Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bR75EUelMe9I3HyuS_Zmef1R1m0.roa
File: bR75EUelMe9I3HyuS_Zmef1R1m0.roa (raw, json)
Hash identifier: IfzBv9JAPNQJddoKV4VP3dKcHFrxSmsq99wL89dnOAA=
Subject key identifier: 6D:1E:F9:11:47:A5:31:EF:48:DC:7C:AE:4B:F6:66:79:FD:51:D6:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196210BEEACDB697F6602A9FEC4F0370464
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bR75EUelMe9I3HyuS_Zmef1R1m0.roa
Signing time: Thu 10 Apr 2025 18:52:31 +0000
ROA not before: Thu 10 Apr 2025 18:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 151.243.12.0/24 maxlen: 24
151.243.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:0b:ee:ac:db:69:7f:66:02:a9:fe:c4:f0:37:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 18:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d1ef91147a531ef48dc7cae4bf66679fd51d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:d0:cd:cc:d0:d5:cf:68:2b:17:c1:11:0c:
8c:53:36:29:47:0a:fe:44:88:64:8a:93:e6:17:b5:
22:26:ff:49:c1:60:f6:77:af:5d:11:2a:0f:ad:a9:
81:d9:73:1b:fc:ef:c9:88:21:25:5b:f8:9f:66:5c:
77:9f:bf:11:56:92:02:d1:16:6c:ad:b7:ee:ec:a1:
4f:c1:dd:48:c3:ad:df:7b:1f:08:cc:0a:81:4c:79:
c5:40:b6:eb:cd:a1:2d:c2:bc:3d:34:0f:84:18:81:
02:20:51:d9:63:3a:00:f8:e4:be:33:4b:3f:9c:9c:
ba:e5:6d:d0:5f:cf:a3:b5:1c:98:82:8a:b2:18:b5:
89:7b:c6:14:d0:b3:81:f1:0d:30:9c:69:94:05:55:
7f:2a:ac:4b:d3:62:98:9f:f3:1e:32:eb:6c:dc:99:
30:17:53:cd:1a:06:d4:97:07:6a:07:5c:c5:e8:3e:
8e:e2:3d:55:42:93:da:39:f9:dc:da:4a:a3:f9:07:
45:d0:c3:a0:74:e7:f4:ee:ff:b9:b3:44:01:69:b7:
41:3e:ff:28:0d:58:ae:8d:93:ab:09:76:c1:38:ec:
61:e4:f1:8f:38:75:7a:be:bd:1b:00:48:39:49:7d:
f7:59:4c:11:cc:27:b9:9d:7d:b2:d2:56:7d:83:c2:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:F9:11:47:A5:31:EF:48:DC:7C:AE:4B:F6:66:79:FD:51:D6:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bR75EUelMe9I3HyuS_Zmef1R1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.12.0/24
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b9:74:32:55:a4:69:30:a1:6f:36:89:a3:ea:ef:b9:81:db:
02:08:32:73:fb:f7:13:de:ae:2f:e1:23:06:8e:b5:0a:d6:5c:
50:bb:3e:42:67:ca:ba:d3:dd:d1:15:a8:a7:73:2c:b7:d4:31:
e5:fb:e4:ed:22:3a:07:a4:df:db:c3:81:a4:97:b4:00:72:6f:
4d:6a:fe:23:d9:b8:58:2d:61:2b:40:09:e7:3c:49:f9:7e:0d:
94:98:39:1b:8b:79:11:14:1b:d7:98:73:4a:6d:99:64:d4:fe:
43:19:91:0e:e7:70:05:40:c0:6f:65:2a:4f:2c:0b:d6:8f:ef:
fc:06:68:f1:84:47:49:52:7e:f5:dd:51:9b:27:bf:ae:d8:3b:
aa:23:03:dc:18:a8:0d:97:27:7f:df:60:6d:31:92:09:6f:2c:
67:7a:74:98:20:db:02:74:3b:e8:1b:ab:80:e8:ff:25:7c:58:
fd:59:fc:6a:9d:67:9b:95:8c:3c:a9:93:e0:14:40:08:a5:7c:
84:f5:ef:d9:06:0f:75:2e:6b:f2:f5:33:a0:53:2c:66:62:d8:
e8:ed:4a:39:27:86:ce:4c:b8:13:bd:f1:55:1e:9d:4e:b1:6d:
f5:ee:1b:9b:17:5a:e5:52:c6:c9:69:5b:f7:3d:4f:29:eb:28:
37:4f:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net