Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa
File: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (raw, json)
Hash identifier: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=
Subject key identifier: D7:37:09:06:81:39:9D:E0:5C:D1:D9:76:15:81:43:11:EE:5F:BB:B6
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019427B60BD3B77CC8C29F755E4CC022804B
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199173
IP address blocks: 151.237.66.0/24 maxlen: 24
151.237.80.0/22 maxlen: 22
151.237.80.0/23 maxlen: 23
151.237.82.0/24 maxlen: 24
151.237.83.0/24 maxlen: 24
151.237.88.0/23 maxlen: 23
151.237.90.0/24 maxlen: 24
194.69.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0b:d3:b7:7c:c8:c2:9f:75:5e:4c:c0:22:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d737090681399de05cd1d97615814311ee5fbbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:97:f0:97:f9:0f:03:c8:c3:b3:5c:f8:10:
9b:c6:e4:6d:d6:17:3d:3e:de:28:c4:ba:f9:03:52:
4d:c1:c5:d2:40:5e:db:2f:cd:2c:05:b8:33:f5:b1:
b7:1f:e7:24:6b:cd:d3:b5:25:46:0a:2d:e7:8f:b4:
b4:5f:50:d3:a8:12:5c:6e:92:11:2d:6f:9b:4d:3f:
1e:c8:2d:63:69:c4:e6:d1:27:e9:a3:b0:b4:20:c9:
40:99:c0:94:73:4f:b3:dc:34:7b:13:47:b1:85:67:
51:bb:26:8b:d6:26:80:19:e9:3f:14:5b:5f:d7:76:
da:1d:69:5d:10:17:5e:d8:51:75:cd:22:9e:a2:1d:
bd:31:d1:5d:e4:19:c8:cc:4a:cc:01:81:a7:30:88:
5d:59:15:66:6b:a9:28:49:ce:b9:01:66:e0:83:bf:
32:58:a6:f3:82:cb:68:70:be:2c:8c:1f:00:0c:c1:
1c:ae:78:75:ad:be:d4:8f:a2:94:e8:d2:f1:93:d7:
4a:07:9a:fb:92:d5:c6:f4:32:bc:bc:4c:03:87:0b:
fd:82:98:7b:7b:55:a0:71:fd:72:9c:90:69:8b:1e:
55:01:2f:5a:ca:12:fe:8c:48:a3:40:5a:95:cf:0f:
aa:b0:d0:76:86:7c:ae:1c:85:d8:bf:7b:50:b9:12:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:09:06:81:39:9D:E0:5C:D1:D9:76:15:81:43:11:EE:5F:BB:B6
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.66.0/24
151.237.80.0/22
151.237.88.0-151.237.90.255
194.69.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1c:2d:bc:24:36:85:94:3e:3a:4f:e9:a7:d8:f1:94:cc:2c:
94:37:eb:02:7b:9d:77:f4:a3:f6:93:fd:2f:c0:da:bd:a5:44:
82:d2:d2:46:1c:1f:c6:fd:86:fe:7b:01:39:bb:9a:16:0e:a2:
fe:f6:f4:18:1d:08:0c:b0:74:0b:8c:64:75:0d:c9:b9:1b:df:
08:b8:59:0b:b2:6d:e4:d4:c8:c4:c3:33:58:c4:c0:d0:79:56:
d9:01:57:34:e4:8a:6f:15:5c:56:fa:fd:6f:15:26:55:f3:42:
58:82:0b:a2:f7:c0:71:69:d6:ed:51:bc:1a:9f:0c:ef:77:4d:
f9:03:bd:81:88:bf:2c:e2:39:97:9e:74:dd:42:73:d9:48:ea:
37:49:9e:38:b4:24:e2:e6:3e:a4:de:47:eb:4b:e4:0c:e6:02:
ff:7c:d4:b4:4c:4b:b7:f2:64:7b:9a:e4:96:3a:05:f8:d5:da:
21:c0:0c:23:c0:98:20:c8:39:6c:61:18:0f:f8:5e:ec:e8:1e:
d0:cb:1f:c4:46:93:90:46:66:f5:69:9d:49:67:cf:92:28:31:
1b:5f:7a:b9:0f:18:73:85:6a:56:99:f5:6e:16:8d:ad:ea:61:
c5:ea:63:0d:ee:fe:cc:66:da:3a:b4:42:0c:95:3f:61:25:18:
6f:77:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:25 2025 by rpki-client