Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_4Y2-TDHvWPC9djJUAWgMWYfeDo.roa
File: _4Y2-TDHvWPC9djJUAWgMWYfeDo.roa (raw, json)
Hash identifier: hnUUL+uba3xcj7X9r1DnDat8Z+jbXCMwdDBjZf9nZIQ=
Subject key identifier: FF:86:36:F9:30:C7:BD:63:C2:F5:D8:C9:50:05:A0:31:66:1F:78:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019613CFD5B7409C44F13E48F558ACAB5582
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_4Y2-TDHvWPC9djJUAWgMWYfeDo.roa
Signing time: Tue 08 Apr 2025 05:11:49 +0000
ROA not before: Tue 08 Apr 2025 05:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:cf:d5:b7:40:9c:44:f1:3e:48:f5:58:ac:ab:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 05:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff8636f930c7bd63c2f5d8c95005a031661f783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:5d:ea:9c:0c:75:82:e2:d9:33:8a:1b:24:
9b:26:79:9a:18:e4:c1:2c:8a:9b:0c:2a:57:dc:82:
ba:89:e7:3a:73:21:42:f0:75:6f:b8:77:25:13:9a:
7c:d8:9d:4d:a5:a6:5d:03:08:cb:b9:95:df:60:14:
1d:e8:10:4b:09:e9:18:70:c3:d5:cc:f9:dd:1a:e2:
64:fb:1a:19:0c:8c:71:b3:35:cd:ce:6b:bc:ac:9a:
6a:84:bf:dd:92:de:c6:ad:67:36:83:17:0b:9f:2d:
e5:7a:08:68:09:77:51:f5:63:c0:bc:05:c6:54:c2:
38:a0:7e:89:76:27:6a:40:dd:30:a2:de:28:11:33:
a3:3e:55:a8:de:14:da:25:66:01:61:89:0b:9c:02:
18:6b:78:f3:4c:dc:74:10:03:cf:bd:1e:41:7a:a4:
0b:38:d3:ec:4f:66:af:10:bc:c2:71:d1:48:36:5e:
bd:a3:c4:d1:6b:ba:77:79:05:05:8a:7e:58:98:d4:
6e:30:50:fd:15:b9:9d:7a:57:0b:7e:82:96:e2:b2:
b0:3f:ff:8c:55:e8:66:c1:2a:3a:09:12:11:d4:39:
18:cf:d2:15:c2:86:c1:d2:8e:c7:d2:30:62:47:49:
2c:4f:ce:4c:32:0b:a6:3e:ee:c6:ac:75:81:28:af:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:36:F9:30:C7:BD:63:C2:F5:D8:C9:50:05:A0:31:66:1F:78:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_4Y2-TDHvWPC9djJUAWgMWYfeDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f3:85:80:ae:03:3f:34:8f:27:53:15:3c:d3:4c:3c:0f:4a:
d0:d3:4a:46:38:d1:03:32:31:a1:59:b5:70:74:b2:65:57:5a:
43:91:3d:03:ad:62:db:54:90:e9:42:cb:43:29:db:bb:3a:01:
f3:80:44:93:9a:d4:2b:f9:78:aa:c1:13:fa:90:fb:2e:e7:3c:
b1:a9:df:3f:5b:3e:d3:a9:51:36:ba:1c:57:a9:1b:1d:ba:96:
a4:65:71:68:db:b9:11:72:2e:b8:b7:ab:a3:fa:85:85:ce:57:
4c:6a:2b:e2:b2:d2:e9:af:66:2a:dc:e1:fc:7c:dd:52:a7:5b:
ba:6e:1d:55:54:46:87:71:01:c0:f3:d7:be:eb:ce:d2:da:94:
00:ab:8f:11:91:28:55:dd:70:ce:4b:ec:a3:cc:80:79:26:00:
db:b5:25:5e:3b:d0:fa:26:a3:19:34:bc:6e:67:1a:0f:07:7d:
1a:a3:9d:de:ac:6c:99:82:db:8f:58:17:26:37:c7:64:a4:bc:
ed:83:2e:8b:1c:05:5c:36:5b:84:fa:a7:9c:37:cc:51:20:8c:
8c:db:7a:06:e1:33:86:84:c9:2f:d7:6a:dc:32:79:71:3a:ad:
d2:8e:16:7d:5c:97:2c:3d:0e:4d:b9:84:bf:ff:cb:86:b3:91:
e7:6f:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net