Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m9L-ZRysNTTbGwmg3YGyWDLNbHQ.roa
File: m9L-ZRysNTTbGwmg3YGyWDLNbHQ.roa (raw, json)
Hash identifier: sdfzZFgzOA0fOUXrNud8OQ4FDvoiUhXHTtwco7yBbuw=
Subject key identifier: 9B:D2:FE:65:1C:AC:35:34:DB:1B:09:A0:DD:81:B2:58:32:CD:6C:74
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195AD18F95D0576463CFAAE8120CF0C8FA6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m9L-ZRysNTTbGwmg3YGyWDLNbHQ.roa
Signing time: Wed 19 Mar 2025 06:30:49 +0000
ROA not before: Wed 19 Mar 2025 06:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153564
IP address blocks: 151.242.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:18:f9:5d:05:76:46:3c:fa:ae:81:20:cf:0c:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 19 06:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bd2fe651cac3534db1b09a0dd81b25832cd6c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:39:d1:3b:26:b2:64:48:81:30:91:10:1b:
d4:20:2a:e9:9f:1f:d9:f3:d6:58:dc:58:9a:e4:6a:
86:19:77:9a:21:69:45:bf:21:ff:0d:be:ba:2c:60:
19:cb:33:bd:76:22:2a:8c:0a:47:bc:e7:db:3d:f2:
72:48:20:d9:4c:93:72:a2:77:0d:32:33:76:de:87:
5a:1a:9e:66:64:a0:1c:52:54:fb:2e:89:7b:09:8b:
0a:81:a0:44:39:57:fe:91:80:7b:4c:c8:a9:61:81:
32:d4:57:bc:64:0f:bc:7f:35:ec:f2:57:23:fe:fc:
46:8f:a9:d8:c2:22:b4:61:37:ff:ab:76:b9:0b:8a:
28:59:1c:c9:e0:6f:e4:1b:e0:16:0a:47:8c:fe:46:
b4:90:51:6c:df:d6:ac:b0:72:41:1e:7b:b5:a2:d4:
d0:5e:c2:2a:d1:8a:6c:a9:2b:54:fd:68:5c:02:fb:
b4:a5:de:26:a0:eb:61:b7:16:15:8d:b1:5e:aa:6b:
ad:cc:a7:fa:2a:7a:58:e8:5f:d3:c6:18:4f:3f:c7:
0b:29:6c:a9:a4:eb:2e:e5:ef:51:3b:aa:b6:1a:8c:
81:a6:ea:9f:98:3e:93:7a:3d:c0:a9:e0:62:bc:2f:
3c:d1:47:7f:d4:6b:b7:ef:2e:2d:59:43:9d:50:41:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:FE:65:1C:AC:35:34:DB:1B:09:A0:DD:81:B2:58:32:CD:6C:74
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m9L-ZRysNTTbGwmg3YGyWDLNbHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.37.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7c:27:2d:91:75:25:4f:f1:3e:63:ee:e8:36:a2:ae:0d:6f:
73:8c:75:e7:6b:df:8e:fe:a1:66:97:58:6d:9f:3f:6c:b0:d2:
86:0c:47:fd:75:5c:ba:39:e4:ca:35:86:08:5b:6e:8d:49:85:
b5:a4:d4:f0:63:79:03:ac:b4:5e:41:75:d7:27:b2:14:a4:9d:
20:c3:d0:fb:ab:4b:ad:e0:e0:19:1b:67:56:1e:f3:cd:5f:e8:
58:08:8e:63:8c:f2:f7:0b:eb:fe:9f:3d:8b:35:58:05:fa:dc:
4e:b7:eb:f8:68:d7:c8:df:c5:61:10:9e:be:a5:cc:a3:84:8c:
f7:34:9d:d7:8b:fd:5a:59:02:86:01:ff:28:b1:0e:59:f3:49:
e8:d0:ba:52:5a:be:ba:b6:ad:7e:39:cd:96:e9:95:a4:58:f2:
e6:c4:36:df:e7:e2:1d:2d:52:05:ef:38:99:12:5b:3d:f8:fc:
31:3a:4f:40:a2:97:41:09:7b:a8:52:e2:74:16:c1:83:6f:0e:
18:d6:a3:6c:46:89:56:60:a5:ca:3d:38:35:4c:4a:aa:54:a2:
fc:69:45:cd:48:2a:d7:af:09:b1:f1:81:7b:ca:7d:5b:26:02:
a2:8d:49:82:c4:71:c8:4a:1b:b4:55:2d:cb:40:76:8a:65:9e:
45:ce:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:00 2025 by rpki-client