Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eqMJF89ipI1j2FK9U5qVUMQj3q0.roa
File: eqMJF89ipI1j2FK9U5qVUMQj3q0.roa (raw, json)
Hash identifier: 3nERvNl6e2GVw2eDRjUBU9anZKGItOoCHdHGaYde/zo=
Subject key identifier: 7A:A3:09:17:CF:62:A4:8D:63:D8:52:BD:53:9A:95:50:C4:23:DE:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195409D93A64DDA184CD7912D0CB61B0966
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eqMJF89ipI1j2FK9U5qVUMQj3q0.roa
Signing time: Wed 26 Feb 2025 04:57:03 +0000
ROA not before: Wed 26 Feb 2025 04:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213800
IP address blocks: 151.243.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:9d:93:a6:4d:da:18:4c:d7:91:2d:0c:b6:1b:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 26 04:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa30917cf62a48d63d852bd539a9550c423dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:7e:24:c0:8d:6e:ff:a8:c0:da:c2:b7:6f:
cb:9b:36:ab:50:03:1d:d0:bb:4b:40:a1:69:3d:0e:
36:50:cb:4e:35:a0:c0:61:5e:4f:1c:06:c9:18:e0:
80:e1:ac:3f:71:3b:d7:81:86:66:61:d9:ed:d4:c2:
82:f4:59:d0:e1:41:7e:4e:4a:28:27:95:d9:e7:c4:
8d:a5:e1:ff:f6:c3:6e:90:b0:62:3b:ed:35:5a:a0:
cb:46:37:b3:b9:b0:f7:32:21:6d:88:73:4e:24:a8:
1a:e6:4c:7d:18:73:f4:e6:fc:c8:c2:82:8a:cb:b8:
c0:1a:65:7f:41:24:e5:1b:4c:03:ca:34:e7:0e:38:
94:64:50:89:39:19:23:5e:43:80:e5:8e:42:0e:82:
ff:58:85:02:87:bb:91:d5:26:60:cd:8f:6d:4a:e0:
b5:be:6f:7a:a5:41:eb:2e:45:85:c1:92:56:b2:de:
16:89:1d:f3:5b:35:d1:70:f3:9c:3b:30:24:45:44:
45:ea:a2:d3:38:d9:10:5b:37:f1:a8:40:f4:02:7a:
5e:5e:80:8d:f9:0f:17:6c:fc:80:5e:4d:e3:0c:d4:
0b:6c:e3:91:72:9a:7b:3f:a2:95:33:ad:a2:25:d7:
9d:38:7b:cb:b7:01:ea:f5:4e:c6:22:4b:18:51:1b:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:09:17:CF:62:A4:8D:63:D8:52:BD:53:9A:95:50:C4:23:DE:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eqMJF89ipI1j2FK9U5qVUMQj3q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:48:2f:9b:df:1a:58:77:89:e2:ae:d4:52:ff:56:26:f3:de:
ff:a9:e3:df:9e:6c:28:94:be:32:04:0d:d4:b9:7e:26:da:0a:
1c:85:a4:24:7f:4a:7e:16:cc:b1:38:1f:13:dc:c8:87:f9:5e:
33:6e:fb:2b:7e:cc:78:97:33:a9:65:97:06:82:1c:6a:2a:fc:
e4:bb:02:fc:8f:da:b3:12:96:04:29:27:f1:ff:f2:51:60:d6:
e4:55:27:a1:1f:bb:aa:f2:27:9e:ae:b3:4b:00:4e:d6:80:ce:
25:fa:d8:b5:8f:b9:de:eb:78:11:c1:5a:81:dc:60:98:70:56:
a6:44:43:d2:16:de:97:3f:f0:af:12:f8:b3:f2:ed:c2:0c:2c:
10:4c:9e:a4:d2:0e:a9:dd:0c:54:58:e5:03:85:5b:2d:d3:9c:
40:8c:8e:73:a8:0a:36:c6:62:d5:69:2e:63:34:a9:d9:37:8e:
ac:30:5a:8c:8a:e2:a4:4d:e7:5f:ce:3f:5d:30:79:44:a5:49:
d5:f9:c3:b7:13:98:83:69:30:78:32:2c:db:3b:3e:ca:cf:6d:
e1:b2:70:79:0a:4b:30:44:a8:a1:96:a3:84:d7:de:63:b0:91:
02:f6:c9:34:b7:83:52:35:0d:a5:f0:0b:be:2d:0f:37:79:f3:
53:84:91:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVAnZOmTdoYTNeRLQy2GwlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjI2MDQ1NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWEzMDkxN2NmNjJhNDhkNjNkODUyYmQ1MzlhOTU1MGM0MjNkZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZ+JMCNbv+owNrCt2/LmzarUAMd
0LtLQKFpPQ42UMtONaDAYV5PHAbJGOCA4aw/cTvXgYZmYdnt1MKC9FnQ4UF+Tkoo
J5XZ58SNpeH/9sNukLBiO+01WqDLRjezubD3MiFtiHNOJKga5kx9GHP05vzIwoKK
y7jAGmV/QSTlG0wDyjTnDjiUZFCJORkjXkOA5Y5CDoL/WIUCh7uR1SZgzY9tSuC1
vm96pUHrLkWFwZJWst4WiR3zWzXRcPOcOzAkRURF6qLTONkQWzfxqED0AnpeXoCN
+Q8XbPyAXk3jDNQLbOORcpp7P6KVM62iJdedOHvLtwHq9U7GIksYURtPQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqjCRfPYqSNY9hSvVOalVDEI96tMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZXFNSkY4OWlwSTFqMkZLOVU1cVZVTVFqM3EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OXMA0G
CSqGSIb3DQEBCwUAA4IBAQCuSC+b3xpYd4nirtRS/1Ym897/qePfnmwolL4yBA3U
uX4m2gochaQkf0p+FsyxOB8T3MiH+V4zbvsrfsx4lzOpZZcGghxqKvzkuwL8j9qz
EpYEKSfx//JRYNbkVSehH7uq8ieerrNLAE7WgM4l+ti1j7ne63gRwVqB3GCYcFam
REPSFt6XP/CvEviz8u3CDCwQTJ6k0g6p3QxUWOUDhVst05xAjI5zqAo2xmLVaS5j
NKnZN46sMFqMiuKkTedfzj9dMHlEpUnV+cO3E5iDaTB4MizbOz7Kz23hsnB5Cksw
RKihlqOE195jsJEC9sk0t4NSNQ2l8Au+LQ83efNThJEh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:28 2025 by rpki-client