Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DFllakhYeoutBATf4MzktTkzMHA.roa
File: DFllakhYeoutBATf4MzktTkzMHA.roa (raw, json)
Hash identifier: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=
Subject key identifier: 0C:59:65:6A:48:58:7A:8B:AD:04:04:DF:E0:CC:E4:B5:39:33:30:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7F9E684962F69BC239FFCA4387959
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DFllakhYeoutBATf4MzktTkzMHA.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 150.241.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f9:e6:84:96:2f:69:bc:23:9f:fc:a4:38:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c59656a48587a8bad0404dfe0cce4b539333070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:52:9a:18:9c:94:39:4c:96:a8:22:31:36:
cd:14:22:73:6e:e3:9b:ff:96:ff:75:75:4a:32:c1:
f9:ab:c1:b0:f4:cf:9e:e5:b2:70:6e:c3:18:e4:49:
4f:d1:6c:3b:77:3a:c1:cb:d2:10:8f:6f:0f:ba:38:
84:65:8f:c2:b1:ba:3f:c1:17:65:c3:88:7e:7d:e0:
43:47:74:30:1e:06:7b:3e:37:3b:84:be:ee:98:8d:
12:47:dd:24:5c:d3:69:27:91:42:d3:ae:64:29:39:
00:b4:33:35:32:ad:6c:f2:77:3d:0c:6b:ce:e7:dc:
32:28:ad:4c:0a:35:39:9b:a5:16:18:ae:68:5f:4d:
83:ff:f9:b1:d4:89:24:d2:8e:2a:57:4a:b9:bd:c6:
1a:d1:41:b8:ac:d5:11:c7:ef:a5:a8:c7:31:e6:a9:
2a:7e:4c:12:a7:f3:f5:a3:d9:f4:a8:53:51:95:15:
f2:2f:30:ad:59:a3:60:a8:ca:76:a2:46:f8:f8:c8:
06:56:b4:f5:07:88:ad:a6:08:07:5f:0c:46:97:6c:
a2:cc:14:9d:1d:c0:87:56:20:ec:52:2a:cb:e2:b5:
2b:ca:6b:72:6e:39:ae:ae:3f:71:17:4c:b8:19:00:
b8:b9:5b:d9:61:8b:ac:65:e8:d5:ac:bf:c6:42:19:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:65:6A:48:58:7A:8B:AD:04:04:DF:E0:CC:E4:B5:39:33:30:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DFllakhYeoutBATf4MzktTkzMHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:43:62:a7:e3:41:f8:ae:1e:fd:17:18:ae:8a:28:ed:5c:3e:
93:85:3d:b1:30:1d:ac:12:c4:f8:e4:de:db:be:52:8d:ae:19:
7a:29:1e:d6:88:c1:1a:95:02:1c:b3:7c:c8:d3:23:dc:ef:6d:
4b:a4:7e:41:15:53:0f:95:7a:a6:bc:2d:e4:c4:b1:5b:76:db:
61:0f:0d:94:25:ae:2e:54:01:51:b7:64:2a:6b:2c:dd:f7:b1:
77:ba:90:ea:db:64:61:5b:d2:1a:8f:39:7b:b0:0b:ea:f4:e3:
e1:45:55:cf:e9:a6:19:70:ae:a5:6c:16:3e:5c:d8:5a:80:47:
c3:28:b3:df:da:f3:74:d3:34:7a:91:c1:7e:70:76:c8:ef:32:
cc:23:48:36:bd:52:28:76:fe:a7:00:b8:07:e3:86:52:01:72:
63:5d:93:c6:3b:2e:51:83:94:bd:61:ba:88:40:71:90:75:05:
e9:ff:87:e9:f8:34:2f:09:ac:3d:e1:51:ed:20:5a:6c:82:47:
55:00:76:a1:9d:9d:2a:cc:c0:1b:55:93:50:b6:55:03:08:8a:
f6:e2:23:1d:e1:0a:93:c2:6b:8c:9b:64:28:78:ba:b0:2a:fc:
22:ce:8e:3d:21:53:fd:69:89:f9:8a:58:c0:72:38:52:6e:df:
54:fd:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:58 2025 by rpki-client