Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/viiX66aiYNlao9YKXaEPHqN5tXs.roa
File: viiX66aiYNlao9YKXaEPHqN5tXs.roa (raw, json)
Hash identifier: 7OooGyKo3rhG020B6xc/u8LaKEcAsZ9ANbaKFhAzCME=
Subject key identifier: BE:28:97:EB:A6:A2:60:D9:5A:A3:D6:0A:5D:A1:0F:1E:A3:79:B5:7B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019482AB380C0619D55D7BFCDDEC7984CF91
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/viiX66aiYNlao9YKXaEPHqN5tXs.roa
Signing time: Mon 20 Jan 2025 07:44:06 +0000
ROA not before: Mon 20 Jan 2025 07:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59484
IP address blocks: 87.227.140.0/24 maxlen: 24
151.251.32.0/22 maxlen: 22
151.251.32.0/24 maxlen: 24
151.251.33.0/24 maxlen: 24
151.251.34.0/24 maxlen: 24
151.251.35.0/24 maxlen: 24
151.251.40.0/24 maxlen: 24
151.251.41.0/24 maxlen: 24
151.251.42.0/24 maxlen: 24
151.251.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:ab:38:0c:06:19:d5:5d:7b:fc:dd:ec:79:84:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 20 07:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2897eba6a260d95aa3d60a5da10f1ea379b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:5e:97:71:15:6b:77:75:bc:97:1a:ab:a2:
87:da:b0:5d:9d:2e:2a:ea:60:92:dd:53:c8:26:c1:
1b:20:71:e9:a3:40:d7:d8:20:9f:0c:53:8d:a3:e7:
94:d0:2d:82:3f:7a:4c:5e:bc:8a:60:4a:0c:aa:9c:
49:41:3c:45:05:01:1d:aa:e6:d5:29:3c:c0:6e:df:
3c:8b:09:cb:65:64:3b:db:cf:95:b5:c4:a5:ff:5b:
26:7b:c6:d6:b3:8b:b8:c7:45:c5:5a:be:3c:a8:89:
83:31:d8:31:f3:ab:96:56:9b:e2:c5:a6:65:59:5a:
8f:14:f2:2f:2e:6d:f3:f6:57:50:f6:63:1a:e2:62:
5e:1b:ef:0d:5a:07:6a:45:5d:59:34:55:d2:a2:24:
12:60:8f:e5:ea:bf:a3:6b:9e:c1:dc:83:f8:d9:84:
df:8d:4d:0c:93:0f:84:a4:cb:ff:78:fb:b3:f5:a4:
54:6b:3f:b8:d4:71:0b:6e:5e:0b:c6:fc:69:38:e3:
40:24:d8:0b:17:0c:62:92:f7:c8:78:96:98:66:53:
d1:95:90:1e:03:f5:3c:a1:3d:0e:78:e5:7f:41:1c:
ae:c8:d6:c2:cf:49:07:ca:fa:95:e3:33:03:44:26:
26:99:18:9f:fd:2d:e8:2f:27:fe:69:44:fb:56:20:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:97:EB:A6:A2:60:D9:5A:A3:D6:0A:5D:A1:0F:1E:A3:79:B5:7B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/viiX66aiYNlao9YKXaEPHqN5tXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.140.0/24
151.251.32.0/22
151.251.40.0-151.251.42.255
151.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c9:00:fb:39:7e:db:9f:b6:f4:01:78:81:78:c0:7f:e4:cd:
1d:bd:d5:91:4c:99:2c:fb:8b:ba:11:d5:bc:d9:ce:14:3f:34:
42:da:6c:2a:fc:0d:a1:33:58:a5:61:48:f7:64:83:3e:ac:3a:
6d:24:66:c6:39:15:7b:14:69:31:e0:66:a0:3e:09:d8:bf:41:
af:a0:1f:cf:36:5a:63:ce:f5:02:ba:f7:aa:a2:d8:2d:42:fd:
94:93:d5:62:d7:f0:73:c9:5a:de:3d:40:7a:e0:fc:90:c0:dd:
ab:3f:22:e2:af:c7:85:ea:84:fe:dd:a6:83:7a:29:f0:93:6a:
39:e1:e8:3e:0f:ee:fe:dd:eb:b6:b3:1a:9a:7e:88:18:7c:56:
2f:41:7d:b1:87:3b:12:1f:ec:9d:df:8c:f4:dd:de:dc:4a:2e:
ba:f8:80:4b:61:af:7a:48:cd:1c:ce:cf:8b:cc:ec:30:ae:f7:
3a:a1:71:3a:8d:33:4c:c3:98:09:48:02:09:d7:4e:f1:fa:c9:
a8:42:38:1f:3b:aa:4a:f9:05:02:04:ce:5c:fc:08:42:bd:ab:
bf:60:53:67:ea:9e:7e:36:89:c5:dd:89:0b:ea:61:39:32:97:
09:68:49:86:6c:86:97:e3:51:dc:50:b8:b9:b9:12:17:c6:52:
b3:d2:ff:93
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZSCqzgMBhnVXXv83ex5hM+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTIwMDc0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTI4OTdlYmE2YTI2MGQ5NWFhM2Q2MGE1ZGExMGYxZWEzNzliNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpel3EVa3d1vJcaq6KH2rBdnS4q
6mCS3VPIJsEbIHHpo0DX2CCfDFONo+eU0C2CP3pMXryKYEoMqpxJQTxFBQEdqubV
KTzAbt88iwnLZWQ728+VtcSl/1sme8bWs4u4x0XFWr48qImDMdgx86uWVpvixaZl
WVqPFPIvLm3z9ldQ9mMa4mJeG+8NWgdqRV1ZNFXSoiQSYI/l6r+ja57B3IP42YTf
jU0Mkw+EpMv/ePuz9aRUaz+41HELbl4LxvxpOONAJNgLFwxikvfIeJaYZlPRlZAe
A/U8oT0OeOV/QRyuyNbCz0kHyvqV4zMDRCYmmRif/S3oLyf+aUT7ViCYRQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFL4ol+umomDZWqPWCl2hDx6jebV7MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvdmlpWDY2YWlZTmxhbzlZS1hhRVBIcU41dFhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAV+OMAwQC
l/sgMAwDBAOX+ygDBACX+yoDBACX+zwwDQYJKoZIhvcNAQELBQADggEBAFfJAPs5
ftuftvQBeIF4wH/kzR291ZFMmSz7i7oR1bzZzhQ/NELabCr8DaEzWKVhSPdkgz6s
Om0kZsY5FXsUaTHgZqA+Cdi/Qa+gH882WmPO9QK696qi2C1C/ZST1WLX8HPJWt49
QHrg/JDA3as/IuKvx4XqhP7dpoN6KfCTajnh6D4P7v7d67azGpp+iBh8Vi9BfbGH
OxIf7J3fjPTd3txKLrr4gEthr3pIzRzOz4vM7DCu9zqhcTqNM0zDmAlIAgnXTvH6
yahCOB87qkr5BQIEzlz8CEK9q79gU2fqnn42icXdiQvqYTkylwloSYZshpfjUdxQ
uLm5EhfGUrPS/5M=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:50 2025 by rpki-client