Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/a79ubTTcO-rbEIzEJnpKg6XrOxE.roa
File: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (raw, json)
Hash identifier: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=
Subject key identifier: 6B:BF:6E:6D:34:DC:3B:EA:DB:10:8C:C4:26:7A:4A:83:A5:EB:3B:11
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019428261F12DCFAC8424E4077C300B62949
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/a79ubTTcO-rbEIzEJnpKg6XrOxE.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1f:12:dc:fa:c8:42:4e:40:77:c3:00:b6:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bbf6e6d34dc3beadb108cc4267a4a83a5eb3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:f1:c6:8d:e1:95:a9:59:ae:a0:d4:7c:ae:
61:96:02:9a:ed:a5:20:b8:a4:cf:c9:5c:b5:ac:2f:
22:5d:4d:b2:79:5f:a3:5d:f6:e2:c7:3e:6b:09:39:
0f:b5:c8:b4:b2:2e:f6:cc:df:dc:46:66:97:10:91:
17:67:b3:49:c9:0d:62:a6:e5:1c:a8:6b:f3:3b:a4:
24:06:d0:3d:15:3b:1f:31:dd:87:5e:df:3c:31:40:
eb:82:09:79:77:54:4b:35:6c:5a:18:79:56:eb:fe:
26:6d:16:78:82:fa:64:d3:ac:bb:72:4a:ca:d0:c3:
0e:d4:fc:89:6c:e3:c9:7d:6d:0b:5c:3e:a9:9f:d1:
f3:fe:24:f0:d3:e0:10:70:ad:b2:de:6e:57:b5:ba:
90:6b:50:59:f4:22:76:57:b0:bd:48:57:30:27:31:
a6:3a:cd:ce:7e:6e:3e:e8:a6:0f:f1:2e:27:d2:4e:
ee:0d:2f:57:1e:71:ec:a3:97:1c:53:51:d9:12:a7:
34:df:75:27:4d:15:c4:0b:2a:06:dd:2a:91:ab:89:
70:0b:e6:bb:c3:c9:38:db:55:16:8f:61:42:88:34:
9a:c6:ca:8c:fc:2d:76:b2:f2:9c:d4:79:0d:61:45:
d7:9a:f4:8d:c0:e2:87:0a:39:7f:e3:58:ac:04:b6:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:6E:6D:34:DC:3B:EA:DB:10:8C:C4:26:7A:4A:83:A5:EB:3B:11
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/a79ubTTcO-rbEIzEJnpKg6XrOxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
98:71:13:28:df:72:ff:1f:35:2b:f2:e8:ac:ab:66:4c:10:5b:
0c:10:48:f3:73:44:6d:a1:48:71:1b:98:f9:0f:6c:4d:fa:b9:
f3:64:d7:22:45:24:15:01:a7:01:a7:16:1e:86:d9:9e:b4:4b:
bf:4f:62:42:3c:6c:c1:29:6a:3a:b3:0b:8f:d7:18:1b:54:f2:
80:e4:63:ca:c5:14:ca:3f:72:75:d0:25:b9:f0:06:78:ba:11:
8b:6b:36:75:25:c4:5a:0f:56:8f:e6:f3:fb:04:ff:f9:fd:38:
d0:64:de:3c:09:14:73:c9:61:bb:7c:bd:c1:9d:83:da:01:26:
d6:a8:56:36:fd:57:fc:ea:c9:37:41:8f:7f:77:f0:5a:81:df:
db:e8:92:f3:24:58:5c:99:92:1f:0b:4b:a0:73:33:5f:5e:5e:
83:66:c4:22:7f:df:33:df:52:b2:7a:8d:05:10:41:fc:e7:71:
4e:77:cc:04:1b:4b:81:58:cc:74:d1:f9:79:17:e0:e7:2e:21:
02:7a:22:c8:be:95:8d:42:11:fe:3c:e4:ff:23:bf:08:99:37:
be:a8:35:24:2c:2f:ea:32:65:54:c3:48:01:80:d3:ea:5e:dd:
e5:dd:9b:f3:b9:ea:3f:81:8e:ff:7f:d1:25:3c:8c:ff:4d:ba:
d7:27:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:13 2025 by rpki-client