Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UJFIZc6sUFnyS6J8oDN2FBMKGEE.roa
File: UJFIZc6sUFnyS6J8oDN2FBMKGEE.roa (raw, json)
Hash identifier: LUpVU4xweU3q1d9HaOfYQJmFCsd57URCAy9MG7r0tT0=
Subject key identifier: 50:91:48:65:CE:AC:50:59:F2:4B:A2:7C:A0:33:76:14:13:0A:18:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01962645F160479642E2433CCE9263FE4350
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UJFIZc6sUFnyS6J8oDN2FBMKGEE.roa
Signing time: Fri 11 Apr 2025 19:14:00 +0000
ROA not before: Fri 11 Apr 2025 19:14:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206735
IP address blocks: 151.242.22.0/24 maxlen: 24
151.243.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:45:f1:60:47:96:42:e2:43:3c:ce:92:63:fe:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 19:14:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50914865ceac5059f24ba27ca0337614130a1841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:75:7d:5c:fe:e1:53:74:05:b1:c3:ab:e9:
b7:bb:fc:24:a6:e7:fc:a7:76:94:51:16:ed:85:af:
cb:eb:f5:d2:dc:20:a3:0c:61:cb:fd:b5:1d:de:46:
0a:63:8d:0c:ac:0d:a1:ef:42:ba:f4:0a:64:b0:32:
2f:7f:53:3f:ba:4e:a7:87:78:55:6f:15:7c:df:6d:
d0:d4:88:56:c8:b4:a5:5d:73:eb:7b:d7:4b:0c:7b:
28:bd:d2:e7:a0:6c:9d:1f:1b:25:f7:7c:4d:2c:27:
bf:0f:26:c4:af:4b:bf:48:3b:38:15:86:61:78:15:
bb:4f:40:b7:3d:76:b6:45:9c:8a:d1:8b:20:37:2e:
98:42:23:73:6a:d4:4b:38:d0:f6:ee:f8:89:3b:59:
bd:b6:b5:f4:d8:43:cf:10:9f:89:38:40:83:21:fa:
ec:e0:62:19:1c:88:71:88:ee:7f:8b:b8:37:3b:b8:
46:0c:e6:4f:2e:c5:d1:9e:8b:bd:bb:94:6f:2f:53:
84:6d:df:a3:06:9f:52:ee:e7:44:61:44:5f:c8:72:
ee:c4:fc:fe:12:5e:20:f5:38:29:15:f5:70:15:e3:
61:40:04:d8:9b:78:d5:97:84:e4:65:ac:70:2a:b4:
d3:e5:4f:58:bd:e1:87:1d:96:e4:c9:6a:4f:a3:6b:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:48:65:CE:AC:50:59:F2:4B:A2:7C:A0:33:76:14:13:0A:18:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UJFIZc6sUFnyS6J8oDN2FBMKGEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.22.0/24
151.243.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:66:26:40:dd:4b:20:16:e3:65:04:b1:24:e9:e0:43:79:aa:
c0:7e:83:04:dc:c5:44:4c:c9:73:e9:ba:ea:27:ca:ba:a6:75:
f5:ba:97:75:7b:9e:c5:ae:06:33:f3:cc:68:fc:2d:c5:08:e4:
30:54:6e:a7:a4:51:b4:12:3b:6c:76:55:3b:eb:c0:5e:bc:d3:
8b:d2:8d:ef:55:29:ba:56:a3:25:bb:77:86:f8:4d:d0:c2:85:
a8:61:a5:6b:5c:51:27:fd:2a:a5:c8:0d:e9:1f:c2:53:f5:10:
82:35:01:9c:0c:d8:1f:d5:d3:b0:00:7a:3d:70:8c:91:f4:60:
34:06:19:b0:06:07:1d:d2:14:59:4a:4e:a4:2a:bd:b8:c4:7e:
37:d7:f1:1e:9b:61:6c:9d:7b:b2:ed:b5:87:b3:08:b3:1a:2e:
e4:2f:9d:d0:97:5c:74:d8:46:21:79:36:8c:da:30:6e:7e:f1:
f0:e4:d0:e7:85:98:70:49:5e:22:42:9a:b1:3f:76:7c:4c:88:
72:0d:0b:cc:90:26:ed:27:36:3c:3b:f9:d7:7c:b1:36:8b:fd:
da:7f:9e:27:a5:9e:98:0d:95:d3:4c:eb:2a:27:5e:ba:6b:7c:
fb:e8:02:2a:34:65:33:b8:02:6e:de:aa:bf:c2:f4:c5:18:13:
cd:78:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net