Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DmiaEB_k4Spl_KpL_CF6iCW--dQ.roa
File: DmiaEB_k4Spl_KpL_CF6iCW--dQ.roa (raw, json)
Hash identifier: c4/0LsriJKjMKtBEeB4rB1RVwzLJ3U7KSDNoRMy30mI=
Subject key identifier: 0E:68:9A:10:1F:E4:E1:2A:65:FC:AA:4B:FC:21:7A:88:25:BE:F9:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019613D0C07E6E5AFC8D938E9CEB842B1D34
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DmiaEB_k4Spl_KpL_CF6iCW--dQ.roa
Signing time: Tue 08 Apr 2025 05:12:49 +0000
ROA not before: Tue 08 Apr 2025 05:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272696
IP address blocks: 151.243.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:d0:c0:7e:6e:5a:fc:8d:93:8e:9c:eb:84:2b:1d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 05:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e689a101fe4e12a65fcaa4bfc217a8825bef9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:a8:67:29:c8:8b:a9:28:95:6f:2e:35:14:
87:fe:c1:f8:c2:33:bb:7e:84:d3:6e:d7:33:1f:f0:
a6:1b:48:27:08:e0:d3:b1:fa:a4:bc:03:1c:d4:9a:
e8:ee:9c:2e:ce:6d:73:f4:eb:3b:a2:6c:72:4f:65:
f0:ab:4f:6d:bb:c0:a5:93:a2:fd:23:c0:fe:e4:61:
29:99:d9:55:c3:bc:bb:7d:aa:00:36:d1:a7:25:40:
c1:ca:63:a6:51:01:d4:82:6f:1d:ca:3b:4d:bb:cf:
b5:f9:02:f9:9e:01:59:06:16:59:b6:8b:8e:a3:14:
b0:75:e2:2d:55:e2:fb:ce:09:ea:ed:06:5e:bf:9c:
5e:9d:46:a4:88:a1:24:d4:4b:bc:2b:d6:f5:d4:c8:
56:2f:ca:7a:5d:d8:6e:8a:5c:d1:77:81:63:a0:36:
cc:60:30:76:30:bc:a6:b1:a9:c8:f5:16:e6:07:d9:
f4:77:cd:4b:06:58:c8:e1:b5:bb:bb:b8:b9:81:04:
c7:d2:fb:a1:7c:a9:fa:e0:e5:ef:b9:17:d3:f9:d9:
e7:9c:7c:46:31:ac:17:d0:c7:e3:11:c1:46:cf:9e:
cc:49:80:88:22:23:be:61:5e:93:66:cb:53:2e:f1:
17:d7:d6:40:af:d2:18:ac:97:98:66:e3:a7:b3:3a:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:9A:10:1F:E4:E1:2A:65:FC:AA:4B:FC:21:7A:88:25:BE:F9:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DmiaEB_k4Spl_KpL_CF6iCW--dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:62:94:cd:15:68:be:91:bd:cb:ed:d7:9d:ea:93:4e:fb:da:
c3:b8:4c:b8:44:75:31:dd:d9:b7:f6:f4:2e:a1:fa:8a:a4:bc:
67:fe:5b:53:18:48:a1:62:44:08:0d:01:02:c2:2c:2c:e2:e2:
f5:3e:96:0e:7e:14:97:f6:20:35:60:6e:9b:75:6c:63:50:07:
7a:89:f9:96:21:28:97:8a:82:4a:4f:b7:7d:cd:46:19:c6:6a:
1d:14:3c:e0:1a:ad:d2:31:e3:df:42:ae:70:e4:1b:80:3d:36:
94:a6:e8:ea:97:7a:6d:31:40:19:09:58:20:d8:63:87:96:2f:
86:06:44:07:a4:ba:7c:0c:ba:f8:d4:b0:af:8f:fb:7e:63:fb:
e3:66:86:bf:98:5a:ab:ae:c6:63:3b:9c:3b:31:df:22:f8:d8:
6a:69:47:38:dd:21:58:86:ea:bc:b9:1c:b5:08:80:e5:be:20:
e1:4f:54:e0:b4:4b:b5:e7:92:4d:22:04:00:ab:e7:3f:ab:ee:
e2:ed:6e:b5:de:8e:fb:95:fa:4c:3e:83:0b:6a:91:71:24:d5:
66:e1:21:58:46:97:78:fa:d3:24:8b:cd:99:41:ee:2d:bc:15:
10:d6:f2:8c:1e:2f:a6:ba:ac:e2:4d:20:69:45:1c:fd:86:77:
62:d9:d0:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYT0MB+blr8jZOOnOuEKx00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDA4MDUxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTY4OWExMDFmZTRlMTJhNjVmY2FhNGJmYzIxN2E4ODI1YmVmOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooWoZynIi6kolW8uNRSH/sH4wjO7
foTTbtczH/CmG0gnCODTsfqkvAMc1Jro7pwuzm1z9Os7omxyT2Xwq09tu8Clk6L9
I8D+5GEpmdlVw7y7faoANtGnJUDBymOmUQHUgm8dyjtNu8+1+QL5ngFZBhZZtouO
oxSwdeItVeL7zgnq7QZev5xenUakiKEk1Eu8K9b11MhWL8p6XdhuilzRd4FjoDbM
YDB2MLymsanI9RbmB9n0d81LBljI4bW7u7i5gQTH0vuhfKn64OXvuRfT+dnnnHxG
MawX0MfjEcFGz57MSYCIIiO+YV6TZstTLvEX19ZAr9IYrJeYZuOnszpuUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5omhAf5OEqZfyqS/wheoglvvnUMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRG1pYUVCX2s0U3BsX0twTF9DRjZpQ1ctLWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MuMA0G
CSqGSIb3DQEBCwUAA4IBAQCgYpTNFWi+kb3L7ded6pNO+9rDuEy4RHUx3dm39vQu
ofqKpLxn/ltTGEihYkQIDQECwiws4uL1PpYOfhSX9iA1YG6bdWxjUAd6ifmWISiX
ioJKT7d9zUYZxmodFDzgGq3SMePfQq5w5BuAPTaUpujql3ptMUAZCVgg2GOHli+G
BkQHpLp8DLr41LCvj/t+Y/vjZoa/mFqrrsZjO5w7Md8i+NhqaUc43SFYhuq8uRy1
CIDlviDhT1TgtEu155JNIgQAq+c/q+7i7W613o77lfpMPoMLapFxJNVm4SFYRpd4
+tMki82ZQe4tvBUQ1vKMHi+muqziTSBpRRz9hndi2dB5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net