Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j1NEmfIW6NaNdvsjHYQcilZ7AOc.roa
File: j1NEmfIW6NaNdvsjHYQcilZ7AOc.roa (raw, json)
Hash identifier: 39kYe7B9O6v18HrU1oP3eGPwcvqxoWd1UtzlVm4j9Dw=
Subject key identifier: 8F:53:44:99:F2:16:E8:D6:8D:76:FB:23:1D:84:1C:8A:56:7B:00:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019604F5A6AB086E46285A4A9B68373DCFAC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j1NEmfIW6NaNdvsjHYQcilZ7AOc.roa
Signing time: Sat 05 Apr 2025 07:58:49 +0000
ROA not before: Sat 05 Apr 2025 07:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212504
IP address blocks: 151.243.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:f5:a6:ab:08:6e:46:28:5a:4a:9b:68:37:3d:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 5 07:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f534499f216e8d68d76fb231d841c8a567b00e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:38:be:07:c3:fd:46:77:ac:9e:44:4b:8b:
2e:87:81:7f:c7:6d:28:99:b9:d6:29:47:38:b6:a1:
80:a3:f7:9d:75:85:cd:6a:69:cd:22:a7:f2:cc:0b:
ae:c2:af:38:ec:99:dc:7e:2c:6c:af:ac:2e:de:82:
63:1c:eb:4d:69:c4:34:7c:5c:68:89:1b:1e:44:ac:
72:ec:8a:9b:90:ee:38:13:72:71:80:82:87:4a:9b:
7b:3d:33:44:28:a2:de:55:1c:a9:07:c3:7f:46:1d:
da:21:05:63:ef:00:35:0e:f4:30:81:a6:84:9f:17:
8b:ba:5c:2c:30:11:56:00:ce:cc:57:f4:78:b5:f2:
2c:65:e4:d8:6f:1b:38:17:83:c1:f6:45:ec:df:ae:
5b:23:b6:eb:e1:2e:45:7a:90:1b:5d:25:39:d9:c0:
ca:85:eb:69:bb:3f:51:17:6a:33:af:0c:32:9f:0c:
e1:c3:ad:50:9c:72:5d:46:0b:b3:fc:a1:b2:05:30:
64:20:d9:48:de:ec:c9:c4:7b:39:ef:1b:60:57:a4:
79:9c:91:8f:5b:76:d0:f3:9f:4f:a6:d1:44:c7:4c:
0c:e3:fc:3f:59:c3:40:1b:8f:a0:98:37:6e:b9:a9:
7f:01:a6:97:8b:21:df:40:38:ea:19:a0:3a:ce:4d:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:44:99:F2:16:E8:D6:8D:76:FB:23:1D:84:1C:8A:56:7B:00:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j1NEmfIW6NaNdvsjHYQcilZ7AOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.184.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4b:dc:c6:88:15:e7:9e:c9:a7:81:a9:60:ac:21:1b:3b:d0:
34:29:2f:a2:9c:5e:f9:a7:c8:c2:82:ae:ee:6f:d3:0a:c6:02:
44:89:f4:94:6b:fe:6a:60:34:d3:5e:09:28:fa:9c:93:41:de:
6e:ff:1f:3b:f4:3d:a9:05:eb:05:76:20:39:92:ef:4e:d4:33:
f0:cb:bc:98:59:af:00:4c:99:0c:5f:72:ad:cc:17:a6:87:c8:
5d:50:37:0d:d5:8e:33:3b:4a:8b:f5:5d:2b:50:32:b9:48:28:
fd:fe:bf:b9:aa:8d:f2:e1:f2:1d:d7:d4:5d:3c:52:7e:b9:d2:
6c:8b:d9:4b:a3:3c:60:4b:ea:9c:c6:69:22:6c:92:3d:37:02:
d1:87:d7:47:dc:d0:ca:a0:65:6a:cd:de:f2:47:72:4f:f1:c6:
b7:cb:3c:07:97:0b:bb:d6:be:dd:79:9d:fa:1b:13:84:22:e5:
fc:11:5e:c7:e6:13:40:ff:7d:dd:33:e9:61:4e:71:b5:0d:2a:
eb:cd:b9:e8:e2:ff:0e:c9:9c:d8:47:dd:a4:72:44:51:64:44:
cd:c1:41:4b:b2:1f:24:a2:54:f9:36:b8:b6:10:c5:b8:aa:df:
fc:8c:8e:86:e7:bc:f1:78:ac:5c:75:97:09:57:21:05:da:fe:
47:3d:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net