Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iEwyrmsyQ0rNZy1AaL94j96HzuE.roa
File: iEwyrmsyQ0rNZy1AaL94j96HzuE.roa (raw, json)
Hash identifier: Bis8SA1Bnv1QUeaB48hzq0BbAfYBW+cEFq+RFy/OASk=
Subject key identifier: 88:4C:32:AE:6B:32:43:4A:CD:67:2D:40:68:BF:78:8F:DE:87:CE:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946972EB3BCA1223E0C09E743EAA789F25
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iEwyrmsyQ0rNZy1AaL94j96HzuE.roa
Signing time: Wed 15 Jan 2025 10:12:06 +0000
ROA not before: Wed 15 Jan 2025 10:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 151.242.1.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.10.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.83.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.85.0/24 maxlen: 24
151.242.86.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.89.0/24 maxlen: 24
151.242.90.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:72:eb:3b:ca:12:23:e0:c0:9e:74:3e:aa:78:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 10:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=884c32ae6b32434acd672d4068bf788fde87cee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:df:10:b2:13:8d:12:65:af:c0:36:48:d6:
e3:5d:cb:ca:19:c0:a2:fd:e8:46:c2:7d:a9:54:c0:
5d:3a:cf:71:aa:78:fe:e5:a2:2a:97:83:8b:f1:2e:
e2:ba:9a:28:f3:ac:de:79:3c:fd:47:25:95:20:9d:
73:2f:41:7c:7e:97:3c:25:e5:36:f6:c7:8a:1e:c6:
d2:43:9f:bd:76:ea:4c:2f:ab:85:7b:bc:51:73:c2:
1e:b8:ca:4c:ea:34:d1:3c:9d:60:7e:80:f5:22:d3:
69:16:10:ce:2a:76:f9:eb:ac:3a:f9:63:55:58:e2:
9d:b0:50:0c:e1:9a:d5:07:5c:22:05:47:40:fd:33:
b4:a9:51:ca:c9:5a:d6:b5:ab:3d:c4:0c:10:17:56:
05:84:47:3f:7a:a4:4f:ec:05:2e:49:2a:3d:7b:f6:
27:49:61:c8:66:99:42:6a:0f:0b:83:a6:c1:16:39:
b9:ac:f8:28:cb:84:8c:e7:2f:99:20:c4:6b:43:13:
32:12:af:ab:67:7b:f6:91:63:2b:1e:b2:2f:83:51:
55:04:63:86:5c:9f:b1:bd:3c:bf:be:7b:b6:40:30:
bb:2c:05:dd:05:68:e4:1c:a1:53:22:e2:3f:e0:4e:
cc:e3:b0:d6:b5:91:f0:52:b5:6d:06:02:65:63:c7:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:32:AE:6B:32:43:4A:CD:67:2D:40:68:BF:78:8F:DE:87:CE:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iEwyrmsyQ0rNZy1AaL94j96HzuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.1.0/24
151.242.4.0/24
151.242.7.0/24
151.242.10.0/24
151.242.12.0/24
151.242.15.0/24
151.242.17.0/24
151.242.20.0/24
151.242.23.0/24
151.242.26.0/24
151.242.29.0/24
151.242.32.0/24
151.242.73.0-151.242.91.255
Signature Algorithm: sha256WithRSAEncryption
a3:7c:88:82:bb:38:7f:61:e1:1a:fc:af:65:3f:66:42:f2:6a:
aa:17:a7:f7:83:2a:35:27:39:9c:20:79:5f:67:a9:44:4e:dd:
7c:f1:89:07:77:0b:4f:be:91:e3:b1:d9:72:69:2c:46:50:31:
a8:b4:b7:ed:f9:9a:9b:4d:71:b3:99:a7:71:b3:fd:52:6f:e6:
02:f2:bb:58:35:d8:27:cf:df:c8:20:38:ea:d2:f8:96:41:52:
c1:a0:e8:66:23:06:26:33:d0:de:2d:1c:04:f0:d4:13:6d:b8:
35:36:7b:8d:81:a3:2b:14:ad:f3:1f:54:cd:38:f0:62:20:65:
5a:0f:e6:3f:fd:50:3d:5b:88:00:6d:09:45:c3:0a:1e:54:56:
d3:a5:43:37:e2:eb:e6:47:fa:c1:0b:5e:cd:52:7b:33:2a:71:
86:03:24:17:77:e5:65:8d:6c:24:dc:52:3b:71:12:6d:1e:8d:
06:b7:34:2e:d1:8a:a6:dd:7c:f8:af:51:39:0c:77:19:e1:b9:
f1:19:3f:30:c2:c9:fc:ba:97:58:ae:87:ac:75:0a:a5:ce:16:
0c:3e:93:5b:68:a2:ad:12:5e:71:2a:a1:5a:fa:5a:36:62:45:
b7:ca:9d:36:ac:a8:b0:09:fc:fa:f8:df:a5:66:d1:73:22:20:
a9:1e:2e:c0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZRpcus7yhIj4MCedD6qeJ8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE1MTAxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODRjMzJhZTZiMzI0MzRhY2Q2NzJkNDA2OGJmNzg4ZmRlODdjZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7HfELITjRJlr8A2SNbjXcvKGcCi
/ehGwn2pVMBdOs9xqnj+5aIql4OL8S7iupoo86zeeTz9RyWVIJ1zL0F8fpc8JeU2
9seKHsbSQ5+9dupML6uFe7xRc8IeuMpM6jTRPJ1gfoD1ItNpFhDOKnb566w6+WNV
WOKdsFAM4ZrVB1wiBUdA/TO0qVHKyVrWtas9xAwQF1YFhEc/eqRP7AUuSSo9e/Yn
SWHIZplCag8Lg6bBFjm5rPgoy4SM5y+ZIMRrQxMyEq+rZ3v2kWMrHrIvg1FVBGOG
XJ+xvTy/vnu2QDC7LAXdBWjkHKFTIuI/4E7M47DWtZHwUrVtBgJlY8cn1wIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFIhMMq5rMkNKzWctQGi/eI/eh87hMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaUV3eXJtc3lRMHJOWnkxQWFMOTRqOTZIenVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAl/IBAwQA
l/IEAwQAl/IHAwQAl/IKAwQAl/IMAwQAl/IPAwQAl/IRAwQAl/IUAwQAl/IXAwQA
l/IaAwQAl/IdAwQAl/IgMAwDBACX8kkDBAKX8lgwDQYJKoZIhvcNAQELBQADggEB
AKN8iIK7OH9h4Rr8r2U/ZkLyaqoXp/eDKjUnOZwgeV9nqURO3XzxiQd3C0++keOx
2XJpLEZQMai0t+35mptNcbOZp3Gz/VJv5gLyu1g12CfP38ggOOrS+JZBUsGg6GYj
BiYz0N4tHATw1BNtuDU2e42BoysUrfMfVM048GIgZVoP5j/9UD1biABtCUXDCh5U
VtOlQzfi6+ZH+sELXs1SezMqcYYDJBd35WWNbCTcUjtxEm0ejQa3NC7RiqbdfPiv
UTkMdxnhufEZPzDCyfy6l1iuh6x1CqXOFgw+k1tooq0SXnEqoVr6WjZiRbfKnTas
qLAJ/Pr436Vm0XMiIKkeLsA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:20:03 2025 by rpki-client