Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa
File: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (raw, json)
Hash identifier: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=
Subject key identifier: CB:D0:E1:08:23:84:F0:13:23:6E:AC:B9:CC:B8:BB:15:6D:F1:CB:93
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01942068001E3F37716A913E3D02FA865FF9
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:1e:3f:37:71:6a:91:3e:3d:02:fa:86:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd0e1082384f013236eacb9ccb8bb156df1cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:c5:ca:d1:44:93:51:81:da:8d:40:72:d0:
68:b2:af:7b:09:47:13:d3:f1:52:15:d3:68:ed:9d:
92:ed:da:c7:7e:a0:96:9d:c6:07:64:a9:7b:9c:d4:
bb:4f:61:e1:d8:57:1c:9d:05:32:8a:a4:a5:eb:73:
0a:d1:3e:a5:00:b6:7b:bc:a7:8a:7e:71:dd:b0:2a:
3e:13:eb:59:2f:b9:b5:6c:e9:0a:a7:9b:08:a5:31:
d7:1a:87:9c:83:59:8d:08:49:a8:d8:fd:96:f6:61:
63:89:93:f2:39:b8:72:88:db:60:37:a5:4f:27:96:
db:8c:ff:95:fa:a3:d5:c9:b0:3e:28:2d:d1:aa:e7:
16:17:29:80:6e:60:31:da:99:97:69:d5:d7:4a:0a:
94:30:4b:3f:5b:9d:a6:31:e0:62:a0:cd:f8:e8:b8:
c9:b2:6a:42:e1:a5:77:dd:92:4a:7e:f4:6c:e9:af:
44:c2:88:68:2c:0a:08:34:b9:c6:06:fb:7b:75:d3:
9f:67:5c:8e:af:1c:83:37:7f:1a:c6:04:14:ce:f8:
ef:40:5f:73:54:94:38:0b:b0:ab:73:09:bf:d2:bc:
4a:59:e8:9a:2c:82:a8:ea:bc:2a:8f:ef:76:26:7b:
6b:f0:e5:39:41:c5:c6:ed:7f:2e:cf:44:65:6b:d5:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:E1:08:23:84:F0:13:23:6E:AC:B9:CC:B8:BB:15:6D:F1:CB:93
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
49:e4:7a:e0:5b:f5:40:72:64:35:b8:5c:e7:44:d0:2e:ed:9e:
92:ae:7b:f1:eb:fd:8e:87:26:96:00:39:ec:d0:d1:a4:e6:ae:
7d:9f:98:41:a0:98:03:7d:88:b4:fa:ab:32:2d:23:dd:56:44:
d8:c6:31:9d:70:c8:bb:1e:c6:1d:54:de:e3:8e:53:5d:a3:24:
bb:3b:98:e8:56:0e:db:d7:d4:88:af:ed:34:35:de:fc:3e:78:
7a:22:a7:5c:2e:e6:f3:c9:5f:2d:7a:f4:59:cf:95:3e:3c:ce:
7a:28:14:c3:c5:b0:36:77:1f:c8:4c:15:21:2e:54:84:b0:4f:
6f:dc:3b:ab:27:25:7f:33:5e:76:e9:ef:ba:59:a7:5d:84:27:
81:1a:ba:e7:69:d4:c5:55:d0:1c:10:1d:3a:d4:d0:ad:44:76:
b4:00:89:fd:da:9d:84:bf:b1:b7:39:88:1d:30:1e:0c:b2:29:
f2:ba:91:24:4f:4d:b4:33:78:f5:6e:f0:12:86:fa:fb:43:d8:
07:d1:e0:bb:d3:02:af:b1:52:7b:ef:ed:43:d5:01:1d:53:40:
eb:7f:8c:ce:7d:f3:e4:d2:ad:97:29:15:4b:b0:a1:00:b0:b3:
26:a6:8f:95:bf:99:25:c9:e3:9c:85:ff:d7:e3:39:b9:eb:75:
e1:bd:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:19 2025 by rpki-client