Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yqqvEz-WT68oTExJ7duW8r_ji3M.roa
File: yqqvEz-WT68oTExJ7duW8r_ji3M.roa (raw, json)
Hash identifier: j9hfDN97/TnydCgEQY2D9oEIO0z35APVJjfge4CPJM8=
Subject key identifier: CA:AA:AF:13:3F:96:4F:AF:28:4C:4C:49:ED:DB:96:F2:BF:E3:8B:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01960E9AD410EDB285C78395F42996F6018B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yqqvEz-WT68oTExJ7duW8r_ji3M.roa
Signing time: Mon 07 Apr 2025 04:55:49 +0000
ROA not before: Mon 07 Apr 2025 04:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 151.242.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9a:d4:10:ed:b2:85:c7:83:95:f4:29:96:f6:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 04:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caaaaf133f964faf284c4c49eddb96f2bfe38b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:a9:a6:88:7d:70:0b:41:32:b6:09:a2:4c:
77:d1:d8:89:c4:a7:16:0b:69:b9:2b:22:2b:7e:3f:
ae:2c:bc:86:39:58:57:a0:4d:13:72:f0:16:c9:6b:
27:07:a4:64:c2:fd:40:eb:80:c3:a7:7f:13:6d:05:
53:62:16:e1:fc:89:ee:f1:3d:92:59:54:f4:e8:84:
97:34:c0:ed:9f:03:bd:30:b0:3f:af:77:86:04:97:
39:dd:01:b2:fc:0f:e3:11:cc:b4:d7:f6:d4:2e:eb:
09:99:b0:f1:08:b6:9b:11:87:cd:9f:d6:23:ea:62:
50:42:03:9a:62:cc:b1:a0:07:a3:bb:c3:e2:ea:ae:
a6:ae:60:e5:39:55:a4:f1:f0:32:ad:19:62:4e:d0:
26:3d:f9:b8:97:93:c0:3b:b4:da:da:f6:b1:5c:ec:
43:a5:c9:d8:31:bb:4c:35:0b:53:b0:c2:d0:4c:be:
50:ff:fa:61:72:f8:b7:de:bf:79:d0:a8:32:68:2d:
59:02:00:e0:8a:8e:7d:d0:d8:c0:fb:3e:77:a5:24:
2e:e3:f1:24:68:66:5f:cc:90:e1:00:7f:3d:11:1f:
7d:8d:ba:23:23:b6:d3:8e:73:74:52:f0:94:c2:8d:
d5:9b:ab:cd:16:9c:9e:98:8f:a1:52:49:40:d8:39:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:AF:13:3F:96:4F:AF:28:4C:4C:49:ED:DB:96:F2:BF:E3:8B:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yqqvEz-WT68oTExJ7duW8r_ji3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.63.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9c:6e:d1:87:8a:63:2d:8b:43:f0:c4:bd:0c:ca:1d:15:84:
92:a3:8d:82:42:40:ac:2f:6f:dd:a6:be:4e:f0:f8:64:ff:fa:
3e:c3:8f:8b:fe:ba:4c:f3:97:24:16:38:69:c3:d0:f9:db:df:
bc:8f:d3:f2:2f:61:e1:e1:de:b0:2e:a5:aa:de:51:da:f8:ff:
0f:84:8a:5b:78:e4:05:27:42:ce:ce:05:4f:68:7b:e0:b6:27:
19:76:1c:3e:dd:b8:6b:6d:19:11:b7:39:99:61:6d:8d:fc:f7:
98:23:44:da:68:3f:f6:76:67:bc:a7:fc:26:b2:2d:d7:1f:ef:
2d:29:62:b4:36:11:c1:fc:63:96:80:06:76:ce:2b:32:e0:06:
6f:54:3e:80:88:0e:95:37:80:80:e7:8d:d7:de:fd:5a:61:64:
86:96:fb:62:67:5a:37:4e:ef:ff:ad:eb:5f:e4:bb:77:65:8a:
26:8f:f3:72:7f:4e:73:97:eb:54:1f:d1:ea:bd:12:58:42:3c:
16:7e:9d:5d:7a:42:8a:a8:23:82:d8:9b:82:14:3b:50:b3:de:
d8:1a:fb:80:68:1d:88:21:a4:6c:f2:4d:b0:92:e1:bc:52:f2:
5f:f6:d1:ab:8e:75:4e:6f:7e:05:06:18:e8:cf:36:bf:f7:7b:
09:82:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net