d:93:f1:56:4f:d3:63:f3:f8:
35:38:d5:39:19:f9:95:bc:a0:63:6e:e8:9d:e1:6e:
20:5c:25:88:b5:7b:a1:6c:6c:f7:16:72:de:bc:93:
3a:6a:9c:8d:9e:b4:4e:ae:1d:18:80:13:c0:1f:9f:
63:0e:49:30:9a:84:5e:f9:31:bd:63:6a:c1:4e:67:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:BF:E1:F4:44:D2:D9:57:97:16:2F:75:42:2E:68:A5:75:0C:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bIi_4fRE0tlXlxYvdUIuaKV1DLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3e:54:48:e9:48:f6:b8:ce:59:e9:3f:1b:ef:ca:d2:4c:03:
ff:bf:52:ed:13:6a:1d:d4:88:cc:88:1e:79:2f:df:7d:81:19:
e7:c9:79:73:02:a5:3c:f1:6b:88:20:12:8e:5a:73:43:b5:7f:
22:d6:76:03:b8:98:61:45:6c:9c:ec:b6:be:52:ce:23:2e:f6:
4a:0c:e8:0a:a5:9c:8f:76:1e:39:5f:39:04:de:e4:98:93:b2:
83:86:d0:78:3a:9c:d5:f8:d5:ac:e5:cc:52:12:7a:51:c6:46:
35:d5:55:ba:fe:d8:83:e6:20:79:90:46:f3:be:c4:38:77:69:
0d:7f:f9:3b:c2:d8:e9:4b:d2:52:42:af:38:1d:ec:81:3c:22:
c3:a2:11:47:b7:f4:0a:cc:67:5f:de:98:b8:ef:c8:3c:1e:24:
55:34:a9:3d:aa:77:40:00:c3:be:d4:85:21:c5:a3:42:e2:c8:
80:6c:53:f4:2f:65:fa:47:e6:8b:b3:d5:be:34:65:4d:3e:3a:
80:30:f2:4e:0c:f4:a4:21:24:cb:81:d5:a1:92:88:f9:4c:32:
03:b8:f8:08:41:ed:98:61:c7:a3:89:48:95:af:a6:b5:7b:21:
c8:3c:69:86:38:58:1e:25:d1:c6:c4:34:62:73:80:9a:0f:06:
cf:40:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:52:25 2025 by rpki-client