Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AN5Qz1lfDZYcMz_MAg6n8Z8ynoA.roa
File: AN5Qz1lfDZYcMz_MAg6n8Z8ynoA.roa (raw, json)
Hash identifier: dMgRwJ5lGr2NXjrk1PkYbCVVWooXI8J/QXoccELHYeQ=
Subject key identifier: 00:DE:50:CF:59:5F:0D:96:1C:33:3F:CC:02:0E:A7:F1:9F:32:9E:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195B4CB30A72582645AD686180EF73D6C81
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AN5Qz1lfDZYcMz_MAg6n8Z8ynoA.roa
Signing time: Thu 20 Mar 2025 18:22:49 +0000
ROA not before: Thu 20 Mar 2025 18:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.95.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.101.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.112.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.184.0/22 maxlen: 22
151.242.196.0/22 maxlen: 22
151.243.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:cb:30:a7:25:82:64:5a:d6:86:18:0e:f7:3d:6c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 18:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00de50cf595f0d961c333fcc020ea7f19f329e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:0b:18:8a:36:1c:21:c5:81:83:02:a8:f9:
1e:68:7f:d0:a6:69:b5:45:e3:72:b5:00:a8:a9:cb:
a6:88:33:12:fa:c0:3b:12:83:51:e4:a1:14:35:3d:
96:06:eb:a2:0d:06:6a:6c:01:29:70:54:9a:57:a0:
2f:da:2d:8c:60:38:e8:bf:78:17:b0:7e:a2:30:04:
13:52:c5:46:0b:d6:1e:33:cd:08:47:c2:00:48:81:
ba:01:ee:55:f0:05:b6:09:79:78:5a:53:76:65:e6:
6c:af:22:ca:71:9f:7b:28:6c:95:fc:6d:e5:e8:2e:
93:d9:66:89:97:e9:09:3f:ea:d2:99:8d:1e:dc:9e:
5f:21:19:88:bd:ef:6d:9a:08:7c:73:e5:94:d1:b3:
d6:d1:62:1d:d9:f7:cf:47:ba:9d:5d:e6:c5:d2:56:
bb:4e:ca:41:3f:8d:15:0c:33:8f:3b:12:91:d5:f1:
f6:30:81:fb:14:df:d5:83:45:97:65:14:50:93:d4:
b8:db:2f:2f:2e:cb:ca:61:33:3d:24:b6:e9:81:19:
cd:7c:f8:6d:e5:da:f0:20:3d:f2:e0:0a:75:61:21:
b8:b3:15:40:26:07:6e:95:2d:02:db:87:82:37:04:
3c:4d:5d:24:89:7e:90:c6:d1:09:79:27:ea:97:28:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:50:CF:59:5F:0D:96:1C:33:3F:CC:02:0E:A7:F1:9F:32:9E:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AN5Qz1lfDZYcMz_MAg6n8Z8ynoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.93.0-151.242.96.255
151.242.98.0/24
151.242.100.0/23
151.242.103.0/24
151.242.105.0/24
151.242.107.0/24
151.242.109.0/24
151.242.112.0/23
151.242.115.0/24
151.242.184.0/22
151.242.196.0/22
151.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2b:5d:87:b3:02:41:cd:6d:43:06:ef:f0:43:aa:66:36:94:
c7:f1:c1:8f:8e:a4:2a:47:fd:d5:02:9c:3c:8e:49:dc:d5:ce:
9b:fe:56:a1:9b:49:4a:48:ce:5a:4e:60:17:2f:45:7c:09:bb:
96:6b:37:98:22:b1:f2:96:bb:ef:d3:5e:23:a0:e9:89:2a:18:
35:53:2d:84:2f:85:dc:d6:7d:4c:59:ac:51:54:73:4f:65:00:
c5:d8:99:53:6a:9c:15:26:b4:60:df:5c:1e:f4:55:94:d7:c1:
45:3c:88:85:8c:26:37:25:fa:a0:c3:99:77:e0:36:6b:00:95:
b6:92:ad:b9:70:84:5c:72:28:08:4f:dc:f6:3c:7a:46:e1:c4:
81:46:81:f1:0d:0f:f8:81:61:f3:b2:49:a3:c0:62:39:56:c1:
ec:23:72:6f:54:dd:31:50:e3:ad:e2:40:af:d4:45:8d:3e:a0:
b6:77:cb:6e:7a:6c:f9:06:f7:cd:a4:b4:9e:1d:c5:a1:30:7b:
6e:00:aa:fd:fd:56:aa:63:8d:42:b9:df:68:f0:b6:e1:a0:56:
c0:a2:d8:4f:82:2e:b1:d0:57:34:64:41:45:e4:a1:96:c2:6d:
45:5b:4b:11:7b:e3:2e:a5:c1:f8:f1:f0:a3:a0:8e:5d:1e:85:
2a:92:61:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZW0yzCnJYJkWtaGGA73PWyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzIwMTgyMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGRlNTBjZjU5NWYwZDk2MWMzMzNmY2MwMjBlYTdmMTlmMzI5ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYLGIo2HCHFgYMCqPkeaH/Qpmm1
ReNytQCoqcumiDMS+sA7EoNR5KEUNT2WBuuiDQZqbAEpcFSaV6Av2i2MYDjov3gX
sH6iMAQTUsVGC9YeM80IR8IASIG6Ae5V8AW2CXl4WlN2ZeZsryLKcZ97KGyV/G3l
6C6T2WaJl+kJP+rSmY0e3J5fIRmIve9tmgh8c+WU0bPW0WId2ffPR7qdXebF0la7
TspBP40VDDOPOxKR1fH2MIH7FN/Vg0WXZRRQk9S42y8vLsvKYTM9JLbpgRnNfPht
5drwID3y4Ap1YSG4sxVAJgdulS0C24eCNwQ8TV0kiX6QxtEJeSfqlyii+wIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFADeUM9ZXw2WHDM/zAIOp/GfMp6AMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQU41UXoxbGZEWlljTXpfTUFnNm44Wjh5bm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBACX8l0D
BACX8mADBACX8mIDBAGX8mQDBACX8mcDBACX8mkDBACX8msDBACX8m0DBAGX8nAD
BACX8nMDBAKX8rgDBAKX8sQDBACX86gwDQYJKoZIhvcNAQELBQADggEBAGorXYez
AkHNbUMG7/BDqmY2lMfxwY+OpCpH/dUCnDyOSdzVzpv+VqGbSUpIzlpOYBcvRXwJ
u5ZrN5gisfKWu+/TXiOg6YkqGDVTLYQvhdzWfUxZrFFUc09lAMXYmVNqnBUmtGDf
XB70VZTXwUU8iIWMJjcl+qDDmXfgNmsAlbaSrblwhFxyKAhP3PY8ekbhxIFGgfEN
D/iBYfOySaPAYjlWwewjcm9U3TFQ463iQK/URY0+oLZ3y256bPkG982ktJ4dxaEw
e24Aqv39VqpjjUK532jwtuGgVsCi2E+CLrHQVzRkQUXkoZbCbUVbSxF74y6lwfjx
8KOgjl0ehSqSYR8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:55 2025 by rpki-client