Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa
File: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (raw, json)
Hash identifier: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=
Subject key identifier: 6F:4C:DE:68:7E:93:4C:9A:28:D1:3B:3F:00:57:9D:D0:47:96:AA:83
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019427B60886C4A8BCFD6836F8A39AAA2960
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39013
IP address blocks: 151.237.66.0/24 maxlen: 24
151.237.80.0/22 maxlen: 22
151.237.80.0/23 maxlen: 23
151.237.82.0/23 maxlen: 23
151.237.88.0/23 maxlen: 23
151.237.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:08:86:c4:a8:bc:fd:68:36:f8:a3:9a:aa:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f4cde687e934c9a28d13b3f00579dd04796aa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:03:07:fe:ad:2a:b8:ee:5d:15:04:a4:87:
e4:80:42:3b:f3:9c:e6:db:b2:ec:a9:b8:19:20:61:
ba:33:1c:1d:15:79:6d:67:0a:04:c0:ea:2b:69:f9:
f8:f9:8e:d8:99:cc:06:be:32:00:8d:71:16:f8:c7:
73:f3:1d:5b:0f:2e:0f:e3:e8:29:84:df:33:5e:b2:
21:3c:9c:75:36:21:a8:3e:85:ee:de:65:03:61:3d:
e9:cb:eb:95:74:2d:89:db:c4:e4:ac:d3:26:1a:64:
92:bf:44:16:46:6f:00:89:ce:7a:c3:9b:0f:b1:42:
ca:70:45:ff:b3:de:72:93:7e:fe:82:ff:68:17:4a:
92:51:b7:c1:88:91:16:5b:37:61:a1:69:5d:9f:13:
77:c8:13:2a:be:3d:40:c6:fb:c0:ea:65:a7:a0:3c:
eb:61:1e:54:36:1a:ae:c1:8b:b7:a0:78:0a:90:b6:
f8:ff:07:58:dd:9e:84:5a:12:80:53:2c:29:97:3e:
32:57:0e:84:fc:5d:37:f5:91:9b:64:7e:55:c6:73:
07:b3:a7:e0:cb:e1:3b:ef:8d:e1:54:c6:3f:ee:d6:
77:ff:8b:61:3b:d2:01:03:c2:dc:be:1c:b5:aa:35:
c2:07:84:15:98:9b:57:b5:52:7c:72:d3:37:13:51:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4C:DE:68:7E:93:4C:9A:28:D1:3B:3F:00:57:9D:D0:47:96:AA:83
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.66.0/24
151.237.80.0/22
151.237.88.0-151.237.90.255
Signature Algorithm: sha256WithRSAEncryption
63:1f:98:43:65:54:bc:b0:a8:90:73:cf:3d:31:38:37:03:63:
3e:50:0c:ac:1d:06:69:da:0e:43:84:38:71:05:ac:76:c3:b9:
2b:8b:12:64:aa:50:7e:be:d3:31:f9:e9:cf:72:14:b7:1e:56:
85:ef:a0:07:53:42:d7:f3:97:a4:29:9d:67:9a:9f:c9:50:20:
22:96:54:6d:e7:85:e5:86:3a:31:d1:18:f5:99:20:75:ab:72:
77:a5:2a:e7:04:f7:bd:d7:21:1e:f3:aa:59:91:fa:39:53:a1:
dc:e6:8e:0a:2f:3d:89:4c:2a:b1:c2:31:c0:20:1c:bc:1d:23:
32:01:e7:7b:bd:d3:2c:30:e3:ec:6c:ad:db:cb:8b:1a:08:74:
76:32:f5:74:40:8d:5c:22:92:e9:1e:1f:9a:5c:c8:9b:7a:ff:
88:e8:cf:aa:53:69:67:ad:d9:94:01:76:f7:ab:88:58:e0:fc:
1b:4d:a1:58:cf:c9:7d:91:3a:79:1e:96:e9:c8:c8:df:ba:82:
03:96:45:e6:79:ea:d0:e9:0f:f1:43:e2:76:bf:cf:e9:73:94:
f7:26:aa:f4:9a:c6:94:61:08:8c:65:11:4a:5b:09:2d:d1:08:
83:2f:62:41:54:61:2f:c7:e5:30:19:02:a3:1a:c9:a8:27:46:
7a:44:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net