Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cmcuDcc07BAvqIOwwZHoLd9Zi5Y.roa
File: cmcuDcc07BAvqIOwwZHoLd9Zi5Y.roa (raw, json)
Hash identifier: 9nXjpMOD6GWihvwLdqAUpON6sIyy06lTytoKeFIxbZc=
Subject key identifier: 72:67:2E:0D:C7:34:EC:10:2F:A8:83:B0:C1:91:E8:2D:DF:59:8B:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01959895831BC5B093D3A9C8068BB1A71CB3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cmcuDcc07BAvqIOwwZHoLd9Zi5Y.roa
Signing time: Sat 15 Mar 2025 06:54:50 +0000
ROA not before: Sat 15 Mar 2025 06:54:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 151.242.0.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:95:83:1b:c5:b0:93:d3:a9:c8:06:8b:b1:a7:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 15 06:54:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72672e0dc734ec102fa883b0c191e82ddf598b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:78:cc:84:cf:e2:5e:54:2f:ba:3f:d3:b2:
46:03:25:53:f1:fc:4e:c1:96:33:15:10:dc:77:03:
8c:4c:60:64:2c:90:a0:ad:b8:c3:65:74:50:f8:e6:
c5:be:2f:aa:db:8a:66:98:4c:99:ea:bf:e1:62:0f:
f3:0a:a4:6b:e3:86:08:cf:72:f8:98:4b:84:c5:26:
0d:54:9e:64:ef:99:3f:11:11:07:1d:9f:d3:82:f0:
89:0e:05:4d:ee:bf:84:ed:e6:d3:cf:05:8d:9c:21:
46:b3:61:c5:84:b2:8b:d5:b5:04:0d:3b:50:55:3d:
b6:0b:25:f1:d2:f1:59:a0:5a:0c:29:27:ad:c2:77:
47:01:27:49:0d:ab:ae:8b:52:f0:ac:c9:5c:08:ed:
97:4f:47:80:0f:25:e2:c3:ae:1e:5d:c3:74:40:ef:
2a:9a:a4:2f:17:56:a8:2b:2b:7a:91:2b:24:7a:5c:
88:7b:2c:1c:ea:16:d5:b7:ea:76:90:76:3d:8d:e4:
14:31:51:05:b1:69:80:f6:fe:3c:3e:4d:52:da:47:
f0:67:5b:14:fe:f5:2a:4d:63:4d:8c:97:9b:7c:83:
31:cc:d1:e5:8a:dc:8d:06:1a:21:d5:8d:cc:4e:50:
5e:bb:e6:18:bd:86:69:c2:68:60:dc:5d:06:56:87:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:67:2E:0D:C7:34:EC:10:2F:A8:83:B0:C1:91:E8:2D:DF:59:8B:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cmcuDcc07BAvqIOwwZHoLd9Zi5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.0.0/24
151.243.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2a:4d:4e:35:d9:36:b9:22:90:89:1e:78:63:97:ee:f5:37:
23:a6:ad:54:7c:2d:b9:13:c2:46:8b:cc:d0:62:75:76:5e:4b:
a8:a1:63:62:01:e7:f0:6c:3f:f0:57:19:4c:7a:6a:56:7d:af:
98:f6:35:3b:4d:cd:4f:60:fe:78:ab:5b:19:8d:e6:9a:f1:ff:
24:3e:48:3b:e5:ec:1e:c4:8c:02:59:1a:bd:a8:d2:cc:36:88:
5a:ed:13:ed:51:51:45:81:73:04:43:38:2c:54:9d:bc:5a:95:
9c:ee:44:3f:ff:37:fe:11:ea:7b:a4:87:ae:75:74:c5:8b:65:
40:26:9b:cd:a1:d9:b5:99:ee:c0:26:23:12:ec:65:88:2d:f7:
5b:d8:07:f4:b7:87:36:a8:fa:91:a8:5a:1b:b0:01:35:b9:fe:
26:c6:6c:b3:f9:5d:3c:bf:82:9a:f1:b3:d9:57:ec:76:7d:6f:
d2:fd:e3:fa:df:6f:c0:ab:88:2c:db:e9:04:48:f0:b3:43:a9:
9d:3b:eb:4d:de:2e:4d:9e:e7:9e:bf:a4:bb:38:fe:38:2d:0e:
89:89:40:ff:08:55:f9:e2:00:e2:db:6a:34:90:8b:26:ce:94:
c7:6a:5b:59:b3:2f:60:36:49:7a:c4:ba:e5:77:c9:f7:50:b1:
b5:11:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:58 2025 by rpki-client