Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_DVKW9cW_YvL8VFLbYqSiiBQFc.roa
File: s_DVKW9cW_YvL8VFLbYqSiiBQFc.roa (raw, json)
Hash identifier: 2h6KCALpHw/hpvY12v18tbIqm8qKGSwkF78eGmksuB0=
Subject key identifier: B3:F0:D5:29:6F:5C:5B:F6:2F:2F:C5:45:2D:B6:2A:4A:28:81:40:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196007E28B6C93C5782B082514BD4114C8F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_DVKW9cW_YvL8VFLbYqSiiBQFc.roa
Signing time: Fri 04 Apr 2025 11:09:50 +0000
ROA not before: Fri 04 Apr 2025 11:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.144.0/23 maxlen: 23
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:7e:28:b6:c9:3c:57:82:b0:82:51:4b:d4:11:4c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 4 11:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f0d5296f5c5bf62f2fc5452db62a4a28814057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:5b:99:c4:52:ec:1a:72:7b:42:fc:77:d1:
fa:b0:92:2e:f1:26:52:7a:f4:dd:83:c4:f4:45:3f:
18:71:68:98:b1:58:49:e9:47:64:37:01:4a:7a:5f:
4e:86:de:cd:13:d8:66:a7:5a:ba:4e:16:a1:ed:0b:
ae:7e:23:b3:55:ca:87:c4:ea:bd:02:cf:3f:ec:64:
6b:57:dd:9c:ef:39:09:03:99:ef:40:60:f8:af:03:
40:17:ec:60:02:f3:22:8d:63:72:a0:72:02:af:d2:
bd:d4:e0:b9:4b:1f:e5:98:59:f8:ba:08:62:03:59:
19:6c:50:c2:c9:a2:7b:9e:41:f3:b7:7a:33:19:b7:
17:e3:4a:69:a2:94:16:63:42:03:d5:f7:c9:93:7d:
4e:7c:eb:bd:bf:ae:d9:ee:84:ba:3b:24:74:4b:4f:
b8:c5:16:0b:4a:39:09:77:4a:50:44:c6:98:58:db:
6a:ec:71:50:95:6e:54:6e:99:70:e7:5e:44:9d:f9:
a6:19:fc:f3:a7:a3:66:d5:45:3f:e7:f7:a4:bd:4a:
55:72:57:28:0b:c2:c9:e8:58:46:8b:2b:d8:71:d0:
e7:96:01:b7:36:48:af:73:82:29:f2:e8:bd:54:d9:
30:8a:f6:e5:e6:de:63:8a:c9:cd:bf:41:d8:ca:22:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:D5:29:6F:5C:5B:F6:2F:2F:C5:45:2D:B6:2A:4A:28:81:40:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_DVKW9cW_YvL8VFLbYqSiiBQFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.242.45.0/24
151.242.57.0/24
151.242.144.0/23
151.242.200.0/21
151.243.105.0/24
151.243.159.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ce:68:3c:13:09:01:22:53:00:48:89:c0:d1:1f:4d:07:91:
a7:57:f9:1f:83:1a:39:db:cc:59:d7:79:9f:f0:ff:a0:49:17:
30:b0:f4:2f:1b:f9:ef:da:7c:46:29:77:ef:d2:37:f4:b5:9e:
d3:34:ad:68:58:e2:09:84:4d:3e:99:11:b0:0e:2c:9b:3e:4b:
4d:7f:d0:a1:d9:1f:cc:ed:29:70:d5:15:fa:00:25:4a:bf:83:
b1:4f:9b:af:58:be:86:f3:92:c9:d4:fb:1e:46:f2:96:c5:ee:
a4:35:fa:4b:00:34:43:95:f6:2d:f0:96:86:b5:e3:07:6a:8a:
50:86:f7:00:c6:ff:78:7f:71:63:95:95:02:ce:7f:8d:e6:08:
9d:b4:3a:0d:0f:0a:e4:38:34:80:8c:cc:1d:5b:c7:cb:f9:e4:
be:bf:a5:44:29:a8:a2:0d:fc:56:98:f4:fd:3d:cd:9d:7a:3a:
bb:02:47:db:81:75:2f:b2:bc:90:6a:61:e7:76:35:43:3b:6b:
02:87:7d:e7:cc:6c:66:44:7a:2a:e0:9a:45:53:ca:bc:7b:16:
66:1f:78:27:30:be:75:6f:70:f4:84:bb:04:ad:af:34:f7:6a:
79:50:b9:a5:bb:a2:5d:ef:1a:7e:90:ab:7a:de:7a:1c:b8:55:
30:53:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net