Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oKliMIyGMcw8AbkA6Vl-hk0Heoo.roa
File: oKliMIyGMcw8AbkA6Vl-hk0Heoo.roa (raw, json)
Hash identifier: FejDXUGMGLhcXWi9F1AW3JKWrTmvw61h+AGDzSXz30g=
Subject key identifier: A0:A9:62:30:8C:86:31:CC:3C:01:B9:00:E9:59:7E:86:4D:07:7A:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019615777463B3A275DB3E716C81973D8AD6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oKliMIyGMcw8AbkA6Vl-hk0Heoo.roa
Signing time: Tue 08 Apr 2025 12:54:32 +0000
ROA not before: Tue 08 Apr 2025 12:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 151.240.180.0/22 maxlen: 24
151.240.184.0/22 maxlen: 24
151.240.188.0/22 maxlen: 24
151.240.192.0/22 maxlen: 24
151.240.196.0/22 maxlen: 24
151.240.200.0/22 maxlen: 24
151.241.52.0/22 maxlen: 24
151.241.56.0/22 maxlen: 24
151.241.60.0/22 maxlen: 24
151.241.180.0/22 maxlen: 24
151.241.184.0/22 maxlen: 24
151.241.188.0/22 maxlen: 24
151.241.192.0/22 maxlen: 24
151.241.196.0/22 maxlen: 24
151.241.200.0/22 maxlen: 24
151.244.80.0/22 maxlen: 24
151.244.204.0/22 maxlen: 24
151.244.208.0/22 maxlen: 24
151.245.80.0/22 maxlen: 24
151.245.204.0/22 maxlen: 24
151.245.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:77:74:63:b3:a2:75:db:3e:71:6c:81:97:3d:8a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 12:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a962308c8631cc3c01b900e9597e864d077a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:20:b2:3f:c4:79:bd:62:33:84:8e:f4:1c:
e0:40:45:5e:56:51:75:11:e3:70:9a:5a:fc:fb:c4:
95:3e:cf:87:e7:f1:2f:67:b0:9a:19:c0:eb:7c:11:
83:25:47:b5:94:a1:64:a6:ac:cf:c4:0b:cc:dc:1a:
a9:0e:02:00:51:6d:b1:e3:7b:61:6e:f3:a2:35:47:
2c:3d:5f:f7:e7:40:6d:20:46:fe:85:60:b6:62:4d:
b3:86:34:88:ea:47:b3:11:aa:4f:af:51:c4:c5:b8:
14:0c:3e:14:04:37:bf:b0:1b:8d:03:a2:5a:c0:eb:
4f:ea:68:15:98:5d:9f:4c:33:f8:f9:87:2b:ea:c8:
b1:5b:38:eb:0d:eb:c3:17:63:78:b7:3c:a6:64:64:
41:48:c7:ab:a5:f5:3c:6c:0d:59:84:94:c7:af:b0:
a2:88:44:fb:57:f2:c3:0d:a0:d1:35:41:40:5e:cb:
1e:a6:d8:5c:d9:75:97:a0:97:be:ec:2c:cb:8e:4c:
97:1a:0f:7b:d4:a6:6e:9c:bc:9c:ea:df:6a:8a:47:
a0:6f:0a:e2:fe:59:d1:ac:b6:d4:94:2a:bf:e7:3b:
2e:83:3c:ca:5e:b2:1b:0e:65:72:3a:5d:48:e7:2b:
5a:de:bd:65:28:90:28:d8:05:06:3a:b1:98:1e:bf:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:62:30:8C:86:31:CC:3C:01:B9:00:E9:59:7E:86:4D:07:7A:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oKliMIyGMcw8AbkA6Vl-hk0Heoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.180.0-151.240.203.255
151.241.52.0-151.241.63.255
151.241.180.0-151.241.203.255
151.244.80.0/22
151.244.204.0-151.244.211.255
151.245.80.0/22
151.245.204.0-151.245.211.255
Signature Algorithm: sha256WithRSAEncryption
32:c5:16:c5:99:7d:a6:e6:de:88:fb:0f:e0:e2:2a:ed:a3:91:
aa:b8:41:69:71:1e:74:f6:de:ea:cb:01:75:fe:26:46:57:b5:
27:97:35:fb:26:c9:31:d4:a6:fd:90:38:a7:63:69:6f:99:8e:
0f:3f:f3:9c:e2:22:ad:a7:91:b2:55:96:49:03:66:bb:d3:53:
b2:b1:d4:85:51:3d:33:9c:08:13:7d:03:a6:dc:7d:98:a2:2a:
db:54:7e:fd:74:c3:79:59:a3:36:66:40:e4:13:59:ac:89:e2:
02:50:fd:ba:94:3a:e5:77:0f:68:7f:2c:2d:3f:fc:9b:69:03:
86:20:4b:b2:45:f1:02:9f:65:c9:14:40:fd:4b:70:85:94:fc:
d0:64:a3:ac:5d:7e:93:ad:30:58:88:36:98:2d:83:76:df:a1:
cc:3d:95:d9:6c:3d:00:ad:44:a2:23:61:e3:7b:67:2a:52:7b:
6c:8d:b7:97:5c:54:c8:ec:c4:0a:f3:5f:b3:8d:ed:87:85:12:
4b:1d:a5:17:cf:cc:20:c9:36:d0:03:54:96:95:21:2c:ae:a6:
5d:59:a6:bd:41:be:e5:cf:13:e9:a8:df:d2:bd:ae:6c:c9:9b:
3a:01:c8:5d:52:db:71:1d:df:a5:df:bc:c4:26:e5:b2:34:27:
ed:a6:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net