Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa
File: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (raw, json)
Hash identifier: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=
Subject key identifier: 51:CE:C9:A7:62:DC:44:75:A7:48:9F:C0:22:5F:4C:45:2E:4D:FA:7B
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0C4147E431438B1D361ED3AC4759
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 109.166.40.0/21 maxlen: 21
109.166.48.0/21 maxlen: 21
151.248.72.0/21 maxlen: 21
151.248.80.0/21 maxlen: 21
151.248.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0c:41:47:e4:31:43:8b:1d:36:1e:d3:ac:47:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51cec9a762dc4475a7489fc0225f4c452e4dfa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:92:0f:37:1d:c7:bc:b2:76:a8:a4:43:be:
b4:b7:ac:ff:9d:96:c9:f7:4b:61:99:7e:81:7a:98:
4d:c3:81:51:b8:bd:4f:a3:1b:fa:68:5a:0b:b2:6e:
33:1d:88:d9:ae:63:a5:ad:bf:a4:ac:88:37:2f:56:
9a:56:db:d6:f1:d4:dd:9e:ac:be:b5:0b:60:39:54:
72:e4:86:8e:2f:04:d0:b5:0e:c7:33:0f:5b:37:ee:
20:64:2c:4e:59:49:ec:d7:23:7e:80:6b:09:a1:08:
69:f4:b1:c9:90:cd:18:55:49:6d:1a:d2:fc:82:16:
9e:79:47:38:c7:61:4e:fe:51:55:2c:23:60:79:d2:
65:68:fa:ad:0a:00:82:57:8f:a0:fd:f2:44:95:f1:
f1:d3:bd:f5:b4:5e:fd:bd:3c:c2:d9:62:92:33:95:
11:53:a5:eb:df:5d:87:39:5c:62:ce:df:41:b4:71:
3e:d3:4c:08:bd:52:92:29:39:d6:82:5f:3b:1f:ab:
58:e7:0b:63:3d:b2:be:f5:9e:a0:b8:3f:42:b7:23:
b7:18:a5:22:e9:83:98:c1:bc:10:91:e2:0e:de:0a:
c4:0b:6a:1d:b4:86:3e:c0:dd:e0:91:5e:c4:c9:2e:
36:16:e4:4b:e1:b4:3e:02:d1:34:c7:28:e8:fe:71:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:C9:A7:62:DC:44:75:A7:48:9F:C0:22:5F:4C:45:2E:4D:FA:7B
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.40.0-109.166.55.255
151.248.72.0-151.248.91.255
Signature Algorithm: sha256WithRSAEncryption
46:4c:20:bb:fc:ed:c4:e5:06:1b:56:06:7b:22:a5:59:f6:54:
09:bb:bf:61:1c:42:4b:11:df:b0:f5:c1:a7:fb:50:c1:fe:23:
5a:bf:50:f2:2d:e3:ed:c4:b2:f1:88:d5:1b:b2:31:e5:71:f1:
43:2f:58:ec:d3:5c:1f:24:92:9a:c3:c0:6c:a0:92:5e:ad:85:
b8:7d:53:f6:ee:a6:95:7e:ee:e0:bb:0e:94:b9:ae:96:e0:2a:
6f:24:64:9d:18:ec:d3:1e:70:13:74:ce:83:76:97:20:3e:90:
0c:c0:4b:78:59:e8:83:ea:be:66:a4:ea:07:8a:d2:18:3c:b2:
31:29:d7:70:0b:7d:6b:ad:f8:f5:b4:56:17:65:c9:9a:b3:71:
74:95:1f:2b:77:cc:e2:01:9d:4a:82:99:6d:18:dc:02:57:42:
11:2b:01:57:a2:4d:41:a2:e4:78:b1:8a:c9:25:ea:46:3e:46:
7e:11:66:fb:54:ca:26:ac:bd:0d:17:1b:8b:dc:d1:b8:7a:d9:
ea:6b:73:59:c4:11:af:7d:a4:5d:ff:e7:55:93:bf:88:58:cd:
83:71:bf:76:d7:24:b1:cd:11:0d:8c:93:92:e0:5b:75:3a:5a:
22:d0:90:3d:bc:dd:f2:c7:06:e4:03:d8:98:63:ef:84:76:5d:
30:4b:73:e2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQijgxBR+QxQ4sdNh7TrEdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjUwMTAxMTU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWNlYzlhNzYyZGM0NDc1YTc0ODlmYzAyMjVmNGM0NTJlNGRmYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yWSDzcdx7yydqikQ760t6z/nZbJ
90thmX6BephNw4FRuL1Poxv6aFoLsm4zHYjZrmOlrb+krIg3L1aaVtvW8dTdnqy+
tQtgOVRy5IaOLwTQtQ7HMw9bN+4gZCxOWUns1yN+gGsJoQhp9LHJkM0YVUltGtL8
ghaeeUc4x2FO/lFVLCNgedJlaPqtCgCCV4+g/fJElfHx0731tF79vTzC2WKSM5UR
U6Xr312HOVxizt9BtHE+00wIvVKSKTnWgl87H6tY5wtjPbK+9Z6guD9CtyO3GKUi
6YOYwbwQkeIO3grEC2odtIY+wN3gkV7EyS42FuRL4bQ+AtE0xyjo/nGfJQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFHOyadi3ER1p0ifwCJfTEUuTfp7MB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvVWM3SnAyTGNSSFduU0pfQUlsOU1SUzVOLW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBANtpigD
BANtpjAwDAMEA5f4SAMEApf4WDANBgkqhkiG9w0BAQsFAAOCAQEARkwgu/ztxOUG
G1YGeyKlWfZUCbu/YRxCSxHfsPXBp/tQwf4jWr9Q8i3j7cSy8YjVG7Ix5XHxQy9Y
7NNcHySSmsPAbKCSXq2FuH1T9u6mlX7u4LsOlLmuluAqbyRknRjs0x5wE3TOg3aX
ID6QDMBLeFnog+q+ZqTqB4rSGDyyMSnXcAt9a6349bRWF2XJmrNxdJUfK3fM4gGd
SoKZbRjcAldCESsBV6JNQaLkeLGKySXqRj5GfhFm+1TKJqy9DRcbi9zRuHrZ6mtz
WcQRr32kXf/nVZO/iFjNg3G/dtcksc0RDYyTkuBbdTpaItCQPbzd8scG5APYmGPv
hHZdMEtz4g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:16 2025 by rpki-client