Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6f50A-SJ87OGuSi-Tv4q983Hqo4.roa
File: 6f50A-SJ87OGuSi-Tv4q983Hqo4.roa (raw, json)
Hash identifier: RJWZ2/E++D+nqktMb9DaqljAg+mAPQIDk8McZ0CQMzQ=
Subject key identifier: E9:FE:74:03:E4:89:F3:B3:86:B9:28:BE:4E:FE:2A:F7:CD:C7:AA:8E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01960972A2E8F1472CAE7557512897DBD2AB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6f50A-SJ87OGuSi-Tv4q983Hqo4.roa
Signing time: Sun 06 Apr 2025 04:53:49 +0000
ROA not before: Sun 06 Apr 2025 04:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211567
IP address blocks: 151.243.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:72:a2:e8:f1:47:2c:ae:75:57:51:28:97:db:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 6 04:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9fe7403e489f3b386b928be4efe2af7cdc7aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:cc:bb:e2:f3:f8:0d:f7:93:27:82:62:70:
51:8c:84:f1:51:e5:ba:94:53:6a:4d:fd:a5:26:4f:
7c:f7:e0:86:13:08:7a:85:11:87:20:42:9c:6f:99:
69:23:d5:d7:f3:cd:c4:7c:12:7f:22:ac:74:ed:c7:
65:b9:ed:f1:74:f0:34:dc:35:32:52:6e:0b:d8:db:
d2:ec:5e:5a:83:b5:16:5e:39:3d:dd:4d:a7:b0:01:
c0:a9:50:8e:83:26:c2:6f:4d:9a:df:5a:6c:61:6e:
e4:d3:ff:15:4f:89:c1:ef:ce:59:d9:d6:58:45:bf:
39:0c:2d:0b:7d:f6:ac:32:61:0f:a1:af:0c:96:a0:
ba:23:45:47:da:5f:a3:b3:17:cf:9b:17:2e:17:1a:
75:a6:7e:d4:db:0e:8f:b0:62:c0:92:ca:11:de:f4:
46:3f:0a:4a:62:28:cb:ba:68:23:9d:9e:bc:47:a7:
93:7c:8b:46:15:e2:95:0f:f2:34:29:fe:d9:9b:86:
92:49:0f:74:5d:d9:eb:28:aa:73:e0:2f:c3:d3:de:
de:f0:aa:63:1c:07:62:25:b1:94:f5:9a:38:34:76:
df:e1:0a:bc:e0:eb:ed:d7:7e:94:87:c5:a6:f5:97:
d5:b9:f7:a0:c8:bb:cf:c3:39:45:ed:1d:d5:c9:1e:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:74:03:E4:89:F3:B3:86:B9:28:BE:4E:FE:2A:F7:CD:C7:AA:8E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6f50A-SJ87OGuSi-Tv4q983Hqo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3c:a5:7b:4d:31:a7:56:dc:c2:07:ab:05:2f:2b:19:33:04:
5f:e0:74:9d:04:76:f0:ed:be:5c:a5:b5:77:ea:3e:85:27:67:
a5:b0:57:6b:30:f6:64:e8:54:1f:97:42:e5:df:2c:d8:1f:f9:
30:6e:53:21:66:16:f4:3f:09:92:90:69:69:bc:3d:c4:36:6b:
13:e7:94:bc:20:b4:38:d0:8c:91:28:b7:35:2a:00:86:07:45:
10:25:de:56:55:73:d0:80:9b:4a:c2:8c:60:1c:08:4b:18:c8:
44:4b:63:78:03:23:4a:d5:0c:90:d8:d8:55:54:0e:53:6c:31:
d5:66:b6:a3:3b:45:9c:99:08:6b:d3:4f:e8:55:a0:3f:6e:b4:
a5:83:46:71:23:91:30:0b:2f:84:1a:6c:91:4a:79:84:ad:db:
4b:75:16:4e:70:44:37:dd:1e:6c:10:fa:cf:d6:ae:ca:09:f2:
ef:af:57:8c:34:f8:e8:33:ce:96:5a:83:5d:d8:03:d8:70:82:
3d:67:c8:5b:bc:0a:84:0a:fe:01:68:22:9a:be:11:4b:53:93:
6c:65:41:8f:02:35:07:19:75:5e:8e:8f:46:fa:f0:f0:1e:53:
a7:93:a8:0a:37:ac:dc:1f:e2:1f:09:72:c5:35:c9:2f:39:be:
d1:2c:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net