Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W5xltMJ8huXs_dDv5Q8pc28kqPE.roa
File: W5xltMJ8huXs_dDv5Q8pc28kqPE.roa (raw, json)
Hash identifier: TDxlc8GnBrq7i/uWuqYNlI2999rUizCYxuRM6ezB1Ww=
Subject key identifier: 5B:9C:65:B4:C2:7C:86:E5:EC:FD:D0:EF:E5:0F:29:73:6F:24:A8:F1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193E3A680C52E3F75733350316AC9B7DE66
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W5xltMJ8huXs_dDv5Q8pc28kqPE.roa
Signing time: Fri 20 Dec 2024 10:39:20 +0000
ROA not before: Fri 20 Dec 2024 10:39:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:a6:80:c5:2e:3f:75:73:33:50:31:6a:c9:b7:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 20 10:39:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b9c65b4c27c86e5ecfdd0efe50f29736f24a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:50:69:4c:50:de:a6:b7:32:fd:55:2c:c1:
92:72:ad:74:1e:a4:2c:e8:b0:03:68:8c:94:bb:08:
11:57:5b:22:34:53:7b:ee:8e:82:0f:07:8a:cc:3e:
dc:42:aa:2c:d9:7a:aa:c4:90:bb:6e:c4:37:c7:7b:
b9:bd:7a:27:fc:29:5e:d7:2b:58:8f:0a:a4:c0:58:
77:e5:bf:67:24:71:42:87:22:c8:0a:76:24:fd:b7:
23:ef:06:7d:bb:e0:1a:e1:e6:2d:d9:47:4a:d2:44:
1d:de:6c:26:b0:b9:fd:21:21:86:e5:da:0c:43:7e:
e9:e2:f7:a6:92:1f:93:e4:66:15:9d:ee:83:8f:0d:
36:9d:f1:a2:d1:b3:93:ca:ed:55:60:aa:fa:91:8d:
39:f4:c7:76:10:28:11:6a:36:59:a0:52:d5:e5:bd:
73:87:58:58:a0:69:dc:80:1c:a4:bb:ad:6d:7f:58:
56:ba:ae:26:9f:cf:86:dd:0a:e6:03:a0:88:3c:08:
4f:9d:19:bb:04:a2:c2:cd:80:00:59:25:b8:a9:0f:
7a:4e:d0:84:52:fa:eb:b3:ee:6e:4e:81:dd:86:2a:
ca:1a:de:21:61:ca:dc:8a:06:4f:63:6a:ea:f8:b4:
3e:dd:b6:95:5e:86:44:6a:c4:c8:c0:c8:2c:bf:35:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:65:B4:C2:7C:86:E5:EC:FD:D0:EF:E5:0F:29:73:6F:24:A8:F1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W5xltMJ8huXs_dDv5Q8pc28kqPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.137.0/24
151.243.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1c:1a:4c:ea:25:ed:d0:87:6a:e1:89:62:1e:39:f4:fe:da:
27:15:80:88:65:e4:82:03:d6:e4:7a:c1:e6:68:90:be:ba:24:
91:68:7e:4b:05:67:13:b1:bd:60:7c:92:17:44:f6:c3:5d:b0:
fd:36:eb:3f:19:63:dc:b4:00:88:e5:e3:97:b4:39:3e:b9:40:
9d:e4:4e:03:c3:b0:bc:77:65:1c:ed:ce:df:22:a9:30:08:fd:
04:dd:1e:ab:59:a0:de:9c:5b:11:56:ae:51:43:86:f3:e1:5e:
74:79:9f:c7:d5:1d:c4:74:57:13:e6:f7:bb:e2:34:11:8b:9b:
ce:90:7a:21:94:88:70:6b:d4:52:36:d2:ae:c9:b3:d2:0c:a4:
ab:f0:25:2f:12:77:47:0f:49:5b:b0:d0:5b:b9:0f:6a:39:0a:
c3:bf:73:29:05:df:58:2d:d6:21:31:a7:82:cb:2f:21:33:14:
0a:6e:e9:99:cc:4b:c4:68:10:e5:f2:9b:88:8e:2b:2d:ba:ec:
78:bd:72:92:ca:1d:d8:56:bb:0c:7f:95:33:df:f6:65:94:cd:
a4:8b:4d:5a:45:e2:60:4d:cf:a3:08:b9:e7:eb:c7:78:26:33:
51:e8:68:ba:9c:ff:8a:6e:d2:aa:7b:9b:c0:88:5e:5a:63:88:
7e:99:dc:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPjpoDFLj91czNQMWrJt95mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMjIwMTAzOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjljNjViNGMyN2M4NmU1ZWNmZGQwZWZlNTBmMjk3MzZmMjRhOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39FQaUxQ3qa3Mv1VLMGScq10HqQs
6LADaIyUuwgRV1siNFN77o6CDweKzD7cQqos2XqqxJC7bsQ3x3u5vXon/Cle1ytY
jwqkwFh35b9nJHFChyLICnYk/bcj7wZ9u+Aa4eYt2UdK0kQd3mwmsLn9ISGG5doM
Q37p4vemkh+T5GYVne6Djw02nfGi0bOTyu1VYKr6kY059Md2ECgRajZZoFLV5b1z
h1hYoGncgByku61tf1hWuq4mn8+G3QrmA6CIPAhPnRm7BKLCzYAAWSW4qQ96TtCE
Uvrrs+5uToHdhirKGt4hYcrcigZPY2rq+LQ+3baVXoZEasTIwMgsvzVtPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFucZbTCfIbl7P3Q7+UPKXNvJKjxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVzV4bHRNSjhodVhzX2REdjVROHBjMjhrcVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OJAwQA
l/OiMA0GCSqGSIb3DQEBCwUAA4IBAQCfHBpM6iXt0Idq4YliHjn0/tonFYCIZeSC
A9bkesHmaJC+uiSRaH5LBWcTsb1gfJIXRPbDXbD9Nus/GWPctACI5eOXtDk+uUCd
5E4Dw7C8d2Uc7c7fIqkwCP0E3R6rWaDenFsRVq5RQ4bz4V50eZ/H1R3EdFcT5ve7
4jQRi5vOkHohlIhwa9RSNtKuybPSDKSr8CUvEndHD0lbsNBbuQ9qOQrDv3MpBd9Y
LdYhMaeCyy8hMxQKbumZzEvEaBDl8puIjistuux4vXKSyh3YVrsMf5Uz3/ZllM2k
i01aReJgTc+jCLnn68d4JjNR6Gi6nP+KbtKqe5vAiF5aY4h+mdwM
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:25:51 2025 by rpki-client