Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1CuRnwaK_8PfTsbkFzHav6_xYc.roa
File: P1CuRnwaK_8PfTsbkFzHav6_xYc.roa (raw, json)
Hash identifier: Pg4y13zkol9TERqIwb6XLEkKDVUlPyeBVjNyRDFuR2g=
Subject key identifier: 3F:50:AE:46:7C:1A:2B:FF:0F:7D:3B:1B:90:5C:C7:6A:FE:BF:C5:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019469769608880E9B11A9E542E052F6F85D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1CuRnwaK_8PfTsbkFzHav6_xYc.roa
Signing time: Wed 15 Jan 2025 10:16:06 +0000
ROA not before: Wed 15 Jan 2025 10:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20545
IP address blocks: 151.243.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:76:96:08:88:0e:9b:11:a9:e5:42:e0:52:f6:f8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 10:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f50ae467c1a2bff0f7d3b1b905cc76afebfc587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:f6:07:6e:ab:fa:2d:da:09:49:e9:00:f6:
31:48:4a:f8:8f:fd:3e:90:f9:22:5c:dd:a5:ee:ec:
c1:f9:81:ed:b7:bd:cb:b7:01:de:ea:ef:d4:c6:31:
63:1d:fe:14:a8:e8:f1:f1:09:64:f1:dd:bd:4d:9a:
f1:08:b3:f0:1f:28:16:56:81:09:1f:ff:54:3f:0a:
36:78:76:30:34:21:0a:0c:eb:86:35:63:d4:d6:f7:
fa:84:3a:90:d5:4e:c4:77:0e:a7:fb:e4:30:7d:ea:
11:a8:0a:af:40:cb:52:bc:44:fe:46:2a:9d:9f:69:
a7:8a:ee:1f:fa:09:f5:f9:3d:47:fc:b1:8e:a9:43:
fc:67:00:9d:96:93:10:67:03:e2:ac:96:b1:19:0b:
cd:7f:16:2e:77:b1:cf:51:cf:0d:3a:4d:ff:e1:f8:
fd:b3:5e:17:2b:2f:52:5c:aa:14:e5:60:e9:88:ec:
fa:a7:82:18:24:93:27:91:62:d1:93:03:20:90:92:
d2:64:1a:6e:54:3c:b8:61:98:48:dd:1c:59:ef:cb:
c9:29:c5:4d:ca:f3:a6:08:13:8b:dd:76:a5:7c:09:
7a:6d:fc:57:d4:10:1f:68:5a:a0:bb:17:15:15:82:
ef:20:b4:6b:ff:bf:46:8b:a6:ab:a3:0e:03:2c:1e:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:AE:46:7C:1A:2B:FF:0F:7D:3B:1B:90:5C:C7:6A:FE:BF:C5:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1CuRnwaK_8PfTsbkFzHav6_xYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:23:c3:d6:45:45:60:4b:76:d9:b7:91:90:fb:e8:18:60:f1:
d7:de:76:39:07:87:59:97:78:35:19:84:1e:f0:02:0e:96:eb:
f8:2c:91:69:e1:24:67:2c:e6:9f:0c:af:ef:25:c8:50:24:2e:
5a:3d:89:cf:93:01:3e:fe:3d:d8:6d:6c:32:5f:3a:bc:d3:4c:
2c:a4:f8:82:b7:18:93:a7:ab:5c:64:58:c1:f0:c6:c5:77:06:
bc:22:7a:40:e9:6b:54:77:e3:3f:95:44:62:15:8e:f6:52:58:
83:2c:cc:b1:52:77:32:ad:72:67:3c:f0:a1:af:ac:ed:05:43:
8a:a2:a6:a8:fb:ec:7a:39:a1:ff:03:11:d9:0d:1a:5a:c2:78:
99:93:fb:ce:21:48:0c:77:f0:b6:b9:c0:bb:5e:ea:03:c3:5c:
a3:5a:69:2a:e9:48:c3:e6:56:46:41:5e:f9:72:dc:3b:d5:09:
1a:da:e5:27:44:17:00:46:e1:51:53:90:32:1a:23:2a:94:e2:
15:4e:1d:b8:99:e9:57:74:8c:85:77:21:9f:9d:b8:05:04:0e:
87:de:4d:0d:a1:21:c7:41:5e:49:b1:20:c6:eb:97:ae:59:68:
2c:a2:28:1d:f7:db:d0:0a:c7:22:32:c5:05:40:73:e8:06:50:
2b:ad:b8:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRpdpYIiA6bEanlQuBS9vhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE1MTAxNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjUwYWU0NjdjMWEyYmZmMGY3ZDNiMWI5MDVjYzc2YWZlYmZjNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uX2B26r+i3aCUnpAPYxSEr4j/0+
kPkiXN2l7uzB+YHtt73LtwHe6u/UxjFjHf4UqOjx8Qlk8d29TZrxCLPwHygWVoEJ
H/9UPwo2eHYwNCEKDOuGNWPU1vf6hDqQ1U7Edw6n++QwfeoRqAqvQMtSvET+Riqd
n2mniu4f+gn1+T1H/LGOqUP8ZwCdlpMQZwPirJaxGQvNfxYud7HPUc8NOk3/4fj9
s14XKy9SXKoU5WDpiOz6p4IYJJMnkWLRkwMgkJLSZBpuVDy4YZhI3RxZ78vJKcVN
yvOmCBOL3XalfAl6bfxX1BAfaFqguxcVFYLvILRr/79Gi6arow4DLB6R6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9QrkZ8Giv/D307G5Bcx2r+v8WHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUDFDdVJud2FLXzhQZlRzYmtGekhhdjZfeFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/OIMA0G
CSqGSIb3DQEBCwUAA4IBAQAtI8PWRUVgS3bZt5GQ++gYYPHX3nY5B4dZl3g1GYQe
8AIOluv4LJFp4SRnLOafDK/vJchQJC5aPYnPkwE+/j3YbWwyXzq800wspPiCtxiT
p6tcZFjB8MbFdwa8InpA6WtUd+M/lURiFY72UliDLMyxUncyrXJnPPChr6ztBUOK
oqao++x6OaH/AxHZDRpawniZk/vOIUgMd/C2ucC7XuoDw1yjWmkq6UjD5lZGQV75
ctw71Qka2uUnRBcARuFRU5AyGiMqlOIVTh24melXdIyFdyGfnbgFBA6H3k0NoSHH
QV5JsSDG65euWWgsoigd99vQCsciMsUFQHPoBlArrbgv
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:01 2025 by rpki-client