Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gvzY2A6NVxpjvDRfZG-IoqAqtAA.roa
File: gvzY2A6NVxpjvDRfZG-IoqAqtAA.roa (raw, json)
Hash identifier: XtjVTxuPq4IOaQH3gxacMoe98v+axUuABNVxctRElSY=
Subject key identifier: 82:FC:D8:D8:0E:8D:57:1A:63:BC:34:5F:64:6F:88:A2:A0:2A:B4:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01952BDBD958F45B06089D07A89FB0B2DE3A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gvzY2A6NVxpjvDRfZG-IoqAqtAA.roa
Signing time: Sat 22 Feb 2025 04:13:03 +0000
ROA not before: Sat 22 Feb 2025 04:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133504
IP address blocks: 151.243.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2b:db:d9:58:f4:5b:06:08:9d:07:a8:9f:b0:b2:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 22 04:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82fcd8d80e8d571a63bc345f646f88a2a02ab400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:b9:99:a9:d4:04:52:cb:36:33:ef:47:4e:
5c:a1:8d:d3:ce:06:20:40:23:37:ef:de:3e:50:55:
a0:7f:2c:e4:36:49:b5:3c:d7:fd:8e:ca:b5:1c:1c:
b7:71:df:d1:b1:81:7d:a3:3a:b5:84:81:f8:8d:d0:
78:bc:4a:3f:87:be:e0:2d:9f:76:64:b7:ae:61:48:
73:d5:b0:af:78:d0:88:6f:b8:cf:5d:f9:f7:ef:00:
60:ab:cf:bb:8e:6c:dc:2b:80:b3:c3:d5:f9:f8:91:
b3:bb:46:af:f0:7c:48:65:ef:ee:86:aa:51:cf:5f:
ae:c4:8f:de:41:68:4a:29:90:ae:9b:9b:58:1f:12:
6a:29:84:6c:c1:4a:1a:95:45:dd:84:b1:a1:d2:31:
12:4f:b4:62:bc:82:ec:db:23:c6:9d:9f:b8:84:7c:
d2:65:f4:30:0d:d7:f0:6d:b4:c3:3d:ed:a7:23:b3:
09:ca:ee:e6:72:3a:bb:ae:5b:c0:65:56:8a:c0:36:
ff:cd:7f:26:4f:9f:70:fb:ae:5e:47:9d:9d:b0:9d:
09:79:b6:76:ca:16:15:3e:ad:21:92:08:ec:56:d0:
77:4a:c4:a8:30:85:6d:a0:9b:21:fe:6d:18:bf:62:
33:9c:29:1b:5f:2e:80:97:5b:a1:d3:22:c5:9f:e9:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FC:D8:D8:0E:8D:57:1A:63:BC:34:5F:64:6F:88:A2:A0:2A:B4:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gvzY2A6NVxpjvDRfZG-IoqAqtAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:de:89:e9:63:d9:30:77:e2:c4:8d:15:95:f0:15:d7:66:f6:
c4:d0:36:9c:64:dc:4d:7b:83:93:93:83:bf:7d:fc:dd:24:33:
a1:e7:9e:53:41:2f:a7:a7:a8:1f:d4:97:ba:40:dc:ab:5e:2f:
fa:27:4b:8e:61:5d:16:dc:0b:3f:29:3f:e0:fc:b3:11:06:a3:
5e:41:be:16:f6:ed:99:af:77:46:a3:ed:8c:8e:92:39:61:ed:
8f:9b:e5:7c:1f:87:ac:ec:8e:3c:f2:d7:cf:d3:dc:06:65:99:
26:9d:e1:dc:35:20:c7:b5:c5:2b:ee:2a:d4:56:f2:8b:19:e0:
86:4d:73:01:9b:8a:61:58:f4:93:eb:24:f2:7c:7e:38:69:89:
6f:a9:62:60:9e:10:2a:27:2f:c8:60:02:01:26:e2:1a:b3:f1:
78:b1:db:35:38:8d:f7:e6:5c:31:1d:a6:18:e9:4b:f2:7d:d0:
00:1a:ff:00:21:0d:59:9c:96:6e:ab:6e:22:68:ee:47:f9:d3:
c7:77:91:90:6a:50:84:0e:4b:8d:3c:8e:2e:be:f0:d1:fb:23:
a1:c8:2c:48:53:ec:18:54:9e:06:bc:87:c6:ba:1c:1b:0b:e7:
da:45:37:74:1b:0d:85:ee:f7:ed:82:20:7a:9f:31:28:a6:eb:
60:fc:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:29 2025 by rpki-client