Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j96WsS_mSSjTeZ0nvz_ij1vwC2A.roa
File: j96WsS_mSSjTeZ0nvz_ij1vwC2A.roa (raw, json)
Hash identifier: QflTIzAEzU2fh91zKAuE66gwpAda+kkKlfS2jELcke0=
Subject key identifier: 8F:DE:96:B1:2F:E6:49:28:D3:79:9D:27:BF:3F:E2:8F:5B:F0:0B:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01941B8D18749A4648C933F13EAB1A7C6316
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j96WsS_mSSjTeZ0nvz_ij1vwC2A.roa
Signing time: Tue 31 Dec 2024 07:10:19 +0000
ROA not before: Tue 31 Dec 2024 07:10:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:8d:18:74:9a:46:48:c9:33:f1:3e:ab:1a:7c:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 31 07:10:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fde96b12fe64928d3799d27bf3fe28f5bf00b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:af:af:83:a3:5e:40:d7:97:a3:13:55:fc:
7e:9a:92:db:2c:aa:5b:32:ad:24:d9:4c:1c:8c:c5:
a2:a8:ff:1d:78:55:bd:5e:c0:7b:03:99:f4:de:30:
af:db:ee:05:00:d3:21:7e:00:35:84:77:db:ec:57:
21:71:00:4b:9a:e1:0a:33:33:ec:b9:9c:9a:02:d0:
2a:d6:c5:82:64:77:66:77:93:25:e1:1e:09:9c:c3:
18:5e:5b:6c:12:88:b3:64:6b:e7:a8:91:a7:62:45:
6e:7d:d6:4b:5b:0f:f0:a6:cc:af:98:7c:96:e4:8d:
a8:36:97:4c:85:09:fb:66:3c:c3:f8:d3:1f:f9:9b:
15:aa:76:2f:a8:ea:53:b5:b8:43:ca:33:36:7a:29:
00:1f:b0:78:ac:90:3f:6f:b9:57:f9:4d:9e:ea:d2:
1a:5d:14:a8:41:02:e7:08:e5:6c:53:9d:b4:57:b9:
33:74:be:ff:8c:83:0a:0e:6d:49:51:f3:cc:59:c5:
4f:7b:42:09:f4:ca:45:f3:23:cb:09:8b:76:80:7b:
55:b2:26:f0:6e:3f:a3:13:54:6c:e9:8e:59:82:ac:
fa:7f:1a:86:a7:b3:ce:30:8e:72:4b:df:9f:2d:78:
1c:b5:67:61:0b:90:65:09:42:d4:f1:09:5d:53:0a:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:96:B1:2F:E6:49:28:D3:79:9D:27:BF:3F:E2:8F:5B:F0:0B:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j96WsS_mSSjTeZ0nvz_ij1vwC2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.110.0/24
151.242.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e3:62:a0:d4:c2:9b:40:01:1f:b3:0c:b0:4e:b0:6c:e3:46:
87:cd:1a:6e:a6:1c:7b:4a:c1:99:17:d8:c0:64:59:a2:c5:92:
4c:af:1b:47:3f:17:42:75:11:0e:d0:49:df:58:a7:3b:5c:84:
8a:48:7e:26:fe:ef:0d:a7:26:cc:ae:d0:65:52:e1:bd:12:71:
0e:18:94:5c:cc:7d:a5:0a:09:49:e3:5a:44:ec:b6:0a:72:d0:
38:e1:3f:6c:66:66:4a:3f:e2:fe:81:e5:c6:f6:14:43:e8:62:
76:ba:2a:33:88:43:78:9c:0c:dd:8f:bb:2a:69:63:30:54:6c:
69:3c:28:5c:14:33:bc:bd:3c:a6:bc:2a:89:07:61:8a:99:76:
25:6f:f2:eb:67:07:08:6c:42:74:06:19:dd:b1:c8:c6:94:11:
76:63:13:45:f9:d5:4b:05:af:47:67:0e:61:3a:ca:89:fd:17:
30:41:5d:0d:7a:e2:8c:ee:3b:ea:da:9a:59:7d:9f:5d:f7:46:
85:16:9d:a9:37:61:29:74:71:55:e2:68:e0:c8:09:61:d4:86:
be:c4:58:43:fc:e8:67:1b:7e:d7:99:ff:d3:73:bf:74:41:bc:
09:38:d3:1c:91:ed:af:03:d0:79:26:f6:04:fb:6b:d5:f5:f1:
65:38:4b:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQbjRh0mkZIyTPxPqsafGMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMjMxMDcxMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmRlOTZiMTJmZTY0OTI4ZDM3OTlkMjdiZjNmZTI4ZjViZjAwYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtyvr4OjXkDXl6MTVfx+mpLbLKpb
Mq0k2UwcjMWiqP8deFW9XsB7A5n03jCv2+4FANMhfgA1hHfb7FchcQBLmuEKMzPs
uZyaAtAq1sWCZHdmd5Ml4R4JnMMYXltsEoizZGvnqJGnYkVufdZLWw/wpsyvmHyW
5I2oNpdMhQn7ZjzD+NMf+ZsVqnYvqOpTtbhDyjM2eikAH7B4rJA/b7lX+U2e6tIa
XRSoQQLnCOVsU520V7kzdL7/jIMKDm1JUfPMWcVPe0IJ9MpF8yPLCYt2gHtVsibw
bj+jE1Rs6Y5Zgqz6fxqGp7POMI5yS9+fLXgctWdhC5BlCULU8QldUwrj3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI/elrEv5kko03mdJ78/4o9b8AtgMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvajk2V3NTX21TU2pUZVowbnZ6X2lqMXZ3QzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JuAwQA
l/J1MA0GCSqGSIb3DQEBCwUAA4IBAQBf42Kg1MKbQAEfswywTrBs40aHzRpuphx7
SsGZF9jAZFmixZJMrxtHPxdCdREO0EnfWKc7XISKSH4m/u8NpybMrtBlUuG9EnEO
GJRczH2lCglJ41pE7LYKctA44T9sZmZKP+L+geXG9hRD6GJ2uioziEN4nAzdj7sq
aWMwVGxpPChcFDO8vTymvCqJB2GKmXYlb/LrZwcIbEJ0BhndscjGlBF2YxNF+dVL
Ba9HZw5hOsqJ/RcwQV0NeuKM7jvq2ppZfZ9d90aFFp2pN2EpdHFV4mjgyAlh1Ia+
xFhD/OhnG37Xmf/Tc790QbwJONMcke2vA9B5JvYE+2vV9fFlOEtE
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:32 2025 by rpki-client