Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xSMMmXpxDxx7uA7lvPfhGCG4JGQ.roa
File: xSMMmXpxDxx7uA7lvPfhGCG4JGQ.roa (raw, json)
Hash identifier: aBlsyTA2wECBI7Ve29LVmvgvtYlUe8/SpjbGw6KUul4=
Subject key identifier: C5:23:0C:99:7A:71:0F:1C:7B:B8:0E:E5:BC:F7:E1:18:21:B8:24:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019610725412AC1D72560340E54908B99FA3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xSMMmXpxDxx7uA7lvPfhGCG4JGQ.roa
Signing time: Mon 07 Apr 2025 13:30:50 +0000
ROA not before: Mon 07 Apr 2025 13:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 151.242.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:72:54:12:ac:1d:72:56:03:40:e5:49:08:b9:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 13:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5230c997a710f1c7bb80ee5bcf7e11821b82464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:6d:5d:a6:8e:cc:98:ed:5c:2b:75:8e:90:
d4:db:54:2e:13:e3:98:21:9f:91:2a:22:3c:66:fe:
33:97:24:b2:ef:a4:39:c0:bc:65:2f:f0:1e:03:45:
26:db:11:c7:3e:7b:42:65:ed:b0:37:fd:e5:a1:0b:
ef:15:ff:34:73:67:b3:b9:c3:89:67:41:b3:b3:e9:
b0:09:e8:e7:f3:32:8b:fb:4b:31:4d:e1:e0:dc:d8:
3a:1d:f8:0a:66:8f:b8:61:b6:7b:08:7f:db:c1:81:
08:14:2c:1a:fb:9e:cb:99:80:0c:4f:00:92:9e:ac:
9a:83:e8:fe:21:e9:a9:2e:bb:04:bd:26:c1:23:6b:
a5:27:d8:b7:db:d2:e5:75:11:59:83:20:06:73:30:
2e:81:f8:6d:be:6f:fa:07:30:9b:cf:8e:a5:3d:77:
cd:08:5e:a6:bb:bb:76:e6:e9:d1:a9:68:e0:6a:8c:
db:f1:b3:63:4e:f6:05:4f:f2:f5:f7:3e:a0:ef:fb:
57:8e:71:9a:6c:3a:e3:32:e5:fe:16:81:e6:f1:52:
36:1b:7a:39:9f:fb:c5:19:98:66:20:f4:ca:5e:b9:
1a:6f:f7:5a:5e:b1:5c:a1:8e:cb:b6:cf:56:25:25:
d2:b3:80:f3:8b:2b:bc:12:61:d9:a5:97:1e:f8:bd:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:0C:99:7A:71:0F:1C:7B:B8:0E:E5:BC:F7:E1:18:21:B8:24:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xSMMmXpxDxx7uA7lvPfhGCG4JGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.208.0/23
Signature Algorithm: sha256WithRSAEncryption
29:af:d3:a8:c8:87:cc:00:f2:bb:0e:a2:a0:25:ad:48:fd:bd:
30:55:29:16:3e:0d:42:9c:a2:26:fe:b5:59:53:c2:62:37:b1:
06:fb:6e:c5:3c:53:e2:58:bc:ce:51:f0:3e:c7:68:6b:b7:78:
ae:96:fd:26:3f:10:34:3a:7b:e6:d0:7d:34:f1:da:e9:5b:33:
48:b8:7f:43:83:59:2e:94:3d:83:75:49:e5:33:96:a7:b9:90:
7f:ed:9d:0c:af:8b:86:75:37:84:4a:19:91:b8:ac:14:64:01:
87:37:62:1b:b3:0c:5c:c4:ca:78:65:fd:48:ef:69:5f:34:c7:
e6:93:be:f0:8a:83:77:2f:48:70:b9:05:cf:f2:32:d5:23:5f:
41:40:df:bd:c3:5a:b4:ed:3e:a0:95:a9:07:ab:57:69:ce:06:
08:a7:5e:83:e6:31:1d:38:45:81:f5:d4:f0:36:4b:b5:3d:93:
08:ca:59:e0:7a:7e:16:c1:f8:7b:e3:a0:ff:ad:ad:5d:00:86:
cc:d7:f0:a5:00:23:2d:69:d2:f9:fc:c3:7a:73:7c:f2:4a:29:
9f:01:fe:d0:78:05:a5:64:d2:5e:e8:e0:d4:28:07:c7:08:14:
a5:92:8e:95:2a:05:6d:55:01:b0:ed:e9:9e:0e:2d:67:0b:8c:
6d:ea:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net