Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/twehDaOgnsjviZ82GMIVc_Zhhls.roa
File: twehDaOgnsjviZ82GMIVc_Zhhls.roa (raw, json)
Hash identifier: S1NTNPUh0aa5pGBAt0/glsjTMwnR6ECkYaOFEyrb7+8=
Subject key identifier: B7:07:A1:0D:A3:A0:9E:C8:EF:89:9F:36:18:C2:15:73:F6:61:86:5B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019613D46AA3995113E164AFB46EB8B96B60
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/twehDaOgnsjviZ82GMIVc_Zhhls.roa
Signing time: Tue 08 Apr 2025 05:16:50 +0000
ROA not before: Tue 08 Apr 2025 05:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 151.243.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:d4:6a:a3:99:51:13:e1:64:af:b4:6e:b8:b9:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 05:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b707a10da3a09ec8ef899f3618c21573f661865b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:91:4c:a7:9c:52:93:fb:43:dc:b2:36:e6:
e8:1c:69:af:73:4e:f2:f8:0c:e9:8a:fd:58:91:77:
92:4f:f5:43:f6:d7:84:f2:a8:4a:ac:28:94:14:d3:
7d:35:bd:64:96:14:a4:d1:ee:27:08:3a:96:20:a4:
77:83:41:e5:e7:b0:1a:06:4f:14:39:0e:4a:a6:af:
7d:08:55:0f:f8:bc:62:7b:89:9c:08:dd:63:87:86:
e6:c4:a0:bc:a0:78:35:e4:9e:81:31:cf:ae:28:12:
21:d0:3b:5c:1f:c6:28:4e:49:31:37:ff:d3:96:97:
4b:65:b5:89:b6:39:bb:47:c6:51:91:73:ce:d8:ac:
fe:b0:00:03:df:c1:04:eb:9a:66:fb:80:95:c0:01:
e1:38:34:5c:b1:5c:d4:27:68:f3:d3:0a:dd:1c:c0:
95:97:bc:29:be:bb:09:91:7b:52:6f:ae:13:5c:da:
6f:7d:4f:a7:eb:8a:82:33:ba:e2:40:87:8a:25:9a:
98:62:a5:48:ae:73:b6:ef:56:55:20:98:54:c3:99:
b8:0e:fd:1d:78:99:0e:ee:39:95:6b:21:c9:c6:ab:
cc:61:f7:01:26:43:cb:2c:0d:9b:2c:cb:bf:cd:06:
fd:96:90:3d:cb:10:ee:72:68:c5:f2:7d:00:91:06:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:A1:0D:A3:A0:9E:C8:EF:89:9F:36:18:C2:15:73:F6:61:86:5B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/twehDaOgnsjviZ82GMIVc_Zhhls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.128.0/22
Signature Algorithm: sha256WithRSAEncryption
00:21:12:90:9b:ef:aa:9a:73:17:1d:01:b0:ff:be:61:56:42:
6e:b4:d6:95:77:8d:bc:5e:87:e2:ee:82:c8:89:96:b8:2c:e5:
9b:20:c2:f6:5d:85:c6:a8:5e:b2:1f:f1:4a:de:b1:e6:0b:b6:
3c:bb:c9:8f:95:6e:5d:1e:c1:05:9a:46:4e:29:f5:53:62:3c:
7c:f3:34:db:ce:c6:eb:a5:d5:3f:1e:7a:2f:a2:25:f4:6d:b7:
ff:6e:ab:0f:12:ce:48:ed:89:1a:3b:8d:ef:25:9a:64:20:82:
e9:13:66:b3:65:39:5f:68:3b:be:db:4a:0b:82:9e:23:69:e6:
a6:08:2e:f5:5f:a4:1f:7a:13:c8:1d:58:c7:fc:b1:22:c8:f3:
74:bb:b2:89:f2:49:09:7d:77:5b:76:cf:cf:ac:18:cd:9e:3c:
93:e2:ca:15:04:ba:41:33:03:fc:a0:b9:08:0b:19:67:45:48:
cb:fa:9a:16:15:de:a5:03:fe:e9:2f:db:40:f2:c6:6a:fc:a0:
aa:79:eb:1c:fe:96:02:44:eb:b5:bd:d4:56:b6:3e:52:13:25:
31:c3:d8:8e:da:99:c0:df:21:f0:3e:ec:84:47:d3:81:cc:2c:
36:9b:f9:46:5a:9b:5e:16:30:62:a7:16:fd:93:db:57:00:5a:
a1:50:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net