Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SyO1QsGKF_LPQWpiIqEUB47Ts7Q.roa
File: SyO1QsGKF_LPQWpiIqEUB47Ts7Q.roa (raw, json)
Hash identifier: AgzWjEQ/O5A3Cbpw1tUO8dQ0dFWiXyVqFnU4PTQ4f/k=
Subject key identifier: 4B:23:B5:42:C1:8A:17:F2:CF:41:6A:62:22:A1:14:07:8E:D3:B3:B4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FA34B058868BC6CD686CEDD8C2F0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SyO1QsGKF_LPQWpiIqEUB47Ts7Q.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 150.241.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:34:b0:58:86:8b:c6:cd:68:6c:ed:d8:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b23b542c18a17f2cf416a6222a114078ed3b3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:7a:e3:70:47:28:9b:fb:31:dd:eb:fe:d6:
01:7b:ba:7d:84:24:0c:93:21:3f:e9:ae:e7:f4:70:
0d:a6:b6:a8:be:ee:53:db:a9:49:3a:31:d7:d5:5c:
47:f2:f8:4e:a3:e0:86:1b:61:23:0e:3d:98:89:ce:
57:55:73:99:11:6a:91:a2:15:af:c0:9f:3c:c9:25:
44:75:15:a5:ef:e6:7a:e3:e0:8f:a1:83:03:4d:ef:
66:f6:30:4a:63:7e:94:8b:63:4c:6c:e6:c2:0f:21:
b0:92:10:14:46:97:21:12:26:93:5a:43:83:21:12:
71:a4:17:98:62:c4:9f:04:4a:74:94:1e:f9:07:14:
fc:cb:a0:de:0a:f6:f7:6c:ca:65:3a:b1:f0:76:09:
a2:27:fa:3a:d1:14:11:04:49:1f:c4:fb:cc:b5:7e:
38:b1:9c:63:c8:79:f8:74:91:0d:01:73:a1:bb:16:
24:7a:cf:c6:56:7c:1c:57:1e:fd:f9:5d:a4:ee:3e:
78:4f:70:e7:dd:0e:f0:29:0c:a9:c7:cb:cd:0f:2b:
ef:93:21:ce:a8:84:d5:26:5a:f0:f0:62:bd:b1:f8:
28:b0:23:9a:e2:88:ae:47:8c:a5:d7:0f:2a:74:40:
c1:b7:30:90:37:6e:f6:d8:4a:1b:55:f2:b3:b3:f3:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:B5:42:C1:8A:17:F2:CF:41:6A:62:22:A1:14:07:8E:D3:B3:B4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SyO1QsGKF_LPQWpiIqEUB47Ts7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.121.0/24
Signature Algorithm: sha256WithRSAEncryption
20:76:fb:03:cb:cf:a8:23:48:fa:e4:c8:74:64:19:74:18:cb:
62:14:6f:b5:6f:c4:dd:e0:f2:82:a8:c5:00:55:1f:b8:c6:36:
9c:57:a6:b4:0a:68:e5:de:13:6a:cf:91:c5:71:e4:1a:da:83:
de:47:bf:9c:f7:90:9c:67:94:e7:b0:4c:6d:28:65:00:f1:47:
4a:ad:e9:70:9c:44:a4:91:89:86:90:af:92:34:7b:5c:7c:61:
fd:ee:fa:4e:04:4e:dd:ae:ce:97:d7:60:f2:33:75:60:d0:23:
07:dd:01:59:00:0d:88:6c:be:7b:99:11:db:6a:2a:0a:cc:44:
8f:59:1b:30:6a:d7:eb:4e:c5:3a:67:68:60:8e:58:d2:ea:3e:
8c:49:c0:5b:b1:f9:3c:b2:57:bb:7b:f2:7f:16:c6:79:f4:d5:
53:fa:f2:93:04:f8:22:78:c8:2d:da:03:4e:3d:d6:71:1e:44:
d8:b1:bf:47:64:aa:f2:82:22:f8:38:c6:e9:1f:ee:48:24:69:
0e:b4:6d:f4:4a:3d:7f:e3:ba:32:29:5d:20:56:b6:8f:09:1b:
c2:5d:a5:e1:97:b6:41:71:e4:81:17:7e:32:87:3d:4b:56:9a:
85:40:4c:51:a5:9f:07:57:09:50:ae:18:ac:8d:4a:e9:65:cd:
4a:ea:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:35 2025 by rpki-client