Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mWRcPTsuhg9xh5JfwKOepQc5IZY.roa
File: mWRcPTsuhg9xh5JfwKOepQc5IZY.roa (raw, json)
Hash identifier: fAMfdy4tHi0OXNcw2HslIC4l/PjMRZNfEgniyr66rbQ=
Subject key identifier: 99:64:5C:3D:3B:2E:86:0F:71:87:92:5F:C0:A3:9E:A5:07:39:21:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01947043EAFDCCDE0DC5BFDA73BBB24CBD93
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mWRcPTsuhg9xh5JfwKOepQc5IZY.roa
Signing time: Thu 16 Jan 2025 17:58:06 +0000
ROA not before: Thu 16 Jan 2025 17:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273612
IP address blocks: 151.243.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:43:ea:fd:cc:de:0d:c5:bf:da:73:bb:b2:4c:bd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 16 17:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99645c3d3b2e860f7187925fc0a39ea507392196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:b7:b8:f8:e8:ab:91:c6:2a:66:b2:1b:ac:
7d:8e:bc:9c:fe:6a:7b:7e:b1:e7:17:78:cf:d0:67:
c7:9f:05:87:2e:da:7c:0a:ad:23:db:f4:dc:1e:e9:
61:66:25:6e:4c:85:e6:e1:af:e9:1b:e3:f9:9d:31:
93:46:84:36:df:ed:b8:ee:0c:c7:c2:85:cc:c7:d6:
b6:9e:74:80:1e:6c:ea:17:8c:91:8d:96:34:4f:c1:
71:0e:f1:a8:a0:68:f6:08:5a:77:c7:35:e4:42:cc:
f4:91:0f:f0:74:e8:70:07:f9:3e:a9:55:16:cf:3e:
c6:1a:81:d1:7a:b8:43:87:2f:4e:59:24:ad:e7:55:
28:6f:0b:76:6c:5f:d7:6c:13:57:cf:b7:5c:3d:6e:
f4:77:b6:f3:4c:da:16:02:2a:0a:44:32:e2:11:e4:
78:b1:46:e0:6e:ac:20:85:ff:fa:c3:d2:73:15:ca:
d6:a2:9b:93:70:6f:58:24:31:4a:6f:d0:de:24:54:
cc:e1:88:26:48:45:6e:c4:bd:d4:9c:4d:1b:71:91:
90:bf:3a:4b:5d:cc:3e:22:60:a7:9a:58:58:fe:bb:
44:4a:57:a7:05:9f:74:11:5a:d7:6a:a2:75:bb:91:
67:ef:03:7a:94:82:6e:70:29:23:3f:9a:1c:8d:43:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:5C:3D:3B:2E:86:0F:71:87:92:5F:C0:A3:9E:A5:07:39:21:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mWRcPTsuhg9xh5JfwKOepQc5IZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0f:f8:c3:3b:ae:ae:08:9b:34:83:30:6d:0b:8b:0a:c5:c3:
44:52:52:6d:4f:e2:84:ba:86:fb:c7:67:1b:c4:fe:d3:f4:74:
d5:02:00:f5:bc:9a:ae:22:9c:28:95:48:5b:3e:97:7b:bf:0a:
3b:bd:80:6b:e8:99:7a:5a:66:95:e4:21:5f:a3:0d:12:ad:a7:
a7:90:03:2a:c0:75:cc:69:d4:8d:8b:69:46:41:8b:86:a9:d4:
4d:ad:de:34:de:ce:03:94:14:97:ca:c8:30:08:71:55:44:3e:
8d:a2:d7:51:63:18:83:3a:16:f1:03:b3:42:70:19:b7:7f:db:
f9:52:84:47:ea:a7:e9:e4:c8:03:ec:fe:48:de:03:21:2d:f4:
33:8b:ac:ad:98:88:3d:91:b4:b2:ed:13:9e:f9:d4:17:e1:83:
9b:92:13:3d:d5:a2:f2:c2:92:cb:48:b9:6b:94:ba:03:e2:60:
a7:11:df:83:9e:2f:d9:24:62:b6:b3:ef:7c:04:bb:2e:bd:33:
9d:d0:89:40:d7:19:69:fa:ea:3f:69:9d:53:6d:7b:7b:9f:ac:
24:8b:b2:57:b6:9d:22:9d:4d:8f:99:e3:4d:74:d8:47:59:f2:
ff:e2:95:53:91:ca:5b:fa:81:5a:88:f2:02:3c:48:40:cc:24:
88:99:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:21 2025 by rpki-client