Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Ve3LA44EujB0CcQC-d0qAhm-l0.roa
File: 7Ve3LA44EujB0CcQC-d0qAhm-l0.roa (raw, json)
Hash identifier: m+1nQP8PZoMMKfnvsEtdeRuduQh4kQPe7EAYxjZtZ2M=
Subject key identifier: ED:57:B7:2C:0E:38:12:E8:C1:D0:27:10:0B:E7:74:A8:08:66:FA:5D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B03A209916C74511658E80908A2D6B8D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Ve3LA44EujB0CcQC-d0qAhm-l0.roa
Signing time: Wed 29 Jan 2025 04:03:06 +0000
ROA not before: Wed 29 Jan 2025 04:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272547
IP address blocks: 151.243.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:3a:20:99:16:c7:45:11:65:8e:80:90:8a:2d:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 29 04:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed57b72c0e3812e8c1d027100be774a80866fa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:0b:79:2c:d9:f9:da:af:4b:56:ea:37:39:
df:e4:d8:4d:0b:16:b2:db:ad:4a:9f:c7:b5:7b:ca:
34:56:38:fd:8a:2d:33:ba:7a:44:d9:36:d7:31:44:
59:cf:28:ec:ee:10:68:47:8a:0b:ec:f8:3d:4a:47:
92:c1:fd:0f:f3:67:57:fa:e4:f0:0b:1f:f9:1a:f7:
89:fc:2d:5c:33:08:b8:78:3e:5d:6d:a4:9d:07:28:
2f:99:85:a2:4f:b2:7b:2f:a8:99:35:e0:76:2b:44:
c9:e1:80:e7:e3:c4:7e:7e:ca:91:30:66:44:ba:0e:
76:75:82:fa:37:0e:49:51:46:37:54:27:80:8d:3a:
fc:25:df:a6:ed:a2:df:c7:70:82:a2:0f:3c:36:e7:
3b:d6:14:39:b6:2f:10:a8:9d:06:a1:3c:54:4b:9d:
e7:49:3c:25:f1:02:0d:4b:73:04:e0:63:aa:9b:2b:
82:0e:87:17:96:85:bf:5e:2b:f1:a0:41:4c:ad:12:
a4:80:95:f4:1d:10:37:d4:30:65:6f:b8:1c:a5:72:
6a:0a:40:27:de:d5:2d:52:60:8f:c1:0d:13:41:fb:
41:9f:73:39:4f:d8:10:cb:5b:7d:f3:bb:8f:bc:9d:
1f:43:20:00:76:f3:3b:7f:01:51:bf:f3:81:6c:b2:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:B7:2C:0E:38:12:E8:C1:D0:27:10:0B:E7:74:A8:08:66:FA:5D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Ve3LA44EujB0CcQC-d0qAhm-l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.218.0/23
Signature Algorithm: sha256WithRSAEncryption
03:48:d7:7d:5e:fb:df:e2:35:34:c4:d0:66:f9:46:7e:e8:1c:
8c:dd:48:00:18:62:c2:3f:7e:11:83:a9:ea:c1:6c:c6:a4:54:
4d:b3:a0:55:f3:7d:a1:38:c0:13:ea:6c:20:38:df:85:3a:b1:
01:d9:3b:8b:b5:14:33:f7:eb:80:5f:65:2a:ce:18:ed:ff:f8:
fd:ff:40:8c:b3:41:64:3b:3c:0c:c0:10:12:30:3e:d5:db:36:
75:b8:28:38:a5:f2:42:4d:46:8d:5f:c2:13:f6:8d:73:bf:cb:
d7:94:f0:e9:05:9d:e1:3d:37:c4:a8:a8:41:20:0d:29:7d:86:
02:7b:bc:2c:8f:08:a1:02:6f:99:b9:2b:54:a4:cc:2f:a6:50:
2a:67:f9:a0:d8:d0:23:b4:9d:64:f2:12:b9:a7:1d:e2:57:5f:
b2:22:b3:f5:06:a4:93:9b:bb:47:84:c6:36:de:8f:90:45:4c:
ec:37:66:ea:d2:d5:02:50:f0:5a:cf:f0:58:42:02:6f:07:fa:
6f:d3:31:e9:56:fb:0a:d9:40:0f:f9:13:d0:80:5b:73:47:83:
27:f3:06:b1:94:71:a5:12:e8:0d:2a:f3:6f:6f:8e:5a:83:04:
2f:a5:9d:88:d5:d8:98:83:32:a0:01:1e:7f:2f:9c:69:36:84:
cc:18:61:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSwOiCZFsdFEWWOgJCKLWuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTI5MDQwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDU3YjcyYzBlMzgxMmU4YzFkMDI3MTAwYmU3NzRhODA4NjZmYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0cLeSzZ+dqvS1bqNznf5NhNCxay
261Kn8e1e8o0Vjj9ii0zunpE2TbXMURZzyjs7hBoR4oL7Pg9SkeSwf0P82dX+uTw
Cx/5GveJ/C1cMwi4eD5dbaSdBygvmYWiT7J7L6iZNeB2K0TJ4YDn48R+fsqRMGZE
ug52dYL6Nw5JUUY3VCeAjTr8Jd+m7aLfx3CCog88Nuc71hQ5ti8QqJ0GoTxUS53n
STwl8QINS3ME4GOqmyuCDocXloW/XivxoEFMrRKkgJX0HRA31DBlb7gcpXJqCkAn
3tUtUmCPwQ0TQftBn3M5T9gQy1t987uPvJ0fQyAAdvM7fwFRv/OBbLLXpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1XtywOOBLowdAnEAvndKgIZvpdMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvN1ZlM0xBNDRFdWpCMENjUUMtZDBxQWhtLWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/PaMA0G
CSqGSIb3DQEBCwUAA4IBAQADSNd9Xvvf4jU0xNBm+UZ+6ByM3UgAGGLCP34Rg6nq
wWzGpFRNs6BV832hOMAT6mwgON+FOrEB2TuLtRQz9+uAX2Uqzhjt//j9/0CMs0Fk
OzwMwBASMD7V2zZ1uCg4pfJCTUaNX8IT9o1zv8vXlPDpBZ3hPTfEqKhBIA0pfYYC
e7wsjwihAm+ZuStUpMwvplAqZ/mg2NAjtJ1k8hK5px3iV1+yIrP1BqSTm7tHhMY2
3o+QRUzsN2bq0tUCUPBaz/BYQgJvB/pv0zHpVvsK2UAP+RPQgFtzR4Mn8waxlHGl
EugNKvNvb45agwQvpZ2I1diYgzKgAR5/L5xpNoTMGGEd
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:39 2025 by rpki-client