Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjMhGyO5OcH3HzjOzKJ90tQ6xhU.roa
File: qjMhGyO5OcH3HzjOzKJ90tQ6xhU.roa (raw, json)
Hash identifier: Fqxoaq3W/ObkjM3fmKZ+Po1bMkfunb5dZJ43dWfnYys=
Subject key identifier: AA:33:21:1B:23:B9:39:C1:F7:1F:38:CE:CC:A2:7D:D2:D4:3A:C6:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195A3041B7AC90324DCCD11767AA4EF4F9A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjMhGyO5OcH3HzjOzKJ90tQ6xhU.roa
Signing time: Mon 17 Mar 2025 07:31:50 +0000
ROA not before: Mon 17 Mar 2025 07:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.65.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:04:1b:7a:c9:03:24:dc:cd:11:76:7a:a4:ef:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 17 07:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa33211b23b939c1f71f38cecca27dd2d43ac615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:83:0d:24:38:6d:99:33:65:cd:57:b4:ef:
60:c6:ad:09:3f:97:45:92:4c:72:f3:4d:34:1d:f8:
d0:75:9f:09:36:68:38:38:38:da:a8:c6:be:89:9f:
4b:23:6e:33:5c:10:8a:ba:eb:b4:b0:ff:e0:d5:97:
55:0d:27:63:cd:b3:70:9b:09:52:c4:01:58:10:c8:
41:3c:50:e2:3c:38:59:61:4c:86:e1:5d:c2:6e:a4:
ad:ca:4a:a9:fa:3f:66:47:bc:4c:01:82:69:74:db:
7d:3c:58:64:97:b0:99:82:06:84:de:39:77:19:00:
08:c7:43:c0:84:2c:d2:f4:0d:41:f7:ac:52:e6:69:
8d:c6:35:18:32:49:fb:0e:24:21:ee:f7:80:cc:50:
6c:ec:3d:e1:32:0d:f6:2a:d1:c2:4a:23:76:67:19:
39:21:b2:67:b6:92:86:7a:fe:43:fc:c9:11:5e:39:
4a:e9:f7:0a:1d:d5:4d:4f:b6:83:d9:89:8e:48:f9:
37:f0:ae:ca:a6:df:51:fe:f4:86:64:ba:9f:2b:d0:
f3:9b:7d:4c:f3:3d:f7:d0:95:8e:db:39:ab:bc:fd:
27:fc:e2:9e:b2:07:ef:1d:47:3a:a8:9e:1c:0c:4f:
40:16:d5:cf:86:d9:18:3c:55:e5:1f:27:b4:3d:13:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:21:1B:23:B9:39:C1:F7:1F:38:CE:CC:A2:7D:D2:D4:3A:C6:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjMhGyO5OcH3HzjOzKJ90tQ6xhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.242.56.0/24
151.242.65.0/24
151.242.224.0/22
151.242.236.0/22
151.243.214.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d0:06:e5:71:26:17:58:e9:72:d4:0b:ab:cb:6f:ea:5c:6e:
82:50:e8:03:f9:0a:fb:8e:6d:de:56:c0:fd:84:64:9c:b6:f6:
03:9a:42:8f:2c:55:0b:24:41:31:f5:85:21:d6:75:7d:97:a0:
93:96:b9:0f:84:af:83:e2:2a:b2:82:17:73:bc:e7:70:9e:0e:
f9:6f:a9:28:1a:78:69:50:d5:bd:b5:0e:7a:b5:0f:bd:bd:43:
bd:5c:66:98:34:87:00:7c:bb:17:03:b8:e1:77:19:63:0a:58:
eb:e7:ec:db:f7:6c:64:6e:7a:18:67:1f:0a:ed:21:0f:1f:09:
85:fa:9e:04:08:54:ec:b6:b3:10:65:6c:9f:21:eb:a6:f4:ff:
41:89:ac:77:49:86:26:0f:89:b9:8e:f3:fb:d6:10:7f:b8:d6:
45:1b:73:c3:83:a8:b4:da:a0:7b:9a:9d:10:07:9b:ca:6f:a8:
a8:02:f9:71:b4:7f:6e:f4:5a:ba:92:fb:48:ed:2d:ce:ac:a1:
01:a7:ed:c0:d9:01:fb:1c:71:9f:8f:2e:b6:9d:1d:8c:0f:8b:
1e:2a:3a:e1:6a:14:c8:1e:a4:02:0d:97:4e:60:91:49:b6:02:
62:33:f1:08:18:78:77:d3:9c:04:e2:d5:84:d2:e1:8e:9d:89:
6b:31:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:02 2025 by rpki-client