Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m4SCAORiqPaaQZB_Zhr5w7mIcPc.roa
File: m4SCAORiqPaaQZB_Zhr5w7mIcPc.roa (raw, json)
Hash identifier: zx4DulBYYPqIAEYgr8d64YtFSOqM3MkGUccvlSRp2zo=
Subject key identifier: 9B:84:82:00:E4:62:A8:F6:9A:41:90:7F:66:1A:F9:C3:B9:88:70:F7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954D71D2F500EC89A8A5E152D52A8F6011
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m4SCAORiqPaaQZB_Zhr5w7mIcPc.roa
Signing time: Fri 28 Feb 2025 16:44:20 +0000
ROA not before: Fri 28 Feb 2025 16:44:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211759
IP address blocks: 151.243.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:71:d2:f5:00:ec:89:a8:a5:e1:52:d5:2a:8f:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 28 16:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b848200e462a8f69a41907f661af9c3b98870f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:32:9e:05:67:e5:be:b1:0f:76:fd:43:21:
28:84:ad:69:8b:f7:94:e3:91:d6:5e:0f:89:e3:84:
38:51:72:5b:58:67:d2:4e:09:8d:82:a7:33:80:c3:
9c:6f:e4:34:8e:42:28:de:20:86:23:08:9e:02:7a:
1e:34:2b:21:54:2a:70:67:ac:30:53:fa:e8:53:93:
90:2d:29:aa:be:e7:d3:b5:6e:0c:2b:4c:63:24:4e:
4d:fd:2f:0d:a6:f5:6e:e0:e1:6e:1b:4b:d2:3f:07:
d1:6c:85:7a:b4:a8:3d:4c:eb:7e:29:e6:45:49:bc:
29:fc:64:13:f3:b8:84:1c:9e:ef:25:5c:79:3f:50:
04:37:6c:ba:fd:b4:27:45:52:57:1a:c9:69:c2:cd:
f9:fe:52:24:ae:44:19:fc:34:e9:83:f1:2b:08:b4:
01:72:46:95:fe:31:67:8e:da:88:ba:b5:9b:2c:51:
af:31:24:58:13:88:c4:d7:c5:84:0b:b6:61:6c:39:
7a:37:64:00:b9:7b:ee:f8:9b:2c:89:fa:34:4c:45:
a1:65:85:e5:b4:cb:3c:51:42:5e:c3:92:5e:e7:26:
12:43:fc:df:84:36:e2:6a:cd:8b:99:59:56:2e:3c:
23:c0:e7:e8:c1:88:b9:3c:93:e9:18:2a:9b:69:71:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:82:00:E4:62:A8:F6:9A:41:90:7F:66:1A:F9:C3:B9:88:70:F7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m4SCAORiqPaaQZB_Zhr5w7mIcPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.224.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0b:39:ab:75:40:4e:24:5a:d7:dd:f8:f5:49:c5:a1:c7:54:
25:7d:df:a3:17:ea:b4:25:b8:e8:a6:e5:89:d4:84:d1:29:2b:
c4:37:ea:28:95:ff:9a:23:90:49:50:e5:b5:ff:cc:1f:7f:47:
12:94:89:17:ff:2b:ec:20:ea:ec:5a:d6:e1:2a:a0:13:b4:21:
a6:b8:89:9c:34:ca:70:dc:54:ff:a3:5a:e5:de:32:2b:4f:b6:
81:ec:13:43:11:da:e2:d4:b8:0b:1e:ec:96:66:e9:33:09:cb:
78:2a:ac:a1:61:e8:56:c4:64:cf:a3:44:f9:4a:a3:99:53:9d:
0f:be:a8:50:20:11:f2:8a:05:c6:2e:d3:05:51:54:26:b0:39:
3e:2e:48:86:68:40:00:e4:a5:d3:1d:4a:7b:c5:c6:de:16:8c:
82:99:2a:93:85:7c:32:dc:49:ac:ec:22:ef:d3:f5:6e:a2:02:
0e:01:e9:19:f3:96:f0:de:eb:dc:89:11:90:c7:06:a5:ee:58:
d7:13:61:fb:54:fd:af:2e:ae:1b:3d:74:f4:9b:92:0c:7f:f6:
38:c0:d4:db:4e:0d:7a:a9:1a:1f:f8:da:e9:61:a8:86:20:0b:
0a:92:20:f9:e1:51:f5:27:6a:13:7f:19:8e:af:dc:f4:e6:3c:
a2:88:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:07 2025 by rpki-client