Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fv50N00Om_NNZEw_Ie613VpyhEo.roa
File: fv50N00Om_NNZEw_Ie613VpyhEo.roa (raw, json)
Hash identifier: RjZZ5W6Sfq7d7TrU3i+djA5jnGGWpHDVX0pQ+GIUhQg=
Subject key identifier: 7E:FE:74:37:4D:0E:9B:F3:4D:64:4C:3F:21:EE:B5:DD:5A:72:84:4A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946DC3F66C070D91C5B01EFB254DB9684A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fv50N00Om_NNZEw_Ie613VpyhEo.roa
Signing time: Thu 16 Jan 2025 06:19:06 +0000
ROA not before: Thu 16 Jan 2025 06:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 151.243.126.0/24 maxlen: 24
151.243.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:c3:f6:6c:07:0d:91:c5:b0:1e:fb:25:4d:b9:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 16 06:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efe74374d0e9bf34d644c3f21eeb5dd5a72844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:bd:6a:05:4c:95:40:50:32:4b:db:b9:86:
fe:2d:3d:ca:85:e2:0a:5d:92:3f:3a:57:3e:a5:db:
b2:e2:2e:69:f3:65:f5:39:30:80:73:a3:f5:4e:50:
11:a3:c1:94:85:32:22:1f:36:c8:9f:36:77:e2:cb:
7c:37:dc:96:77:52:2e:fc:66:56:03:c4:a6:f5:5f:
6a:f0:31:0c:5a:37:9f:22:00:14:90:4d:56:34:e8:
d4:a9:c0:21:44:64:e9:e2:3e:cb:0c:d5:a6:04:cb:
23:a0:40:40:22:99:fd:1d:74:9e:b1:af:cc:6b:0f:
f3:45:a9:d3:d9:e6:54:3e:7d:67:91:bd:2b:f8:64:
e5:56:b2:e7:f6:5e:b1:10:94:90:ab:53:d4:c3:e3:
90:9d:55:bd:bd:5e:76:9f:f4:d3:6e:3e:55:77:a0:
5b:eb:7c:75:9d:b5:f5:49:c5:3e:6b:cb:17:b7:e7:
1e:ff:79:5a:6c:28:b1:75:17:c5:0d:3c:80:59:4b:
1e:04:74:f8:97:a4:f1:69:2d:f1:11:98:94:5d:1f:
67:8a:c7:95:26:7b:be:c6:e9:14:ba:15:fa:0b:3d:
c0:3b:d5:60:60:57:7b:26:04:96:98:a1:f6:6f:1a:
d8:f0:b2:c1:7b:b5:62:46:e8:de:42:c2:14:20:9b:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:74:37:4D:0E:9B:F3:4D:64:4C:3F:21:EE:B5:DD:5A:72:84:4A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fv50N00Om_NNZEw_Ie613VpyhEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0a:98:50:cf:59:77:aa:92:66:be:1f:bb:91:75:3f:db:12:
83:4c:e4:2a:de:96:bb:f4:23:17:90:e6:f0:6c:2e:b3:3e:24:
82:fc:fb:57:4f:be:96:63:2b:2e:84:c9:19:91:48:4f:1c:e5:
4e:a3:56:d6:eb:54:e9:61:78:42:4a:69:66:bb:43:4d:dc:2a:
18:78:c7:63:c6:8b:f0:29:90:12:d4:20:5c:27:10:6b:8f:6b:
24:df:5f:2f:f3:fb:c4:3f:0f:93:ed:d5:4e:91:99:86:28:20:
2b:ed:9a:26:f6:4c:b0:36:4d:24:a6:fa:f0:61:eb:94:fc:d1:
12:c0:84:d9:8d:d0:05:e8:ef:e9:75:27:c8:c2:69:c5:63:92:
d0:9e:00:65:3d:d4:fd:30:66:10:44:8b:8e:9a:51:b0:59:b4:
60:00:82:59:cc:b4:9c:ba:19:40:7f:51:c5:88:53:cc:2d:4b:
0f:90:1f:f3:24:06:98:68:3e:fe:8c:41:6c:44:d2:3b:c5:17:
59:bc:8c:f4:6f:0f:5d:b8:ac:8d:88:ec:e3:a3:24:30:38:28:
6e:57:1f:b7:df:63:db:5f:9e:9d:75:0d:4d:14:64:c0:84:c7:
cb:16:10:3b:ca:71:d0:c0:6f:9f:34:a1:53:63:e1:87:8e:66:
59:0c:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:06:24 2025 by rpki-client