Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/g5_NiyFCJwhgSZW7w46r11iGZbw.roa
File: g5_NiyFCJwhgSZW7w46r11iGZbw.roa (raw, json)
Hash identifier: lbthaEPFQvl4+AqOV1yhttCiBcSx4ghT5WpO0zzOVd4=
Subject key identifier: 83:9F:CD:8B:21:42:27:08:60:49:95:BB:C3:8E:AB:D7:58:86:65:BC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B5F12306A0FC70F7ADC25DEFADC26022
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/g5_NiyFCJwhgSZW7w46r11iGZbw.roa
Signing time: Thu 30 Jan 2025 06:41:06 +0000
ROA not before: Thu 30 Jan 2025 06:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 151.242.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:f1:23:06:a0:fc:70:f7:ad:c2:5d:ef:ad:c2:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 30 06:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=839fcd8b21422708604995bbc38eabd7588665bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:98:61:71:e5:f5:bd:32:9e:2e:5d:88:e9:
74:ba:d0:55:75:56:2a:a7:7d:46:41:31:20:6b:98:
d0:3a:d7:dd:0f:85:91:9a:31:5f:5d:f3:80:8a:96:
dc:7c:d5:73:e8:c6:a9:91:0e:6b:79:4e:17:a2:06:
01:00:59:6a:6c:5a:9f:4b:5c:47:8b:21:d3:b8:63:
a3:19:1f:39:4d:a8:88:b1:11:43:cd:64:d6:3b:4e:
83:12:db:81:45:9e:3e:6e:ec:35:8f:5c:36:94:b3:
91:04:de:e5:d4:c7:bf:c4:9d:13:c1:aa:84:92:67:
b5:77:db:df:f1:65:1e:55:69:02:39:ae:c8:96:a4:
3a:c3:9d:f3:76:3c:9a:b9:78:6e:9a:14:8a:54:62:
18:63:08:c9:c9:94:17:bf:f0:d1:66:36:90:77:b7:
b5:9a:6f:66:30:ad:74:89:f1:a9:2c:1f:70:d2:0e:
74:53:e0:e0:2b:dd:a9:6a:8c:ef:51:b8:b5:9d:57:
f1:3d:e0:97:45:32:33:dc:6d:38:c4:f7:5e:30:c2:
33:56:a6:c6:61:fb:58:ee:3d:da:4d:5b:1e:f9:d9:
50:96:cd:01:fd:d4:6f:ce:e0:59:5a:c8:eb:70:36:
17:ff:de:a3:59:ba:65:75:a2:c1:fe:95:cd:fd:40:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:CD:8B:21:42:27:08:60:49:95:BB:C3:8E:AB:D7:58:86:65:BC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/g5_NiyFCJwhgSZW7w46r11iGZbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f0:5a:17:e9:2d:f0:bb:5f:ca:09:b0:da:0b:44:d1:53:9e:
d3:48:47:b5:ae:d3:39:59:9d:a0:be:6d:ac:26:47:9e:7c:a6:
19:61:45:57:1b:82:e4:30:a0:13:4c:9e:64:a2:0d:f7:d2:f2:
a8:d3:73:25:2a:f7:2b:26:33:57:79:d5:a5:d0:5f:48:62:7a:
39:1c:89:c1:00:e4:35:b7:31:42:c0:ab:e9:9a:a9:7c:7a:79:
c0:8d:af:95:27:c8:8e:d5:58:84:4a:8d:64:17:10:97:78:07:
99:3a:98:84:dd:b9:5a:1a:20:3d:7d:fc:7d:c4:73:ec:67:8d:
ae:39:37:f4:9a:5c:27:ab:67:1b:f0:d2:72:bc:8c:fa:02:33:
29:71:7f:6a:aa:b2:78:35:58:85:9e:ce:36:ce:68:68:c9:f1:
26:67:fd:94:c3:71:3e:99:b1:4e:7f:20:1a:92:4b:44:b4:65:
96:c7:f8:c6:f0:7c:a8:7f:62:d1:60:8b:91:22:6f:05:b4:58:
40:f7:5c:c4:77:83:43:6e:00:bb:1c:9a:2d:b7:9a:06:25:a7:
d0:92:ec:e6:d8:5a:1f:cf:7c:26:cc:b7:37:d3:c4:15:dd:2a:
32:7d:03:55:30:e5:e2:c8:1a:73:5d:99:b5:7d:ed:9b:12:42:
5e:cd:fa:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS18SMGoPxw963CXe+twmAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTMwMDY0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzlmY2Q4YjIxNDIyNzA4NjA0OTk1YmJjMzhlYWJkNzU4ODY2NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzWYYXHl9b0yni5diOl0utBVdVYq
p31GQTEga5jQOtfdD4WRmjFfXfOAipbcfNVz6MapkQ5reU4XogYBAFlqbFqfS1xH
iyHTuGOjGR85TaiIsRFDzWTWO06DEtuBRZ4+buw1j1w2lLORBN7l1Me/xJ0TwaqE
kme1d9vf8WUeVWkCOa7IlqQ6w53zdjyauXhumhSKVGIYYwjJyZQXv/DRZjaQd7e1
mm9mMK10ifGpLB9w0g50U+DgK92paozvUbi1nVfxPeCXRTIz3G04xPdeMMIzVqbG
YftY7j3aTVse+dlQls0B/dRvzuBZWsjrcDYX/96jWbpldaLB/pXN/UBRowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOfzYshQicIYEmVu8OOq9dYhmW8MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZzVfTml5RkNKd2hnU1pXN3c0NnIxMWlHWmJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/LyMA0G
CSqGSIb3DQEBCwUAA4IBAQCs8FoX6S3wu1/KCbDaC0TRU57TSEe1rtM5WZ2gvm2s
JkeefKYZYUVXG4LkMKATTJ5kog330vKo03MlKvcrJjNXedWl0F9IYno5HInBAOQ1
tzFCwKvpmql8ennAja+VJ8iO1ViESo1kFxCXeAeZOpiE3blaGiA9ffx9xHPsZ42u
OTf0mlwnq2cb8NJyvIz6AjMpcX9qqrJ4NViFns42zmhoyfEmZ/2Uw3E+mbFOfyAa
kktEtGWWx/jG8Hyof2LRYIuRIm8FtFhA91zEd4NDbgC7HJott5oGJafQkuzm2Fof
z3wmzLc308QV3SoyfQNVMOXiyBpzXZm1fe2bEkJezfqe
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:53:10 2025 by rpki-client