Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oHbswr_uZYH4BqT5-pjvi7A66cM.roa
File: oHbswr_uZYH4BqT5-pjvi7A66cM.roa (raw, json)
Hash identifier: q/5JHJX335GoGhWI3kYnHoi/uIcZsOv/q3bY3r4gDTk=
Subject key identifier: A0:76:EC:C2:BF:EE:65:81:F8:06:A4:F9:FA:98:EF:8B:B0:3A:E9:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D1B71115A50718F2348B9CEB0000C692
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oHbswr_uZYH4BqT5-pjvi7A66cM.roa
Signing time: Wed 26 Mar 2025 09:09:50 +0000
ROA not before: Wed 26 Mar 2025 09:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.65.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b7:11:15:a5:07:18:f2:34:8b:9c:eb:00:00:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 09:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a076ecc2bfee6581f806a4f9fa98ef8bb03ae9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:d2:79:f0:4d:5a:96:4c:7b:f7:6d:99:23:
a6:3f:3a:9a:12:6a:2a:2a:b2:17:9d:38:77:cf:47:
70:04:19:cb:bf:8e:f4:d5:6c:04:cb:c4:f2:11:e3:
42:a6:a6:51:38:8a:57:b2:d7:ba:22:31:41:1d:8c:
36:3c:c2:f9:3d:44:e8:b4:24:de:91:13:22:f3:f9:
cb:0e:25:63:8f:11:88:e5:16:8d:04:d5:b0:36:0d:
65:0c:ae:b7:4c:84:60:ab:26:ba:90:94:fb:4f:18:
28:06:43:e7:9f:c8:4b:8c:80:1e:23:8f:ef:a9:fa:
f9:f8:bc:a0:3d:d4:d8:79:0d:f9:45:6d:68:a6:69:
32:e9:b1:e7:ea:7c:01:29:21:76:c2:7f:2d:e1:9f:
dd:d9:39:45:90:56:0d:ce:da:c8:d2:dc:4f:e0:66:
ff:75:fe:b8:76:38:98:b6:e4:1e:1f:7b:39:fd:81:
63:b5:de:92:da:44:c4:59:11:17:5f:5c:61:73:35:
69:e0:57:68:8a:e9:09:2a:af:51:4d:a4:32:72:24:
4c:5f:46:77:7c:68:23:50:3f:c6:6d:3f:b8:30:fd:
e1:b9:0f:6d:d1:54:53:45:f9:fd:43:41:cf:ae:b7:
cb:5c:ab:c6:d7:88:a3:82:d1:4e:ed:14:7a:d8:85:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:EC:C2:BF:EE:65:81:F8:06:A4:F9:FA:98:EF:8B:B0:3A:E9:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oHbswr_uZYH4BqT5-pjvi7A66cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.242.56.0/24
151.242.65.0/24
151.242.224.0/22
151.242.236.0/22
151.243.214.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d1:ed:7b:44:85:5a:32:af:37:6f:e1:d7:6d:cc:13:b4:91:
61:77:07:32:86:f5:6c:ab:c1:0a:84:fc:35:3a:f5:a2:9a:3a:
e7:44:24:d4:a7:35:6f:8d:fe:d7:25:c7:f7:99:5a:48:17:f9:
4f:a2:46:cb:e0:74:93:66:92:14:2c:0d:d2:30:b6:9b:7c:c1:
4c:91:7a:c6:41:8c:26:f0:3b:92:26:7c:2c:7f:9b:1f:b7:a9:
b1:12:9a:7e:c6:38:55:86:ff:a6:28:58:7e:de:a0:eb:48:57:
90:85:8a:fe:8d:70:b7:c6:74:11:ac:42:d8:36:6d:58:d4:f4:
6c:4e:e3:b3:ff:0a:0a:07:0e:c4:a9:0b:25:2c:e8:df:d9:f2:
9f:9d:c8:54:ba:fb:e6:1e:a7:7f:5d:c7:86:dd:d4:22:ba:b0:
45:5f:73:eb:04:7e:2d:97:35:1b:a0:28:94:ed:d6:87:4d:5a:
31:43:0e:22:84:ae:07:a4:55:a0:07:d7:60:c4:69:9e:0c:f9:
5b:1e:36:40:cd:84:2b:83:25:92:4c:05:6e:11:57:59:aa:6a:
fc:07:d2:08:01:c6:f5:05:a8:26:5d:7b:07:f6:52:d1:9f:4e:
da:78:ef:f5:70:70:2f:74:d3:5e:b0:95:ce:0b:d0:24:75:6c:
e8:7e:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:49 2025 by rpki-client