Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2ZbffVUgI3E3reDBSIA3yTI86h8.roa
File: 2ZbffVUgI3E3reDBSIA3yTI86h8.roa (raw, json)
Hash identifier: 6S9lcZ6d4XfIoc3kLktHZBUth3J9JkdX6QbYwEkgqPU=
Subject key identifier: D9:96:DF:7D:55:20:23:71:37:AD:E0:C1:48:80:37:C9:32:3C:EA:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195F0504F7B2F503BF7A9D216A2FB450F7C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2ZbffVUgI3E3reDBSIA3yTI86h8.roa
Signing time: Tue 01 Apr 2025 07:45:49 +0000
ROA not before: Tue 01 Apr 2025 07:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15353
IP address blocks: 151.243.45.0/24 maxlen: 24
151.243.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:50:4f:7b:2f:50:3b:f7:a9:d2:16:a2:fb:45:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 1 07:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d996df7d5520237137ade0c1488037c9323cea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:88:7c:aa:a5:8b:7f:d2:81:5d:ab:db:35:
3f:a2:ee:b1:aa:1a:b4:36:76:c2:29:cd:0f:58:fe:
d2:3a:aa:0b:0e:7c:90:64:da:90:18:b0:6a:14:2b:
41:89:05:75:f6:72:2b:77:7b:30:73:5c:e2:ba:1f:
09:b8:e6:c8:a9:90:8b:25:6a:03:52:f4:b8:01:d1:
cc:fa:57:fd:52:1f:27:fe:d2:50:17:d0:64:64:26:
f8:71:02:11:7a:40:ad:cc:7f:39:68:ba:cb:4c:c9:
27:0c:eb:a8:3d:ea:93:ed:58:f5:18:4e:ac:cf:23:
ea:4a:6a:22:ec:b5:38:95:d8:c6:59:f9:bf:7f:29:
3a:61:9e:e4:8e:79:5e:f7:28:53:af:6e:52:57:53:
c9:50:35:a0:af:7a:ca:08:84:02:59:24:e3:0c:1b:
58:ac:8e:11:cf:f3:da:48:f0:96:39:91:a6:fd:fa:
27:f4:14:7d:e4:0d:7d:7d:37:87:ee:96:99:69:72:
97:10:dd:69:60:b1:28:f0:9c:2a:55:48:7f:b5:c5:
c7:7d:bd:43:86:b7:64:5a:3f:12:3f:0f:f4:eb:e5:
b8:90:e4:ed:4a:e2:40:33:f9:49:9a:a0:7b:29:f7:
c5:f2:8c:f9:5b:2f:9c:b9:a3:20:e9:73:3f:ba:d2:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:DF:7D:55:20:23:71:37:AD:E0:C1:48:80:37:C9:32:3C:EA:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2ZbffVUgI3E3reDBSIA3yTI86h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.45.0/24
151.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:41:dd:8c:0d:3f:ae:17:b7:8f:34:d1:45:f4:12:b6:65:0a:
13:b2:0e:77:4b:35:ec:b7:fa:1d:81:7f:05:5b:f7:23:fc:09:
bb:e9:2b:5f:2f:08:14:d1:90:0c:1a:94:c0:58:ac:b8:0b:a9:
e9:91:5e:f6:62:35:48:73:47:55:19:a0:b7:a2:dd:94:4c:08:
ef:cd:ec:5c:8e:42:0c:86:c8:87:e9:c2:57:05:84:43:b4:35:
85:b7:d6:9e:cd:e1:6c:59:07:33:e8:da:86:1a:b1:ab:d7:c9:
dd:90:8b:dd:6a:b3:4a:70:15:51:92:09:83:b6:15:fa:4c:b9:
f9:44:32:44:af:5f:0d:96:c6:a3:d8:11:3f:a9:07:4b:00:dc:
b5:ca:bd:6f:c3:5f:ab:c1:7a:7b:c7:f7:a2:fb:a9:f8:4b:c2:
a2:b6:39:76:f3:ce:48:86:7a:ab:8f:f1:40:90:75:08:53:b7:
a6:d5:39:bb:17:60:c1:61:7d:86:44:a8:b9:69:b4:27:aa:ea:
e4:b9:fa:62:3b:1d:4b:85:e1:74:3f:ef:5b:fa:32:57:f6:1c:
67:63:6f:19:91:bc:b4:5f:34:a3:14:37:50:c7:b3:8d:fc:89:
53:9c:71:cc:5a:81:b8:ad:41:5a:55:c7:4f:54:14:04:e7:ab:
a9:b6:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net