Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgRFReFBS85ZlV6t-ciNgK7M5pc.roa
File: wgRFReFBS85ZlV6t-ciNgK7M5pc.roa (raw, json)
Hash identifier: RDpNiZ/sKoJz1rv5VU1+9mnSoQ00TVtiQl7BaxP/Els=
Subject key identifier: C2:04:45:45:E1:41:4B:CE:59:95:5E:AD:F9:C8:8D:80:AE:CC:E6:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01952775BED2ABFA447AC43D3AA7436685F5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgRFReFBS85ZlV6t-ciNgK7M5pc.roa
Signing time: Fri 21 Feb 2025 07:43:02 +0000
ROA not before: Fri 21 Feb 2025 07:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.118.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.122.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:75:be:d2:ab:fa:44:7a:c4:3d:3a:a7:43:66:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 21 07:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2044545e1414bce59955eadf9c88d80aecce697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:a6:5e:85:7f:4e:73:cd:0a:e3:2e:c5:53:
05:e0:28:8f:1f:5e:87:43:4a:47:d9:09:3c:0d:61:
18:0a:b7:29:3c:15:68:cc:1f:46:86:ff:ca:36:04:
ad:17:cd:e2:72:4c:8a:7d:4d:82:f0:84:1e:9b:32:
b7:4d:f4:6d:51:fb:ad:14:cb:7c:3c:4a:69:30:c7:
d9:c1:e9:d8:11:76:00:3d:02:8d:11:47:54:53:8e:
02:39:85:00:ba:59:bb:a6:2c:de:6b:82:ff:11:8e:
74:0e:06:cc:d1:00:be:53:0e:c6:02:6a:0b:cb:7b:
64:55:0f:cf:13:01:97:13:96:fb:5e:ff:21:d6:e5:
ef:7b:c9:16:a3:ee:e0:36:f5:f4:41:6b:df:5c:4b:
f9:25:c9:1f:6e:4a:e4:14:ea:f3:05:a7:23:81:db:
83:51:8a:28:d2:3a:cf:2c:9d:1c:d6:16:a6:5d:f7:
a6:2a:6a:79:a2:f3:14:bb:bf:20:43:0e:40:c6:88:
5d:39:74:7d:ba:69:01:7a:90:07:ce:39:aa:90:be:
fa:d4:4b:8d:3a:00:9a:d2:2b:58:33:3e:10:01:88:
33:2c:cb:6c:cf:33:0c:98:1b:9e:08:80:92:e7:f5:
d2:8b:86:a4:09:bb:51:06:d9:57:9f:67:c6:91:7f:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:04:45:45:E1:41:4B:CE:59:95:5E:AD:F9:C8:8D:80:AE:CC:E6:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wgRFReFBS85ZlV6t-ciNgK7M5pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.112.0/20
Signature Algorithm: sha256WithRSAEncryption
22:ff:2d:db:6d:0d:eb:84:be:ac:8f:a3:e4:ce:be:ab:7a:2d:
be:98:60:f0:a3:c6:0f:9e:3e:39:14:fa:b9:da:4a:df:1b:82:
9a:10:c7:37:20:06:ef:24:ec:a4:d0:cb:5a:63:14:c7:e3:a1:
2a:51:c1:bd:c2:dd:c7:c6:6d:80:cc:c8:1b:79:ae:e0:06:b9:
ad:79:d1:a3:2a:96:3c:23:99:9b:1e:82:f1:9d:35:ad:21:ff:
ca:8a:dc:c0:38:93:8a:e7:7d:d4:a9:5e:4a:ba:02:e0:a4:3b:
ff:97:7d:90:28:2a:36:c5:87:02:42:46:0a:2b:c5:37:b9:0c:
a1:d0:52:9f:7f:d9:a5:83:63:3f:61:87:dc:f8:a3:a0:a4:ef:
c7:59:87:8b:80:1d:d5:c6:71:42:03:e5:ad:79:78:4a:cb:af:
4b:c2:a4:61:8e:a8:4e:18:0e:67:23:45:ab:c2:80:f3:0f:50:
20:f1:c6:d5:5d:f5:d3:c3:b5:9e:9e:10:62:79:93:7e:e3:6e:
ec:26:c3:94:51:f7:ce:64:79:dd:c4:e0:32:36:b7:ec:a9:b8:
d7:b2:de:1d:fc:b6:8a:60:18:85:6a:37:be:95:8d:9a:74:e9:
80:98:ec:00:cd:22:ba:82:fe:fe:fa:48:09:57:57:eb:5a:c9:
2d:d5:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:48 2025 by rpki-client