Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uXhGyv4rNf1oSuhgnhrWtnMY7HA.roa
File: uXhGyv4rNf1oSuhgnhrWtnMY7HA.roa (raw, json)
Hash identifier: RYWR2EtoitGF7PoJ9h/nOqKUNR3J4YFJF7gCGFVyXUk=
Subject key identifier: B9:78:46:CA:FE:2B:35:FD:68:4A:E8:60:9E:1A:D6:B6:73:18:EC:70
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7B204E7E8347A1C6E2F5A4D0677DA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uXhGyv4rNf1oSuhgnhrWtnMY7HA.roa
Signing time: Wed 01 Jan 2025 21:48:45 +0000
ROA not before: Wed 01 Jan 2025 21:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214491
IP address blocks: 151.243.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b2:04:e7:e8:34:7a:1c:6e:2f:5a:4d:06:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b97846cafe2b35fd684ae8609e1ad6b67318ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:97:64:54:c4:6e:ea:9d:0d:13:38:b3:de:
37:23:71:a1:aa:b9:aa:d1:1c:62:1f:74:cc:13:9c:
38:fe:18:48:14:2f:95:cd:f0:e2:e4:79:75:2d:60:
58:12:c9:eb:41:9f:4c:e7:71:85:77:e8:b2:b4:8c:
70:76:f8:33:ce:a6:87:47:0a:9d:16:5e:11:6b:7f:
3a:c3:ef:d2:03:32:70:ce:9e:31:e4:84:a3:d5:71:
db:62:27:47:f7:e0:f4:c2:cb:50:64:48:87:c9:63:
f7:93:01:58:bf:99:f2:f0:c5:a5:56:c7:60:b0:12:
5d:11:70:f6:2d:f8:14:a6:c6:5b:11:40:5b:e1:bd:
8c:26:a8:b8:43:a5:ed:91:65:2d:8a:5b:b5:14:c4:
9d:a1:75:21:f5:1a:e0:10:22:d1:58:7b:3f:dd:89:
c1:3e:7b:01:c9:c6:15:cc:21:c1:b0:4e:6c:df:7e:
47:5e:76:8e:9e:36:54:64:ed:d8:b3:74:d6:bd:a0:
0f:6d:44:7c:89:58:26:cb:a3:2f:55:d2:9d:11:6c:
30:82:4f:9e:88:7e:85:cf:d6:dc:ac:8b:0a:f0:81:
5b:7e:d0:ed:3b:b4:55:e2:30:3b:3b:bf:25:00:60:
f1:6b:2f:80:a4:bb:0a:bc:02:4d:70:3e:d6:bd:61:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:46:CA:FE:2B:35:FD:68:4A:E8:60:9E:1A:D6:B6:73:18:EC:70
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uXhGyv4rNf1oSuhgnhrWtnMY7HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:51:df:05:e5:ac:b1:80:78:8f:77:83:82:6b:a5:3d:2a:6d:
80:39:13:62:83:1c:38:fa:83:40:6f:94:ad:04:f3:fb:a1:1a:
74:4e:5d:5b:bf:c7:57:a0:9b:8a:4a:86:b0:50:3f:8d:f1:a0:
0e:78:38:c8:78:f1:d2:ba:3d:6b:d6:cc:c0:59:f9:59:34:df:
bb:5f:36:d7:82:a5:5e:6a:5d:71:b0:59:43:a7:ba:f5:2c:72:
f6:a4:df:e1:36:d2:aa:77:da:1b:51:8f:de:d1:cb:62:39:1e:
c3:e8:21:3e:e2:6c:bf:1d:ea:d9:ad:55:b1:5e:42:f0:a9:25:
ec:02:e5:9c:91:52:b6:a6:f9:8c:7f:7b:af:ad:45:a5:d6:4b:
1e:29:50:ab:f9:86:33:b7:3f:9a:8d:b6:95:e1:fc:72:7c:99:
fa:5c:31:40:de:ee:d9:ed:82:48:e1:3d:19:ed:b8:5c:1f:92:
0d:9d:6c:57:52:df:32:95:84:5f:b4:84:86:fd:bc:9b:c0:be:
c5:5c:d3:e0:e0:13:fe:7e:2b:a9:95:6e:ac:f1:bb:f4:61:e3:
bc:65:f7:2b:ae:b7:d4:fa:a9:fa:f9:c6:11:75:32:77:5d:53:
ad:df:e2:fe:bf:1b:44:09:00:3b:13:a4:fd:9e:72:5e:5c:9c:
9d:a8:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:10 2025 by rpki-client