Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PntPyS66KqLT3wkR22-qEEROOqk.roa
File: PntPyS66KqLT3wkR22-qEEROOqk.roa (raw, json)
Hash identifier: CxhaBnzZqsQuHQw1iyZnLQOoiB882rzz9sp0wlfySSI=
Subject key identifier: 3E:7B:4F:C9:2E:BA:2A:A2:D3:DF:09:11:DB:6F:AA:10:44:4E:3A:A9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195F04F64F754F79EC5477D802101DEC8FF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PntPyS66KqLT3wkR22-qEEROOqk.roa
Signing time: Tue 01 Apr 2025 07:44:49 +0000
ROA not before: Tue 01 Apr 2025 07:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396993
IP address blocks: 151.243.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:4f:64:f7:54:f7:9e:c5:47:7d:80:21:01:de:c8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 1 07:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e7b4fc92eba2aa2d3df0911db6faa10444e3aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:12:72:8e:5f:67:56:42:bf:ae:a7:34:73:
97:b6:98:ef:f4:7d:94:68:d4:79:fe:ed:e7:ef:e3:
94:6a:91:3c:1e:c4:61:fd:44:30:bb:2e:c9:27:9e:
ee:ea:a3:41:05:1a:f2:94:12:87:d9:9d:14:25:ad:
05:56:09:cb:69:99:f3:89:2c:77:48:fd:76:6f:f3:
66:1d:28:53:86:32:1d:11:82:05:25:44:79:7c:c3:
9e:c4:80:11:92:d4:dd:cb:9a:40:4e:22:0b:67:9a:
61:e5:37:b7:8b:ef:e4:b1:c1:12:02:f0:91:d0:a6:
ec:02:2a:97:4b:9c:81:ca:7e:e2:12:ea:b5:6b:ec:
76:2d:e9:1b:f9:8c:72:d4:19:a2:7f:e9:4d:e5:eb:
05:cf:49:15:8d:7f:04:90:06:9a:eb:d6:9b:64:44:
27:c0:5c:5e:ba:39:ec:91:d8:b8:89:59:2f:b5:64:
e8:52:a6:94:92:84:d5:6c:e1:a8:9e:60:b3:a7:9e:
11:c7:46:6e:0b:db:52:b0:d3:ae:e3:06:2c:a0:32:
dc:0a:4d:5b:88:22:5c:7e:34:9d:61:c9:08:b2:30:
c3:11:ba:d1:e1:7b:7d:a8:af:f8:18:fb:8e:70:00:
ef:28:d1:43:e8:b1:0b:3f:48:c3:2f:0f:e3:9b:59:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:4F:C9:2E:BA:2A:A2:D3:DF:09:11:DB:6F:AA:10:44:4E:3A:A9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PntPyS66KqLT3wkR22-qEEROOqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.45.0/24
Signature Algorithm: sha256WithRSAEncryption
33:71:e6:7e:72:0e:d7:e1:ab:76:eb:05:54:5c:9a:35:9d:1a:
96:b7:c4:eb:7d:cc:5f:97:30:c9:cf:f1:9c:27:c8:c0:d3:9a:
66:19:57:ab:21:26:44:0f:d3:71:18:63:a6:85:e6:6c:81:0c:
e0:68:02:de:e0:84:85:5f:69:c9:29:b6:a7:8d:60:35:80:63:
39:c9:76:28:7b:fe:66:db:54:bd:05:25:ce:9b:82:15:b7:6e:
2f:cf:eb:09:ed:75:ea:6b:e7:61:87:8d:eb:10:7d:c2:0f:8d:
c6:f8:e8:bd:6e:c5:22:2d:66:39:bd:f4:7e:76:40:4f:02:14:
d1:78:a8:3c:ff:5b:cd:27:d7:56:b3:8a:40:65:66:d0:46:be:
a5:b1:ef:30:f5:8b:e7:d6:bd:c5:b4:64:84:6f:37:1e:27:7a:
b8:53:65:e6:1f:8f:c8:23:83:e6:ca:92:c7:f0:52:6a:59:d6:
21:5d:c7:e3:47:9b:0f:aa:c4:92:0a:59:8a:f2:4a:31:e3:85:
c0:f3:e7:cc:1a:13:be:c4:c3:91:13:89:be:7b:1c:48:e3:6a:
9f:a8:71:91:55:ad:cc:cd:06:80:c2:c1:ec:a0:b7:de:b2:a0:
29:8b:ef:ff:61:67:1e:c5:22:6f:46:3e:63:be:b0:32:99:4e:
06:7d:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net