Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/bljFw_6M0rhdvdyihFkoTkuQtkQ.roa
File: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (raw, json)
Hash identifier: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=
Subject key identifier: 6E:58:C5:C3:FE:8C:D2:B8:5D:BD:DC:A2:84:59:28:4E:4B:90:B6:44
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 019519A0E6AFC19846D2EAD05C1482D328F0
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/bljFw_6M0rhdvdyihFkoTkuQtkQ.roa
Signing time: Tue 18 Feb 2025 15:15:29 +0000
ROA not before: Tue 18 Feb 2025 15:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203926
IP address blocks: 159.151.128.0/18 maxlen: 18
159.151.200.0/24 maxlen: 24
192.109.143.0/24 maxlen: 24
2a07:8144::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:a0:e6:af:c1:98:46:d2:ea:d0:5c:14:82:d3:28:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Feb 18 15:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e58c5c3fe8cd2b85dbddca28459284e4b90b644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:e9:2a:2c:e9:76:f5:f8:cf:09:1a:c7:56:
67:b3:57:35:57:fd:d2:00:5e:1d:ab:29:78:e2:4f:
5f:bb:50:86:27:1c:5b:cb:0f:b4:c2:35:17:8e:ee:
6b:bc:2b:6c:57:c2:b0:76:42:af:a4:aa:53:79:56:
dd:7c:e6:4c:1f:15:31:2f:85:46:50:48:0d:e8:b0:
f9:29:7c:31:21:05:4b:85:0f:76:a6:05:f2:c8:fc:
73:9f:8d:c6:ff:66:4a:fd:d3:e4:fc:41:41:f2:0f:
df:98:c9:76:ac:e6:67:6d:7d:2d:16:31:9a:51:6e:
77:80:61:7c:c4:84:3c:b9:34:8a:73:b3:b8:df:35:
a0:fd:1b:d6:fe:2f:ce:92:9e:3a:72:ec:fb:26:2b:
fc:b0:0e:ce:80:1b:28:e3:c3:bb:1d:92:ae:6e:60:
a9:b1:e2:9a:56:12:11:41:22:46:ac:84:f9:bc:4e:
ab:f9:ef:32:99:1d:43:7a:dd:3f:bf:bd:81:33:d4:
7f:d2:08:1a:a2:61:e3:b6:15:a5:45:66:ab:39:4e:
24:8f:a7:de:1b:a1:4b:c4:96:6e:39:7a:1a:55:e4:
45:2f:a6:39:d6:db:61:12:be:42:cb:5b:87:65:73:
15:77:0d:bc:93:d6:43:02:28:ef:3c:cc:41:5a:be:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:C5:C3:FE:8C:D2:B8:5D:BD:DC:A2:84:59:28:4E:4B:90:B6:44
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/bljFw_6M0rhdvdyihFkoTkuQtkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.128.0/18
159.151.200.0/24
192.109.143.0/24
IPv6:
2a07:8144::/36
Signature Algorithm: sha256WithRSAEncryption
11:8c:31:37:00:2e:2f:c1:56:60:6e:90:86:20:ee:13:0a:2c:
92:68:2f:ba:37:27:e2:8b:e1:7c:ee:e2:2f:52:2a:c3:40:58:
60:e7:ac:3c:f8:de:28:3f:30:6a:2c:5d:18:c6:6f:39:c4:fe:
b2:d4:17:77:5b:7e:d4:f0:3c:01:6d:88:be:fb:04:46:02:7a:
3d:c3:d1:e2:37:52:42:5b:dd:61:e4:f7:31:c4:de:bd:69:07:
19:13:1c:db:5a:83:04:e9:1c:88:d9:5e:cb:46:39:b7:9d:fa:
a5:8f:1d:00:f3:39:24:57:4b:59:04:0a:2d:56:cf:a0:14:6d:
8b:d0:5e:fa:55:a2:85:23:64:c4:02:e4:86:9b:31:9f:91:66:
18:13:ca:04:67:0e:c7:4c:35:d2:b4:7d:c9:94:5a:51:2a:75:
a8:e0:56:e6:8e:e1:d0:04:b3:38:42:ea:fb:05:8e:a6:46:07:
3b:c7:7f:c9:20:e1:33:38:66:c2:72:9e:47:31:47:c7:35:5a:
63:45:2a:7b:bd:de:7f:48:61:01:be:65:37:6e:39:55:2c:c2:
26:d8:c4:57:5c:d8:1a:24:73:29:b8:3b:10:46:28:a5:00:c8:
b8:46:7c:db:f8:7d:60:8e:89:d9:ac:92:c4:d6:c7:1d:3c:35:
25:7e:59:8b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZUZoOavwZhG0urQXBSC0yjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2
MDkwZjEwHhcNMjUwMjE4MTUxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTU4YzVjM2ZlOGNkMmI4NWRiZGRjYTI4NDU5Mjg0ZTRiOTBiNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirrpKizpdvX4zwkax1Zns1c1V/3S
AF4dqyl44k9fu1CGJxxbyw+0wjUXju5rvCtsV8KwdkKvpKpTeVbdfOZMHxUxL4VG
UEgN6LD5KXwxIQVLhQ92pgXyyPxzn43G/2ZK/dPk/EFB8g/fmMl2rOZnbX0tFjGa
UW53gGF8xIQ8uTSKc7O43zWg/RvW/i/Okp46cuz7Jiv8sA7OgBso48O7HZKubmCp
seKaVhIRQSJGrIT5vE6r+e8ymR1Det0/v72BM9R/0ggaomHjthWlRWarOU4kj6fe
G6FLxJZuOXoaVeRFL6Y51tthEr5Cy1uHZXMVdw28k9ZDAijvPMxBWr52YwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG5YxcP+jNK4Xb3cooRZKE5LkLZEMB8GA1UdIwQY
MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt
ODAwZWRhMmNmYjM2LzEvYmxqRndfNk0wcmhkdmR5aWhGa29Ua3VRdGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2
LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQGn5eAAwQA
n5fIAwQAwG2PMA4EAgACMAgDBgQqB4FEADANBgkqhkiG9w0BAQsFAAOCAQEAEYwx
NwAuL8FWYG6QhiDuEwoskmgvujcn4ovhfO7iL1Iqw0BYYOesPPjeKD8waixdGMZv
OcT+stQXd1t+1PA8AW2IvvsERgJ6PcPR4jdSQlvdYeT3McTevWkHGRMc21qDBOkc
iNley0Y5t536pY8dAPM5JFdLWQQKLVbPoBRti9Be+lWihSNkxALkhpsxn5FmGBPK
BGcOx0w10rR9yZRaUSp1qOBW5o7h0ASzOELq+wWOpkYHO8d/ySDhMzhmwnKeRzFH
xzVaY0Uqe73ef0hhAb5lN245VSzCJtjEV1zYGiRzKbg7EEYopQDIuEZ82/h9YI6J
2aySxNbHHTw1JX5Ziw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:29 2025 by rpki-client