Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kLcPVLclg5l7BprgL6IJTw4itOk.roa
File: kLcPVLclg5l7BprgL6IJTw4itOk.roa (raw, json)
Hash identifier: nemIaoycc3ynYSh2o40ktaUqqzheECQ7WwDZBGTRf2g=
Subject key identifier: 90:B7:0F:54:B7:25:83:99:7B:06:9A:E0:2F:A2:09:4F:0E:22:B4:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954FED345A08924A50D56A96130A93F1FF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kLcPVLclg5l7BprgL6IJTw4itOk.roa
Signing time: Sat 01 Mar 2025 04:18:20 +0000
ROA not before: Sat 01 Mar 2025 04:18:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 973
IP address blocks: 151.242.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:ed:34:5a:08:92:4a:50:d5:6a:96:13:0a:93:f1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 04:18:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90b70f54b72583997b069ae02fa2094f0e22b4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:45:74:76:ec:20:19:c9:fd:df:aa:e4:93:
3b:93:24:cd:3d:47:f7:20:0b:ac:8e:7b:cf:99:69:
f8:d9:6b:e9:b5:96:1a:a6:28:70:7f:e1:43:69:e2:
95:95:e8:20:92:f2:48:3c:57:86:c4:1c:60:c7:64:
86:82:8b:14:65:fe:28:b1:2a:90:ae:f0:e0:34:20:
b5:e5:35:b8:38:91:e5:87:05:15:d8:2b:49:08:9d:
2c:5f:a2:31:ed:4a:32:dd:8d:2e:4a:0d:8e:8b:39:
79:f5:ce:d6:20:b7:d8:b3:3a:31:8b:be:6f:25:8c:
1a:a2:1c:64:7f:cd:8b:65:54:bc:a6:95:75:25:43:
2a:d9:37:5a:7b:ee:3a:74:8d:e8:03:c4:a6:8a:93:
00:50:ff:6e:59:cb:09:b3:97:5f:cc:4c:01:54:20:
44:e1:66:d2:26:d1:0c:2c:8b:18:2a:aa:6d:cf:9f:
a7:97:5c:5c:34:21:b1:e3:09:b8:dc:d2:43:3c:69:
04:3e:b7:f5:9d:b2:a9:5b:5c:6e:21:33:0d:f6:c2:
e3:91:f7:82:34:8d:c0:de:ce:7e:f1:cc:5f:7f:5b:
2e:be:92:f4:04:ae:81:7e:31:17:21:8b:47:9d:67:
7e:d8:8a:97:89:d1:62:d3:52:37:33:a9:92:b7:fd:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:0F:54:B7:25:83:99:7B:06:9A:E0:2F:A2:09:4F:0E:22:B4:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kLcPVLclg5l7BprgL6IJTw4itOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:73:bc:33:be:bf:a1:17:3e:c2:08:ad:77:0a:ca:81:02:8e:
04:dc:e1:8a:32:0d:90:62:79:e9:d5:68:7a:bf:40:c7:7a:2c:
90:4d:65:ac:cb:67:0e:29:a2:b4:43:0e:1f:c8:94:e9:5d:40:
7e:85:c0:08:55:eb:7a:cb:25:7a:c2:16:9f:0d:81:1f:10:d0:
50:0a:8c:d9:ed:27:32:34:bf:cd:31:55:c2:36:61:86:7c:7f:
b5:94:3b:ed:26:82:67:0d:a9:ab:00:cb:14:ad:72:d4:de:92:
05:3f:00:95:ab:32:89:3a:5e:21:a0:07:81:d9:00:7e:2e:a4:
8b:d6:d5:36:f7:fa:68:cb:77:d9:e8:7b:72:55:73:93:9c:eb:
11:fa:ba:52:ea:d6:67:23:d1:0a:83:63:28:71:42:0e:d9:99:
3f:04:fe:38:df:26:64:82:8f:48:f5:3a:30:4e:87:f2:e8:eb:
f5:89:92:2b:3a:ef:f4:82:57:6f:47:b9:8a:bb:6b:a6:0f:f8:
62:e7:84:f5:ce:88:96:b8:7e:0c:d0:02:31:fe:57:a9:83:a0:
5f:44:7b:cc:25:46:70:37:20:61:1f:55:f6:bc:75:ae:c3:2e:
87:28:cb:de:c7:2f:14:d2:f2:dc:3c:ce:1f:b5:6d:07:e3:8f:
b9:7a:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:19 2025 by rpki-client