Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ljM2-V7-aeYbXIjV_S9rzg2dw28.roa
File: ljM2-V7-aeYbXIjV_S9rzg2dw28.roa (raw, json)
Hash identifier: kWgL3on32XZItbZHgiIBJdk7T1Z3O9R6Ciw+/3KT248=
Subject key identifier: 96:33:36:F9:5E:FE:69:E6:1B:5C:88:D5:FD:2F:6B:CE:0D:9D:C3:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195409D9411F2D2E676D4D6241921535433
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ljM2-V7-aeYbXIjV_S9rzg2dw28.roa
Signing time: Wed 26 Feb 2025 04:57:03 +0000
ROA not before: Wed 26 Feb 2025 04:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 151.242.8.0/24 maxlen: 24
151.243.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:9d:94:11:f2:d2:e6:76:d4:d6:24:19:21:53:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 26 04:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=963336f95efe69e61b5c88d5fd2f6bce0d9dc36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:c2:7c:ce:9d:99:b5:b5:c2:7f:e8:22:82:
f7:90:a0:de:9d:8e:16:c4:58:09:57:32:30:60:c1:
a1:e1:16:0c:24:fa:a5:4f:dd:4b:dd:c0:38:c9:e6:
f4:d5:09:6d:75:98:24:05:c1:67:0f:99:dd:77:47:
c3:13:1b:8c:5f:46:00:62:88:83:44:ce:2e:b8:ca:
9a:67:62:6d:20:1f:b6:a9:55:83:bd:e9:55:fe:47:
ef:65:35:a8:79:ef:51:5e:35:62:0f:f8:d8:1a:e7:
26:cc:da:b9:73:0e:64:db:15:f2:ac:d8:fd:68:ab:
7d:08:93:af:3d:0d:96:fc:ae:7f:a2:70:32:38:82:
66:eb:a8:d9:ae:e2:c2:f5:4b:3d:12:d0:75:d8:1b:
08:a8:d0:ea:87:21:4f:b9:bf:6f:0d:83:63:6c:a8:
f6:cf:e1:7a:73:e0:55:f4:cb:7a:28:cb:e1:80:8a:
45:c2:ce:8a:10:0e:48:f1:dc:84:3d:b2:3e:88:54:
81:4f:e9:12:d1:50:ae:70:60:5e:c9:81:41:ed:21:
61:56:02:16:d5:36:02:c4:58:32:92:38:72:5b:ca:
16:3b:a2:40:7f:92:0a:67:99:6d:a7:3b:82:0e:9c:
48:41:04:85:8e:30:42:2f:ab:b7:0d:e6:d9:c5:b4:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:36:F9:5E:FE:69:E6:1B:5C:88:D5:FD:2F:6B:CE:0D:9D:C3:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ljM2-V7-aeYbXIjV_S9rzg2dw28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.8.0/24
151.243.42.0/24
Signature Algorithm: sha256WithRSAEncryption
82:66:3f:16:55:5e:5a:fa:85:f3:30:d0:88:55:e5:09:f4:d0:
c4:93:1d:c6:8c:ae:ed:90:f2:d1:e9:38:e7:31:7a:0d:11:ec:
54:ed:a8:e0:8e:67:a4:ee:28:be:ed:d2:3e:6a:2f:9e:2c:f6:
e5:01:2d:8f:5d:3b:54:11:5c:9b:02:e1:05:f6:91:ba:eb:68:
9a:aa:dd:68:f7:17:50:b3:f4:7c:56:6a:9c:e3:e7:c9:bd:7f:
9c:71:47:48:11:69:8f:21:c3:14:ca:ee:7a:dc:99:73:bc:f9:
90:94:0f:d8:6c:69:20:c1:d5:e3:61:82:0a:02:5a:58:75:e0:
0a:2f:45:b7:74:6e:4a:46:3c:1e:2a:95:42:e9:80:a2:4e:8c:
a2:de:b5:bb:c7:7d:58:fb:b4:b1:78:47:e0:7e:ed:21:bb:b6:
d6:69:e9:60:01:04:ae:e9:30:f6:18:a2:41:e2:68:6b:d0:8e:
02:cd:36:31:1b:12:39:6e:48:5e:07:48:f2:f6:3b:78:81:8f:
1c:f9:23:fa:cb:a0:4b:7c:86:be:78:91:fb:f4:5d:c2:62:57:
1c:a2:35:80:00:cc:bd:54:56:75:67:61:ab:e5:80:09:34:da:
ec:a2:91:67:8d:ca:fd:3b:57:d5:55:80:62:28:4e:a1:13:33:
4d:70:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:14 2025 by rpki-client