Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZWQ4X0M6xzG3T94yiXvpTKQq1jE.roa
File: ZWQ4X0M6xzG3T94yiXvpTKQq1jE.roa (raw, json)
Hash identifier: DH/ijir0ne9pEH0AnTMF8XBSOMVcGRF18P9fwxeySRM=
Subject key identifier: 65:64:38:5F:43:3A:C7:31:B7:4F:DE:32:89:7B:E9:4C:A4:2A:D6:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194FA225A5BF620FE55092402BB12FC68FD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZWQ4X0M6xzG3T94yiXvpTKQq1jE.roa
Signing time: Wed 12 Feb 2025 12:29:02 +0000
ROA not before: Wed 12 Feb 2025 12:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213548
IP address blocks: 151.242.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:22:5a:5b:f6:20:fe:55:09:24:02:bb:12:fc:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 12 12:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6564385f433ac731b74fde32897be94ca42ad631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:02:ef:02:bc:b4:3f:c1:89:17:51:37:a9:
2c:cd:a9:b6:93:69:9e:38:dc:6c:37:80:f3:9e:ad:
9c:ed:2d:94:b7:08:7f:47:29:e2:40:f5:b6:ea:af:
cc:81:a2:09:fd:f1:a1:fd:88:f9:ac:f7:37:6c:1a:
76:57:b1:57:a7:f1:4d:01:6a:4b:4a:4c:f0:0a:bc:
fb:00:7f:61:58:06:79:74:6b:fd:0a:22:b5:82:43:
ca:c8:b2:50:64:25:7e:ed:43:77:3a:75:05:ae:1b:
a1:7a:f5:59:39:68:85:4c:07:e4:77:27:3f:d6:e6:
82:2a:f2:7b:8c:86:53:55:8a:77:90:a4:fe:5c:0b:
65:74:15:c5:a6:be:78:00:21:48:f8:fc:f6:73:fb:
d9:ad:21:e5:28:ce:63:55:14:a2:f9:5a:e6:54:5d:
ab:a0:99:fb:54:b6:17:88:0f:61:19:1c:1f:25:78:
1b:7f:b4:79:47:bb:50:d4:ab:bc:36:ea:f4:b9:ba:
5b:d2:10:ef:ec:c5:cc:4c:b1:5f:ee:0b:af:36:a2:
b6:f7:5c:47:37:02:c0:dd:2d:38:81:bc:ee:71:34:
b7:f1:d8:0e:d8:05:49:8a:65:93:f4:d6:c5:e5:30:
db:82:c2:97:e8:e5:eb:4e:63:e6:c5:b9:d8:ce:c8:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:38:5F:43:3A:C7:31:B7:4F:DE:32:89:7B:E9:4C:A4:2A:D6:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZWQ4X0M6xzG3T94yiXvpTKQq1jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.255.0/24
Signature Algorithm: sha256WithRSAEncryption
53:23:72:97:08:9e:ab:08:65:b1:61:02:d3:f3:00:81:f9:b9:
f9:36:65:b8:e2:2e:71:8c:90:da:64:e1:df:0d:17:28:7c:ad:
06:cd:05:cc:18:53:fc:f5:d6:6d:32:cc:d6:52:72:03:40:17:
9b:d1:e7:d0:24:a5:27:00:c4:1e:a5:97:36:20:c1:19:c0:27:
d0:e8:43:93:b3:78:3d:5b:b6:79:a9:82:e4:49:54:8e:2d:63:
db:cb:1f:ce:61:3e:d8:c8:e2:e4:2c:c4:7c:67:73:ee:79:97:
8b:6b:bd:0c:32:d6:8c:d8:ad:d9:9a:65:b7:ba:0f:a7:39:12:
b6:c0:54:e6:a6:23:d8:c2:f3:df:c0:19:b3:86:41:1d:47:15:
59:72:13:72:59:ff:58:bf:87:fb:67:bb:8c:18:68:c4:b9:6a:
12:72:e6:76:06:39:88:25:f1:a2:cf:c3:96:a9:25:2f:90:7b:
de:27:75:75:31:9b:6a:13:75:19:ed:4a:27:fd:cd:d5:ac:f2:
d4:8c:c0:87:44:c6:d1:9b:9f:89:8e:39:5a:7b:53:9e:5f:94:
67:b6:4f:0a:db:ca:e0:01:8e:4a:7c:38:c7:1a:54:51:b2:8c:
fd:28:42:6e:5e:25:a2:aa:a2:c7:97:e2:b2:c2:aa:b6:cd:3b:
87:3e:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net