Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBorR0kbPUsZa18g4aALDnWVq1A.roa
File: fBorR0kbPUsZa18g4aALDnWVq1A.roa (raw, json)
Hash identifier: 5GPpXeaufQOw4WnvByuE9NBEdwAFmYDjh8owytxQPSI=
Subject key identifier: 7C:1A:2B:47:49:1B:3D:4B:19:6B:5F:20:E1:A0:0B:0E:75:95:AB:50
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195C92AF2F7E579120163236CFBE225C1BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBorR0kbPUsZa18g4aALDnWVq1A.roa
Signing time: Mon 24 Mar 2025 17:19:49 +0000
ROA not before: Mon 24 Mar 2025 17:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 151.242.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:2a:f2:f7:e5:79:12:01:63:23:6c:fb:e2:25:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 24 17:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1a2b47491b3d4b196b5f20e1a00b0e7595ab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:cc:16:0a:ee:f8:31:87:5a:a4:2b:89:df:
65:1c:f1:9b:7b:53:13:17:da:9c:f6:5c:f1:ed:81:
93:76:fa:a3:a2:6d:16:b1:67:11:af:bc:ed:2c:a1:
d2:59:0a:b1:1c:63:ad:17:bd:30:a7:ea:04:48:f3:
6a:a0:a7:e8:75:0a:39:6d:17:0f:21:fc:6d:f6:4c:
22:ae:26:bd:17:2e:c6:e4:46:51:d3:bf:9a:96:ee:
ac:26:55:15:f2:f1:f6:33:fc:b8:65:4c:47:83:4f:
39:b9:65:a5:58:47:82:5b:e7:f8:a6:96:af:67:ad:
fb:88:27:2e:6e:39:a9:a5:4a:c5:bf:69:0b:14:95:
a3:28:1c:3c:09:e5:e8:f0:ba:31:b0:c7:60:77:3f:
0e:ae:80:1a:a5:d2:58:f8:97:3a:47:a4:2f:53:90:
89:c3:be:ba:db:86:7e:6b:71:6c:4b:d7:8c:6f:f2:
27:4b:f1:e4:c7:6d:ec:f4:da:b9:86:73:4e:f1:b9:
28:e8:98:fe:35:a7:54:4e:c1:51:53:4d:bf:84:13:
fa:97:26:7e:d4:9a:c1:7e:fc:a2:d2:64:1f:3a:07:
db:15:ca:3f:6c:f1:12:03:4c:87:53:f1:11:22:ee:
9f:1b:6e:e2:84:4a:f3:94:3b:cc:1c:71:05:72:65:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:2B:47:49:1B:3D:4B:19:6B:5F:20:E1:A0:0B:0E:75:95:AB:50
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBorR0kbPUsZa18g4aALDnWVq1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
24:51:f0:b3:4a:ba:d8:42:31:d2:bd:10:e1:d9:d7:a5:a7:ab:
2b:64:e0:ba:f4:35:66:c5:47:bf:62:1c:54:c3:c5:b2:09:71:
19:84:a5:08:93:02:60:21:87:34:4e:df:2e:86:54:97:78:ce:
b3:e8:fe:f0:57:19:33:23:e5:3f:2c:66:ad:c7:b0:dd:ae:de:
de:bc:99:80:dd:bd:36:09:f2:3d:23:24:84:a8:f6:38:0a:03:
20:71:f7:45:b7:83:26:1b:c6:63:28:73:25:94:85:93:f0:f5:
e2:97:ad:da:b8:3e:17:66:a1:73:50:fd:de:43:37:5e:41:55:
dd:93:d0:81:ec:d0:1a:49:9d:f1:6a:c9:23:a5:df:fb:35:1f:
57:60:4a:98:ee:78:19:9a:f8:79:d6:f3:a3:5d:95:44:2e:65:
43:c5:cc:71:1d:9d:af:15:48:7a:5b:17:dc:20:c4:57:f9:d7:
cc:4b:e2:7a:75:4f:65:6a:a4:01:8e:e4:fb:8b:5a:b0:42:f6:
d6:ed:5e:30:1f:b0:b5:dd:8f:b7:2f:f5:47:af:be:af:c3:f5:
33:96:f0:d6:8f:b7:c7:04:60:e6:7e:f7:1e:f8:48:b4:81:89:
75:4a:40:bc:d9:c1:49:06:5b:a1:67:1a:78:4c:78:eb:a7:48:
9e:62:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:01 2025 by rpki-client