Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4He2MUH3a0oior8qbgN8bHQhd1U.roa
File: 4He2MUH3a0oior8qbgN8bHQhd1U.roa (raw, json)
Hash identifier: 8+wiwNstBGHrT0UYR3Nj1bOjNdwZrWwO+lvJb1gvtV0=
Subject key identifier: E0:77:B6:31:41:F7:6B:4A:22:A2:BF:2A:6E:03:7C:6C:74:21:77:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196210EACF2714EB1E401F19EDE3432BD70
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4He2MUH3a0oior8qbgN8bHQhd1U.roa
Signing time: Thu 10 Apr 2025 18:55:32 +0000
ROA not before: Thu 10 Apr 2025 18:55:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.241.132.0/22 maxlen: 22
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:0e:ac:f2:71:4e:b1:e4:01:f1:9e:de:34:32:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 18:55:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e077b63141f76b4a22a2bf2a6e037c6c74217755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:85:ec:c0:d9:8f:be:a2:58:03:6e:5a:cf:
81:ad:35:83:e3:eb:74:5e:36:2d:be:d2:31:1d:cd:
67:4e:59:07:e2:64:51:fc:90:7d:d3:40:6d:e1:0c:
d4:d0:85:b9:79:60:ae:59:29:ca:06:22:12:c9:3d:
54:fb:ae:f4:8d:1e:f4:27:04:cd:b2:ea:ba:66:ce:
9a:d4:34:f9:85:62:fa:56:93:f0:5d:53:47:98:eb:
02:55:b7:eb:78:58:10:52:73:1b:01:9a:0a:e2:94:
92:e0:85:b4:30:44:a5:16:0a:64:91:b7:cf:74:26:
e7:0e:f4:2a:75:03:61:22:0b:e4:eb:f6:81:eb:d5:
9b:45:ad:d3:f8:cd:91:a5:11:58:2d:df:eb:30:c9:
fa:14:db:f0:28:8b:3a:42:64:b4:15:b5:a9:d1:25:
69:3e:30:4b:51:96:f4:61:2b:00:0b:30:d9:f6:56:
39:9a:05:11:69:3c:8d:5c:48:c9:a0:df:e8:6f:25:
4b:f5:f6:2e:f3:bf:5d:90:11:e3:43:eb:aa:96:ab:
47:3b:2b:6a:90:ad:78:17:ab:d7:5c:ba:fa:39:ac:
69:b6:87:e6:7d:60:3e:9c:7d:01:73:fe:16:3e:83:
bc:28:8a:24:9f:58:e6:3a:f5:22:5e:95:87:44:66:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:B6:31:41:F7:6B:4A:22:A2:BF:2A:6E:03:7C:6C:74:21:77:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4He2MUH3a0oior8qbgN8bHQhd1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.132.0/22
151.243.8.0/23
151.243.204.0/23
Signature Algorithm: sha256WithRSAEncryption
50:54:bb:50:9f:d2:0c:f7:f2:eb:7e:dd:d7:1e:ee:1d:13:56:
fb:1f:d9:95:50:9d:7d:39:33:40:ba:a6:cc:11:92:39:cd:51:
94:2c:56:06:32:fe:ba:37:9d:8e:d4:19:ae:85:36:92:aa:ef:
02:a3:52:08:5c:22:27:30:b3:d8:71:82:35:92:b0:0f:e5:6e:
70:f0:19:7a:4d:ee:13:14:ab:85:5b:7e:9e:fe:f5:10:73:87:
43:84:43:b5:d2:b1:ce:1f:bb:f0:ba:53:d2:5d:dc:0b:ff:e0:
3d:a7:1c:af:01:9a:90:42:ca:68:91:5e:82:8b:97:8c:63:00:
e4:48:23:9e:7f:b5:c8:5c:f6:8d:f6:9e:7f:1e:45:fb:55:f7:
27:0c:b3:29:51:88:b3:8d:1e:18:23:7e:0f:b8:f6:3a:bb:73:
c2:6b:23:db:09:f8:7c:e9:cb:f3:5d:89:bd:6c:34:32:db:b0:
da:0a:86:84:5f:4a:5b:61:10:61:8c:1a:af:b1:1b:bc:c0:a2:
61:18:2a:51:4b:00:0b:89:9c:5e:bc:09:7c:fe:78:ee:90:34:
d7:9e:33:92:f1:44:fb:65:cd:b9:0a:dc:64:50:86:35:0d:e4:
a5:5b:c7:23:ef:64:d2:06:72:9d:de:64:76:20:eb:5d:68:48:
bb:e2:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net