Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vtu9TTJc6QxpPlwfUij7JUm-v0w.roa
File: vtu9TTJc6QxpPlwfUij7JUm-v0w.roa (raw, json)
Hash identifier: bQhjGzeM0kHX0GFHtGo/rRfGghGYCK4Yf00DpE+nhOE=
Subject key identifier: BE:DB:BD:4D:32:5C:E9:0C:69:3E:5C:1F:52:28:FB:25:49:BE:BF:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01955BB5DDE69D203E968C6B755815783713
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vtu9TTJc6QxpPlwfUij7JUm-v0w.roa
Signing time: Mon 03 Mar 2025 11:13:20 +0000
ROA not before: Mon 03 Mar 2025 11:13:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.243.2.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:b5:dd:e6:9d:20:3e:96:8c:6b:75:58:15:78:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 3 11:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bedbbd4d325ce90c693e5c1f5228fb2549bebf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:b1:e8:84:b5:73:37:8a:03:e6:42:91:0e:
c5:cf:65:70:b9:10:55:3c:10:37:41:9c:b1:db:57:
12:97:4b:3f:9a:85:46:f3:f2:a9:7a:27:ca:6c:7a:
82:d5:d7:cc:28:9f:db:cc:f5:b0:69:7c:70:2f:59:
b5:3a:52:31:e8:32:13:4a:41:05:f2:2d:53:b1:6e:
ca:32:54:67:94:35:83:ae:43:a5:dd:dd:33:72:e1:
7d:b4:02:f3:82:69:89:fe:8a:39:d2:b5:78:19:77:
fe:df:dc:22:88:79:cc:c6:60:f6:df:c3:fb:32:4f:
7c:c9:30:11:4f:47:f6:c6:af:2b:1e:02:3d:18:1e:
47:ca:52:dd:5a:6a:0c:81:d9:15:17:64:ac:9d:f4:
8b:66:12:22:8c:2e:ac:d8:4b:a5:d1:85:60:06:60:
7f:2d:b2:ff:1c:5e:4b:b3:c6:e6:e0:3d:96:b0:3b:
88:54:8f:ca:b1:35:c5:73:f3:c7:36:3d:ff:5b:97:
cd:10:99:7d:df:bf:cd:5b:15:c9:9c:5a:0a:40:f9:
0b:ec:35:53:a6:0b:f1:87:82:8f:f0:4d:bb:d6:59:
2a:4c:a2:00:65:20:78:de:40:b4:02:7c:7c:18:9e:
ee:54:11:1a:92:29:9c:67:5f:53:c9:36:d0:ca:6e:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:BD:4D:32:5C:E9:0C:69:3E:5C:1F:52:28:FB:25:49:BE:BF:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vtu9TTJc6QxpPlwfUij7JUm-v0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.2.0/23
151.243.10.0/24
151.243.35.0/24
151.243.37.0-151.243.39.255
Signature Algorithm: sha256WithRSAEncryption
70:c6:6a:37:8b:04:80:d9:c6:3d:55:4f:13:78:1e:40:09:20:
88:e5:5c:4b:88:f8:6a:85:12:d6:07:e6:9b:83:87:f8:67:25:
57:6a:a6:e0:c2:46:a1:0d:f8:91:c2:fd:2a:b8:10:aa:95:ec:
ff:16:5d:be:94:a3:68:2b:ed:40:d6:d8:0d:02:25:d0:12:47:
c7:79:d5:4f:da:f2:c7:b8:57:da:18:33:ab:92:5a:5c:d9:35:
76:e5:50:1b:63:50:d6:95:8d:19:cb:21:6f:29:16:d3:9d:12:
fc:60:9b:37:df:ed:6a:68:8a:31:ae:fd:84:0d:20:2e:e5:e8:
06:04:76:6a:2f:1a:91:02:2c:6e:c8:f5:0a:16:8b:62:54:04:
3c:b9:d7:29:4c:b1:b7:d2:0a:34:ba:51:f2:94:b4:8f:88:d5:
4e:4c:98:3e:5b:63:ba:bc:a9:bf:53:75:a4:97:13:f4:69:c7:
ec:92:00:a9:58:7e:3d:ba:88:b8:1a:b6:5c:91:36:40:be:55:
3f:0f:46:84:63:47:15:28:ab:d4:e1:67:6c:57:bc:d4:8a:14:
7b:4a:14:55:3b:e7:3a:7a:51:77:3b:a5:0d:b6:28:3d:0a:13:
43:43:89:99:e7:89:24:90:68:5a:0f:bd:82:1e:52:c5:e9:24:
4b:9f:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:16 2025 by rpki-client