Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pFrQ4y0qKB6UgIS3ukOYa0jjC4s.roa
File: pFrQ4y0qKB6UgIS3ukOYa0jjC4s.roa (raw, json)
Hash identifier: m16wBphwAGjIfNnHKH6jtRdRZHymvsYnsQdgPC2zlws=
Subject key identifier: A4:5A:D0:E3:2D:2A:28:1E:94:80:84:B7:BA:43:98:6B:48:E3:0B:8B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954D72BD0CAB53469D07A09EA694818516
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pFrQ4y0qKB6UgIS3ukOYa0jjC4s.roa
Signing time: Fri 28 Feb 2025 16:45:19 +0000
ROA not before: Fri 28 Feb 2025 16:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 151.243.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:72:bd:0c:ab:53:46:9d:07:a0:9e:a6:94:81:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 28 16:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a45ad0e32d2a281e948084b7ba43986b48e30b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:4a:d2:56:86:48:c9:07:c1:62:2b:3a:31:
03:50:02:d7:d1:1c:28:c0:e0:98:91:72:3b:d8:c8:
ab:72:56:11:1d:b0:7c:a8:04:a0:16:83:fc:2a:7c:
4e:bc:8e:98:9c:39:03:cf:ad:8e:a2:9e:2d:4c:ec:
3f:3a:ab:bf:4f:45:17:9b:ee:1c:24:39:a8:e6:cf:
8f:cf:03:f3:b5:a9:62:fb:fd:05:d4:a9:34:54:38:
4c:47:18:dc:f1:63:bd:ae:89:06:eb:e9:30:5c:26:
32:5e:e3:ba:10:2a:1e:47:81:7f:0f:94:9c:a2:af:
61:19:b8:50:a5:5b:3e:c8:a7:f3:64:09:07:dc:dc:
b7:21:a4:19:e4:0b:7d:a8:c3:a8:68:57:67:9e:88:
71:f1:b9:cc:91:5a:76:db:bb:ae:50:21:44:ec:6c:
b4:b0:36:d9:27:ca:bf:da:bc:09:9d:ca:2f:39:27:
d6:ae:01:85:b3:e7:39:b5:c5:ab:e0:b1:02:ba:f4:
3b:0c:4e:34:de:6f:c7:9b:4a:eb:e5:65:66:11:8b:
6d:6d:21:ed:e5:56:32:50:0f:5b:76:7f:63:bf:53:
9b:ab:d7:69:a0:2a:5c:23:14:88:95:de:34:08:20:
6c:dd:22:0f:22:f3:fc:96:a8:69:a5:1b:99:ed:d1:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:D0:E3:2D:2A:28:1E:94:80:84:B7:BA:43:98:6B:48:E3:0B:8B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pFrQ4y0qKB6UgIS3ukOYa0jjC4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.175.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bc:1b:e0:1e:bc:12:7c:61:7a:df:76:ae:ae:34:9c:2d:a3:
fe:33:7b:ea:03:d2:ff:b9:86:4c:44:6f:a4:88:14:7e:1b:f3:
5d:3a:47:9d:05:5b:70:46:2f:5b:8c:af:d2:46:97:21:1b:9a:
ac:ed:56:74:a0:dd:3c:76:45:ee:e3:87:01:32:a0:3b:64:20:
96:5e:b9:a5:b4:92:1a:1c:0a:e7:9e:99:dd:34:90:8c:96:d5:
14:cd:20:a0:36:b7:b0:de:d9:7a:e9:a3:d1:d5:b8:fb:da:9d:
0c:f4:b8:4c:bf:f2:f7:2f:5e:40:f8:59:43:e4:10:09:cb:ac:
a4:d3:e7:90:c7:55:3a:54:f9:1e:99:bb:e1:61:f6:da:94:10:
3d:9e:cd:75:6a:d8:2b:e9:54:2a:e2:96:bb:4f:e5:78:9e:7f:
14:29:69:ad:3f:ac:56:79:95:c2:bb:ea:68:28:83:01:ed:6f:
b0:20:63:7e:29:8a:c2:38:6d:e0:cc:9f:3f:8c:47:49:fa:59:
b5:2b:53:7e:17:8d:5d:f7:d0:08:59:89:02:c1:92:0e:b0:3a:
f6:d4:6b:49:fb:9d:d4:09:7c:50:f0:3c:35:4e:9a:1f:ae:33:
15:48:23:27:74:b4:8f:97:25:be:6d:56:ce:2e:00:0a:5a:2a:
ae:4e:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:31:24 2025 by rpki-client