Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I_eyHmcHhGHyIQlsso4jJQ8YCtQ.roa
File: I_eyHmcHhGHyIQlsso4jJQ8YCtQ.roa (raw, json)
Hash identifier: Q7xCDdsNu2RlcHBULAHbajs9+IEByLGGjw9/GwuiNNs=
Subject key identifier: 23:F7:B2:1E:67:07:84:61:F2:21:09:6C:B2:8E:23:25:0F:18:0A:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FDB9F25262DC9315038098783835573
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I_eyHmcHhGHyIQlsso4jJQ8YCtQ.roa
Signing time: Thu 13 Mar 2025 14:14:49 +0000
ROA not before: Thu 13 Mar 2025 14:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211693
IP address blocks: 151.242.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:db:9f:25:26:2d:c9:31:50:38:09:87:83:83:55:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f7b21e67078461f221096cb28e23250f180ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:78:b8:0f:b1:d6:b4:80:b3:03:9e:4c:48:
10:2a:33:87:24:b1:c5:29:00:e2:03:ac:9a:bc:4c:
6e:75:76:b3:a2:4c:9e:db:71:bc:81:9e:25:9c:bc:
45:42:e8:87:18:7f:f0:3f:a5:7e:48:d1:23:37:17:
e0:ea:3c:1a:3c:f3:c5:aa:f1:c8:9a:29:d2:42:df:
13:f1:72:78:96:b2:65:61:56:91:89:e0:34:39:ad:
db:a5:b3:22:94:8f:2f:5b:18:3d:9c:0c:73:cf:a8:
3d:cc:71:93:e2:c1:ee:a0:b6:eb:b1:d2:0c:3f:f1:
f6:da:af:43:00:a6:cf:61:c1:98:6f:ac:ff:b4:eb:
16:49:cf:bb:8d:f0:a6:9f:68:ba:04:de:12:c5:8d:
e8:a0:f9:dd:ae:84:b1:9a:50:8f:0f:72:5c:8f:9f:
40:9e:ec:5b:3f:df:f3:82:31:69:7f:61:49:4c:84:
85:f4:c2:15:e1:68:9b:ef:13:90:9e:a4:59:11:ff:
ea:fc:9f:8b:1d:f1:d2:0a:b4:7f:7b:02:e6:76:3f:
f2:66:66:a3:06:c4:02:ad:02:f9:3a:29:9c:3e:72:
69:8f:1e:57:90:b2:c9:0c:27:3b:b9:3f:15:42:8b:
ae:1c:14:32:1e:b8:0c:ef:d2:ac:49:24:3d:9d:0a:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:B2:1E:67:07:84:61:F2:21:09:6C:B2:8E:23:25:0F:18:0A:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I_eyHmcHhGHyIQlsso4jJQ8YCtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:75:80:fb:b8:92:df:f5:32:80:14:07:97:cc:d0:af:47:21:
98:91:5f:79:23:c0:9b:15:06:b7:3e:d4:33:1a:5a:f3:18:a4:
29:2c:14:10:8b:be:33:28:36:67:e7:ae:74:7d:e5:99:b4:74:
c6:11:d0:44:f3:f7:f6:8c:18:94:5a:af:ed:67:5c:7e:b0:16:
22:af:39:86:53:bd:af:4d:0e:c8:74:ef:e2:d8:d3:0e:b7:6f:
26:37:90:01:96:2d:b6:a0:b3:0f:fd:e9:96:08:cb:4c:a0:e0:
4b:ae:57:2e:ec:76:9a:68:c6:81:04:4c:43:c8:50:9d:5b:a0:
72:a2:dc:4c:67:f8:a4:de:91:b0:c2:93:6a:b3:9a:e2:58:74:
21:1d:a7:9e:00:a6:b9:a8:a4:35:5d:9b:28:ea:c3:8f:4d:8f:
68:62:4b:2f:ea:b7:4c:b4:5d:c2:cc:73:77:81:92:5f:c6:86:
0a:af:5a:8d:51:d5:c2:7e:04:c1:d1:fd:0f:ab:bf:e9:95:e1:
87:8f:dd:ea:48:1d:80:b3:12:39:46:e3:40:ea:ce:cc:1a:70:
96:95:b6:52:58:5c:cb:82:01:92:5e:b0:f5:b5:5a:ec:7f:5d:
5c:73:d9:cf:fb:0d:45:3d:2a:2f:0c:a3:cb:ae:a8:3e:b4:46:
a4:fc:4b:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWP258lJi3JMVA4CYeDg1VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzEzMTQxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2Y3YjIxZTY3MDc4NDYxZjIyMTA5NmNiMjhlMjMyNTBmMTgwYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Z4uA+x1rSAswOeTEgQKjOHJLHF
KQDiA6yavExudXazokye23G8gZ4lnLxFQuiHGH/wP6V+SNEjNxfg6jwaPPPFqvHI
minSQt8T8XJ4lrJlYVaRieA0Oa3bpbMilI8vWxg9nAxzz6g9zHGT4sHuoLbrsdIM
P/H22q9DAKbPYcGYb6z/tOsWSc+7jfCmn2i6BN4SxY3ooPndroSxmlCPD3Jcj59A
nuxbP9/zgjFpf2FJTISF9MIV4Wib7xOQnqRZEf/q/J+LHfHSCrR/ewLmdj/yZmaj
BsQCrQL5OimcPnJpjx5XkLLJDCc7uT8VQouuHBQyHrgM79KsSSQ9nQrOcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCP3sh5nB4Rh8iEJbLKOIyUPGArUMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSV9leUhtY0hoR0h5SVFsc3NvNGpKUThZQ3RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/I7MA0G
CSqGSIb3DQEBCwUAA4IBAQBtdYD7uJLf9TKAFAeXzNCvRyGYkV95I8CbFQa3PtQz
GlrzGKQpLBQQi74zKDZn5650feWZtHTGEdBE8/f2jBiUWq/tZ1x+sBYirzmGU72v
TQ7IdO/i2NMOt28mN5ABli22oLMP/emWCMtMoOBLrlcu7HaaaMaBBExDyFCdW6By
otxMZ/ik3pGwwpNqs5riWHQhHaeeAKa5qKQ1XZso6sOPTY9oYksv6rdMtF3CzHN3
gZJfxoYKr1qNUdXCfgTB0f0Pq7/pleGHj93qSB2AsxI5RuNA6s7MGnCWlbZSWFzL
ggGSXrD1tVrsf11cc9nP+w1FPSovDKPLrqg+tEak/EsJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client