Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f6ksuIf6H4A6LphpKejVZ2jsxMU.roa
File: f6ksuIf6H4A6LphpKejVZ2jsxMU.roa (raw, json)
Hash identifier: GeLyAurSWNSdcAk+68DwEzeitg5y6n2QS/ObPZpkzpo=
Subject key identifier: 7F:A9:2C:B8:87:FA:1F:80:3A:2E:98:69:29:E8:D5:67:68:EC:C4:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019465695D3CCAB5F8DA671FE1C1A49A9905
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f6ksuIf6H4A6LphpKejVZ2jsxMU.roa
Signing time: Tue 14 Jan 2025 15:23:11 +0000
ROA not before: Tue 14 Jan 2025 15:23:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12189
IP address blocks: 151.243.136.0/22 maxlen: 22
151.243.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:69:5d:3c:ca:b5:f8:da:67:1f:e1:c1:a4:9a:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 14 15:23:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fa92cb887fa1f803a2e986929e8d56768ecc4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:0d:a9:11:06:c5:d0:df:35:54:42:1e:02:
c3:d2:74:05:9a:22:7f:e9:03:f1:b0:e4:81:0b:b1:
ec:53:65:0a:29:93:17:54:92:7a:eb:a2:64:a1:c8:
4d:e1:69:3f:05:3c:10:80:da:82:b4:ac:f1:6e:dc:
6e:50:7e:78:04:65:09:2a:b8:76:40:58:7d:01:52:
40:8d:60:e6:68:1e:9d:ea:f0:1e:03:00:bb:cd:83:
25:3c:55:30:25:7a:8e:7a:0f:bb:71:24:80:6c:bf:
84:c6:f9:0c:ef:f8:c1:d9:aa:a4:b9:91:be:e1:2a:
ed:e9:e3:0c:76:06:57:a1:a2:23:cf:55:17:24:4b:
dc:a6:c4:61:ca:07:ba:1c:40:32:91:a2:87:88:c3:
60:e1:b7:d3:92:8b:92:75:b1:5b:55:13:f6:a8:8e:
10:c8:71:27:a7:3c:71:1d:f3:07:6a:56:f4:bc:32:
4c:99:5b:1c:69:4e:48:de:58:61:f9:a5:6b:11:74:
81:aa:08:61:45:ad:85:03:be:76:4d:26:b1:c3:30:
e2:69:39:ac:17:75:1e:00:80:27:75:9e:0d:eb:79:
d2:3a:41:ec:16:fc:96:cf:ee:ae:10:b4:b2:dc:fe:
8d:cb:ea:75:db:15:5e:c2:1c:5c:89:53:5a:01:3e:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:2C:B8:87:FA:1F:80:3A:2E:98:69:29:E8:D5:67:68:EC:C4:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f6ksuIf6H4A6LphpKejVZ2jsxMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.136.0/22
151.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
03:a1:6b:78:54:d6:ba:fd:25:2c:aa:1c:7c:6f:39:79:1f:ec:
8b:99:c3:71:0d:11:ec:84:67:a1:b2:79:2b:29:57:bb:69:ff:
32:4c:8e:22:e7:08:60:9e:b4:09:02:8c:5b:ea:92:3f:85:85:
4a:b5:7a:28:ef:cc:92:10:83:24:f6:6e:bb:bd:1e:8d:5a:33:
94:57:bd:6f:da:78:c9:29:96:67:8b:cd:c0:11:25:5c:70:31:
36:d5:01:3e:0a:fc:cf:13:f0:26:63:0c:e5:b4:74:af:6c:d6:
b5:77:8f:f9:57:0a:b6:25:fb:71:8f:f4:23:9d:b7:55:2a:d8:
a1:24:c9:d9:3b:56:36:dc:75:b8:4d:47:40:2c:20:04:c2:12:
e2:ab:97:be:b6:27:34:dc:6c:eb:18:27:4e:bc:e3:f0:26:d7:
65:57:68:18:38:55:9a:eb:cc:3f:c6:09:9a:2c:2f:48:46:73:
23:96:08:ee:0d:e8:ce:7d:29:73:09:23:21:da:02:3d:45:eb:
82:f4:b3:8b:d3:5c:5d:bf:e8:f0:fd:37:53:7f:2f:b1:da:14:
2d:0a:ea:6b:d9:4d:fa:2c:4d:1c:07:8a:f5:5c:6b:d3:b0:ba:
22:47:cf:8c:cf:f5:d5:01:b1:3a:b9:7c:32:fa:0c:31:b1:60:
29:86:f7:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRlaV08yrX42mcf4cGkmpkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE0MTUyMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE5MmNiODg3ZmExZjgwM2EyZTk4NjkyOWU4ZDU2NzY4ZWNjNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWENqREGxdDfNVRCHgLD0nQFmiJ/
6QPxsOSBC7HsU2UKKZMXVJJ666JkochN4Wk/BTwQgNqCtKzxbtxuUH54BGUJKrh2
QFh9AVJAjWDmaB6d6vAeAwC7zYMlPFUwJXqOeg+7cSSAbL+ExvkM7/jB2aqkuZG+
4Srt6eMMdgZXoaIjz1UXJEvcpsRhyge6HEAykaKHiMNg4bfTkouSdbFbVRP2qI4Q
yHEnpzxxHfMHalb0vDJMmVscaU5I3lhh+aVrEXSBqghhRa2FA752TSaxwzDiaTms
F3UeAIAndZ4N63nSOkHsFvyWz+6uELSy3P6Ny+p12xVewhxciVNaAT5y6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH+pLLiH+h+AOi6YaSno1Wdo7MTFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZjZrc3VJZjZINEE2THBocEtlalZaMmpzeE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/OIAwQC
l/OYMA0GCSqGSIb3DQEBCwUAA4IBAQADoWt4VNa6/SUsqhx8bzl5H+yLmcNxDRHs
hGehsnkrKVe7af8yTI4i5whgnrQJAoxb6pI/hYVKtXoo78ySEIMk9m67vR6NWjOU
V71v2njJKZZni83AESVccDE21QE+CvzPE/AmYwzltHSvbNa1d4/5Vwq2Jftxj/Qj
nbdVKtihJMnZO1Y23HW4TUdALCAEwhLiq5e+tic03GzrGCdOvOPwJtdlV2gYOFWa
68w/xgmaLC9IRnMjlgjuDejOfSlzCSMh2gI9ReuC9LOL01xdv+jw/TdTfy+x2hQt
Cupr2U36LE0cB4r1XGvTsLoiR8+Mz/XVAbE6uXwy+gwxsWAphvcf
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:22 2025 by rpki-client