Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sq6K4b3V8B482e_luvFKupi4cAA.roa
File: Sq6K4b3V8B482e_luvFKupi4cAA.roa (raw, json)
Hash identifier: 2AeCale1wV4KH3BkeMoxq8gRFcNC1aa6up7aLo7JscE=
Subject key identifier: 4A:AE:8A:E1:BD:D5:F0:1E:3C:D9:EF:E5:BA:F1:4A:BA:98:B8:70:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019402D14E7AA74CFE5F72F973CF6D319124
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sq6K4b3V8B482e_luvFKupi4cAA.roa
Signing time: Thu 26 Dec 2024 11:54:19 +0000
ROA not before: Thu 26 Dec 2024 11:54:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60647
IP address blocks: 151.243.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:d1:4e:7a:a7:4c:fe:5f:72:f9:73:cf:6d:31:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 26 11:54:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aae8ae1bdd5f01e3cd9efe5baf14aba98b87000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:1f:82:44:3c:0e:90:e2:b0:67:d1:54:f7:
9c:2d:21:58:53:03:76:22:8c:81:d0:37:26:8d:03:
28:22:d7:59:1f:d3:b6:71:27:5b:5f:d1:da:fb:55:
75:09:a4:58:05:a1:94:50:45:17:e1:0d:d2:de:4a:
c1:ec:91:24:8a:46:bc:ac:10:32:04:4f:e0:92:dd:
9a:0b:12:ec:29:fe:aa:60:41:be:1f:29:28:ad:9c:
aa:75:fe:d7:92:19:05:e1:ba:15:f8:b0:ea:7f:9d:
1d:9c:ba:7f:f2:85:68:ae:cc:d9:44:0b:58:53:4b:
b1:d9:50:fe:67:39:b8:04:25:2a:f9:08:85:97:91:
08:1b:ed:85:fc:70:c5:75:fe:f9:d8:e2:d7:d6:f8:
4d:aa:bd:2e:2f:61:02:bf:3d:c1:5d:3b:58:ca:4e:
d1:64:3c:ed:cd:32:19:0d:c8:c4:aa:77:34:60:9c:
52:f4:55:e9:7a:18:5d:bc:57:5a:1d:24:e5:8c:bd:
2a:1a:55:33:2f:b3:53:38:aa:c8:7b:75:b2:01:8d:
f7:dd:c8:09:5e:54:f3:28:bd:bc:96:5e:34:e1:05:
8a:3e:b2:3f:69:a4:a2:bd:72:1b:49:c8:55:ee:55:
98:d9:35:fe:ce:4f:26:9c:d5:45:2e:cc:95:d2:50:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:8A:E1:BD:D5:F0:1E:3C:D9:EF:E5:BA:F1:4A:BA:98:B8:70:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sq6K4b3V8B482e_luvFKupi4cAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.222.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e2:95:fc:71:1a:f7:df:5e:dc:ba:43:1d:d1:37:4b:f5:38:
78:63:cc:e7:7e:3f:c7:00:93:8f:a3:f1:c4:d6:34:45:b9:a7:
9e:c2:13:71:10:7f:de:0b:b1:af:7c:6e:1a:e4:61:73:82:d7:
4e:50:84:1e:2e:be:18:83:e8:a3:6c:41:64:f3:7c:08:33:fb:
7a:2e:eb:63:b0:68:75:d6:f0:23:95:a0:eb:04:b5:95:cc:7c:
49:9d:f5:49:43:53:1b:84:a8:88:03:7c:45:ff:6e:f3:fb:30:
9c:eb:f3:0c:04:31:0f:13:0b:55:cc:aa:84:23:46:2d:a0:6b:
67:b0:32:2b:e6:9e:ee:81:87:34:0d:cd:c2:24:ec:d7:7d:98:
d4:91:9f:2a:e7:fc:a6:47:18:50:71:d7:ff:19:0d:21:28:dc:
62:2e:fe:09:11:a8:49:a7:76:e5:03:b9:ca:fd:24:02:48:e8:
fa:07:0c:29:fc:f5:ba:8d:27:8d:b6:14:42:6a:53:03:3c:c4:
42:74:de:f0:d7:7d:59:d0:b4:ba:fa:7a:eb:97:4e:68:7d:a6:
0c:29:7d:3a:d1:ce:80:2d:43:1b:bb:8a:c8:61:b4:33:5e:b0:
de:85:42:16:e9:5d:2d:a4:cb:89:1c:b8:58:77:e8:e2:ba:af:
66:e4:39:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQC0U56p0z+X3L5c89tMZEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMjI2MTE1NDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWFlOGFlMWJkZDVmMDFlM2NkOWVmZTViYWYxNGFiYTk4Yjg3MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxofgkQ8DpDisGfRVPecLSFYUwN2
IoyB0DcmjQMoItdZH9O2cSdbX9Ha+1V1CaRYBaGUUEUX4Q3S3krB7JEkika8rBAy
BE/gkt2aCxLsKf6qYEG+HykorZyqdf7XkhkF4boV+LDqf50dnLp/8oVorszZRAtY
U0ux2VD+Zzm4BCUq+QiFl5EIG+2F/HDFdf752OLX1vhNqr0uL2ECvz3BXTtYyk7R
ZDztzTIZDcjEqnc0YJxS9FXpehhdvFdaHSTljL0qGlUzL7NTOKrIe3WyAY333cgJ
XlTzKL28ll404QWKPrI/aaSivXIbSchV7lWY2TX+zk8mnNVFLsyV0lACTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEquiuG91fAePNnv5brxSrqYuHAAMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU3E2SzRiM1Y4QjQ4MmVfbHV2Rkt1cGk0Y0FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PeMA0G
CSqGSIb3DQEBCwUAA4IBAQA24pX8cRr3317cukMd0TdL9Th4Y8znfj/HAJOPo/HE
1jRFuaeewhNxEH/eC7GvfG4a5GFzgtdOUIQeLr4Yg+ijbEFk83wIM/t6LutjsGh1
1vAjlaDrBLWVzHxJnfVJQ1MbhKiIA3xF/27z+zCc6/MMBDEPEwtVzKqEI0YtoGtn
sDIr5p7ugYc0Dc3CJOzXfZjUkZ8q5/ymRxhQcdf/GQ0hKNxiLv4JEahJp3blA7nK
/SQCSOj6Bwwp/PW6jSeNthRCalMDPMRCdN7w131Z0LS6+nrrl05ofaYMKX060c6A
LUMbu4rIYbQzXrDehUIW6V0tpMuJHLhYd+jiuq9m5Dn/
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:29:49 2025 by rpki-client