Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoHDYagCSMmUUcQ4dA0Oci2ZmOI.roa
File: eoHDYagCSMmUUcQ4dA0Oci2ZmOI.roa (raw, json)
Hash identifier: 2spi7tw7ACQahG/NCtomD/p7sD8ehrxSd7Mc9OysiSE=
Subject key identifier: 7A:81:C3:61:A8:02:48:C9:94:51:C4:38:74:0D:0E:72:2D:99:98:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019475093B800B3236B008134347BC1F53D3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoHDYagCSMmUUcQ4dA0Oci2ZmOI.roa
Signing time: Fri 17 Jan 2025 16:12:06 +0000
ROA not before: Fri 17 Jan 2025 16:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198843
IP address blocks: 151.243.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:09:3b:80:0b:32:36:b0:08:13:43:47:bc:1f:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 17 16:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a81c361a80248c99451c438740d0e722d9998e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:4a:af:01:63:86:4b:06:e6:71:83:e2:77:
2e:37:0b:47:08:e5:be:0b:a8:ab:dc:0c:b8:be:92:
02:48:70:4c:e9:94:8d:80:56:b6:79:94:69:80:83:
e6:54:ca:64:2d:f1:dd:00:ae:91:ec:21:2f:e9:00:
0b:66:ea:3d:bc:eb:8b:f2:0a:16:e1:2f:f3:ae:07:
9e:32:f9:47:4a:aa:bc:b2:b9:bc:69:d1:40:ae:55:
b0:d5:d5:ba:df:8b:e6:19:ec:cd:83:4d:4e:36:49:
9c:c6:37:10:b1:c9:18:08:3a:19:bf:85:f3:b9:e1:
8f:24:d2:78:59:5a:f9:62:06:b4:3f:4b:2d:e1:55:
43:62:e5:ca:b9:ed:4c:07:43:c5:9e:5d:f2:4f:5b:
0c:bf:80:ce:a4:de:64:3a:b8:a5:bb:ef:14:70:d8:
e4:07:20:1f:c4:d6:29:6d:16:f9:59:83:69:af:37:
86:20:44:fe:4b:24:c4:2c:49:52:0a:b3:e6:32:25:
27:cf:49:68:62:ad:95:7c:21:21:31:b5:1c:2e:bf:
94:0c:aa:db:18:1d:2c:56:fa:a5:eb:22:36:68:e9:
1a:d6:c2:4f:24:90:7a:84:71:b6:a2:fa:de:5f:67:
dc:8f:31:0e:95:a1:a9:37:ce:3d:b9:8b:e8:58:fa:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:C3:61:A8:02:48:C9:94:51:C4:38:74:0D:0E:72:2D:99:98:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eoHDYagCSMmUUcQ4dA0Oci2ZmOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:70:15:79:44:57:5f:5e:55:30:75:60:9e:ae:55:ed:0e:e2:
be:cf:62:6e:e6:a9:11:65:75:ac:4a:2b:66:cc:ae:5b:9c:0d:
7e:39:2e:d9:82:19:96:cf:e1:aa:02:3d:42:cf:47:86:cf:f3:
f4:71:1e:51:42:26:9f:65:4f:3c:5c:87:f8:fc:d9:72:b0:83:
22:0b:d5:d9:46:b5:cf:d2:02:ba:9f:34:53:85:03:b6:d7:62:
c4:30:d0:c5:14:1d:9d:81:06:56:a6:5a:16:8b:9a:a0:95:0a:
bf:96:7d:40:41:e3:0c:a7:83:71:ee:c3:e0:cb:5e:d1:8c:f8:
d8:54:00:bc:f8:75:0d:80:44:bb:61:20:f1:2d:e3:c8:45:6c:
ef:73:b3:1d:92:38:34:50:6e:d3:d9:27:60:fb:68:7f:6d:67:
11:c5:54:4f:0a:7c:63:ad:4b:51:ec:98:d3:79:17:f9:30:43:
ac:13:1a:13:6d:a9:1d:d4:10:6b:bb:ca:33:81:88:52:41:7f:
ba:f6:b5:a0:d6:57:58:af:2e:9b:2d:7c:10:10:b9:c3:8a:83:
3a:84:54:0f:d0:2c:e9:63:8f:8d:fc:b1:45:45:9e:f6:16:bf:
53:76:ba:11:50:fa:e1:12:0b:56:3b:54:fd:65:5a:c7:01:6a:
91:a5:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:24 2025 by rpki-client