Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kr2tDhB4hQ4oeNiQccmTigbiqxA.roa
File: kr2tDhB4hQ4oeNiQccmTigbiqxA.roa (raw, json)
Hash identifier: ysRd6GDrX8NrdZ1g6fq3olpP8GZ7boOVIPtnAheWvpc=
Subject key identifier: 92:BD:AD:0E:10:78:85:0E:28:78:D8:90:71:C9:93:8A:06:E2:AB:10
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954FEB5F9D0D6752C1AEA700847DC22917
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kr2tDhB4hQ4oeNiQccmTigbiqxA.roa
Signing time: Sat 01 Mar 2025 04:16:20 +0000
ROA not before: Sat 01 Mar 2025 04:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215638
IP address blocks: 151.243.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:eb:5f:9d:0d:67:52:c1:ae:a7:00:84:7d:c2:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 04:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92bdad0e1078850e2878d89071c9938a06e2ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:ac:7b:b2:33:1a:11:4f:8e:c6:6f:eb:ef:
2c:46:16:81:da:a1:54:8f:c4:42:57:4c:33:3e:05:
18:47:be:bc:40:76:ac:61:9d:4f:1c:16:53:d9:04:
a5:0c:76:f9:cf:ce:55:f3:8b:3a:ba:bf:93:e8:52:
b9:20:2a:a8:96:c8:b3:6c:68:91:34:b8:36:0c:fe:
8d:27:81:03:6b:cc:9d:19:c6:81:c3:2f:e3:ce:30:
37:b9:63:1e:4d:09:ec:a4:0c:e9:4d:a5:67:55:66:
a7:4d:cf:12:0e:fb:46:be:cf:9a:89:6a:16:c6:22:
6d:6e:18:26:d0:23:2e:2d:cc:5d:b7:ed:76:c2:1f:
74:6c:e2:cb:61:24:f5:b9:1b:f6:70:76:cc:78:be:
d0:8a:d7:5f:ea:f0:ae:ec:82:8b:ac:86:20:da:01:
66:3f:2a:51:70:94:24:8b:6a:8f:79:c2:2d:02:16:
3b:91:de:b4:34:2d:cd:57:c7:14:ba:3d:9a:e9:69:
36:fb:7a:70:3d:10:1a:9f:fb:0c:de:42:f9:a3:8a:
23:01:a4:97:9b:e6:37:98:64:71:d3:c3:62:e2:41:
c5:90:93:f7:d7:4b:b4:4f:ef:63:d9:76:6b:8a:bd:
48:de:f5:e2:a8:9c:d0:fd:f2:96:4b:09:79:2c:b1:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:AD:0E:10:78:85:0E:28:78:D8:90:71:C9:93:8A:06:E2:AB:10
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kr2tDhB4hQ4oeNiQccmTigbiqxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.216.0/24
Signature Algorithm: sha256WithRSAEncryption
44:90:97:d3:ce:bb:e9:ae:b0:bb:1f:c3:16:f0:8f:05:6d:f9:
40:ac:4d:17:87:69:d0:f3:d6:6f:40:ab:cc:ff:50:6e:a1:6a:
65:8f:3d:00:13:9c:45:b5:6e:3b:58:ff:b5:b5:b0:c0:e5:7f:
ed:da:86:ca:50:e8:66:2f:75:b7:67:3d:3e:41:c0:63:a3:a0:
35:b3:d2:b9:d8:a8:a9:56:cb:13:98:45:5b:41:48:3c:c8:df:
98:22:28:39:93:4b:43:62:84:1b:1b:3e:d6:c9:82:f2:b0:f3:
33:a4:77:39:db:df:bc:94:90:d2:7f:71:a9:4d:0c:7c:ae:01:
d2:23:f7:07:c1:ed:dc:a6:85:19:cb:5e:71:48:18:be:dc:96:
81:60:d1:16:36:03:22:4f:ad:08:44:70:7e:ce:ec:eb:57:b8:
67:73:ad:62:21:8b:64:fb:9d:f2:a3:a4:59:37:9c:68:80:04:
de:99:76:3d:01:4f:46:28:1f:1e:67:7c:1d:7d:5a:cd:c5:9f:
08:b6:02:62:a6:45:21:5d:ba:07:3f:64:72:a2:d2:e5:07:b8:
32:7e:96:78:0e:66:1d:fb:84:d0:dd:32:22:8b:6e:b0:4a:59:
aa:b9:76:52:f4:91:67:c0:74:68:68:cf:06:e8:e5:96:cf:66:
8d:c8:46:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVP61+dDWdSwa6nAIR9wikXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzAxMDQxNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmJkYWQwZTEwNzg4NTBlMjg3OGQ4OTA3MWM5OTM4YTA2ZTJhYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ese7IzGhFPjsZv6+8sRhaB2qFU
j8RCV0wzPgUYR768QHasYZ1PHBZT2QSlDHb5z85V84s6ur+T6FK5ICqolsizbGiR
NLg2DP6NJ4EDa8ydGcaBwy/jzjA3uWMeTQnspAzpTaVnVWanTc8SDvtGvs+aiWoW
xiJtbhgm0CMuLcxdt+12wh90bOLLYST1uRv2cHbMeL7Qitdf6vCu7IKLrIYg2gFm
PypRcJQki2qPecItAhY7kd60NC3NV8cUuj2a6Wk2+3pwPRAan/sM3kL5o4ojAaSX
m+Y3mGRx08Ni4kHFkJP310u0T+9j2XZrir1I3vXiqJzQ/fKWSwl5LLHMiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJK9rQ4QeIUOKHjYkHHJk4oG4qsQMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEva3IydERoQjRoUTRvZU5pUWNjbVRpZ2JpcXhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PYMA0G
CSqGSIb3DQEBCwUAA4IBAQBEkJfTzrvprrC7H8MW8I8FbflArE0Xh2nQ89ZvQKvM
/1BuoWpljz0AE5xFtW47WP+1tbDA5X/t2obKUOhmL3W3Zz0+QcBjo6A1s9K52Kip
VssTmEVbQUg8yN+YIig5k0tDYoQbGz7WyYLysPMzpHc529+8lJDSf3GpTQx8rgHS
I/cHwe3cpoUZy15xSBi+3JaBYNEWNgMiT60IRHB+zuzrV7hnc61iIYtk+53yo6RZ
N5xogATemXY9AU9GKB8eZ3wdfVrNxZ8ItgJipkUhXboHP2RyotLlB7gyfpZ4DmYd
+4TQ3TIii26wSlmquXZS9JFnwHRoaM8G6OWWz2aNyEaN
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:30 2025 by rpki-client