Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i_tpkWu0j79NcG62NDrrQpIinSY.roa
File: i_tpkWu0j79NcG62NDrrQpIinSY.roa (raw, json)
Hash identifier: EzWBzalumAXGl2bRhFyXaRQQ+wPpBaZtzivsuhlwfxc=
Subject key identifier: 8B:FB:69:91:6B:B4:8F:BF:4D:70:6E:B6:34:3A:EB:42:92:22:9D:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195718953381EEB4995D8779B52997A6211
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i_tpkWu0j79NcG62NDrrQpIinSY.roa
Signing time: Fri 07 Mar 2025 16:56:19 +0000
ROA not before: Fri 07 Mar 2025 16:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:89:53:38:1e:eb:49:95:d8:77:9b:52:99:7a:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 16:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bfb69916bb48fbf4d706eb6343aeb4292229d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:f3:fd:05:72:6f:b8:dc:29:6a:ff:46:ed:
11:47:29:19:97:f7:63:ac:33:6b:ec:8c:05:2b:11:
cd:9e:3b:e2:1e:40:01:cb:5e:e0:7f:d3:10:a1:a8:
85:e4:19:b4:2d:ff:03:da:bb:0a:75:49:0f:3a:63:
f6:4f:70:c8:15:96:5a:89:86:14:62:ab:3d:4d:9e:
34:05:dc:43:7a:37:df:5c:36:20:67:85:71:25:c8:
13:3d:e0:e0:9d:bf:11:c4:e2:c5:bf:9f:0e:a3:bb:
40:01:3a:ae:b5:3a:53:d1:87:54:fc:22:84:61:35:
ba:88:08:fd:e5:93:d7:f7:aa:02:7f:fc:2f:c1:da:
9f:3c:1e:b9:61:f4:e0:0f:90:47:a4:e9:cb:8a:56:
cd:0b:32:3a:6f:29:82:21:bf:19:95:b0:8b:ce:ed:
11:fe:1a:8c:5e:9d:93:68:4f:4b:f6:0c:9c:43:9a:
c6:04:62:69:4e:ca:9f:69:9c:f5:1e:ea:0d:45:5e:
08:bc:3a:5d:bb:d6:3b:f1:44:ab:ed:38:fa:06:ed:
e2:e9:55:ab:d0:f5:62:74:e0:f9:66:18:d6:95:5e:
3e:4c:04:1d:33:d4:01:5a:7f:fd:be:c8:f1:37:dd:
f7:23:29:2c:d8:e2:6b:b1:25:9c:11:b4:bd:28:d0:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FB:69:91:6B:B4:8F:BF:4D:70:6E:B6:34:3A:EB:42:92:22:9D:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i_tpkWu0j79NcG62NDrrQpIinSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.58.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e2:1a:c7:57:e4:a8:01:c7:8b:bb:64:0c:56:b5:c6:39:8b:
fc:5f:31:f5:92:c7:53:29:93:39:b4:48:69:d2:ef:50:45:a8:
37:b0:68:55:32:89:f5:26:04:13:30:55:71:bf:25:5e:54:8c:
5b:1d:1a:25:7d:03:31:56:d5:2d:dd:0d:6e:b4:9b:ec:a0:de:
0a:31:e2:98:25:93:11:30:4b:42:38:ea:8b:e7:46:4b:ab:89:
23:08:4b:6e:d2:7a:eb:1c:4e:21:65:37:17:d1:74:3d:6e:9d:
82:78:3f:f0:f6:45:e7:8e:6c:0f:3e:71:ef:d4:96:ca:b6:1e:
08:1e:2b:0f:04:d0:04:8b:97:81:ca:9a:0b:4a:c8:17:3d:70:
cf:01:9f:1b:e0:cd:b4:17:c5:93:c5:fe:13:31:f5:d6:2f:20:
8d:8d:c3:16:36:38:6b:95:32:7f:64:aa:4d:fc:6a:ca:83:9a:
56:ef:e3:f2:38:b7:ec:f8:65:ac:c4:f6:70:32:e1:56:b8:42:
bc:5f:27:09:e7:c5:06:fa:5d:95:cd:0b:15:fa:c6:34:3c:7c:
1b:be:e2:19:7a:1e:ee:78:6e:f5:91:79:cb:85:49:1c:f1:8c:
2f:f9:ed:6f:60:b7:5f:54:4d:07:56:aa:29:26:12:c6:03:77:
aa:fc:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:06 2025 by rpki-client