Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1vircYxh5-jeyCHncAB4LncMdwU.roa
File: 1vircYxh5-jeyCHncAB4LncMdwU.roa (raw, json)
Hash identifier: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=
Subject key identifier: D6:F8:AB:71:8C:61:E7:E8:DE:C8:21:E7:70:00:78:2E:77:0C:77:05
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B59353B6FD013B4A81434FC3C3BE6
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1vircYxh5-jeyCHncAB4LncMdwU.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59709
IP address blocks: 151.252.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:35:3b:6f:d0:13:b4:a8:14:34:fc:3c:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f8ab718c61e7e8dec821e77000782e770c7705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:80:8c:1b:ee:c0:78:0d:1c:82:28:4e:18:
30:60:59:1e:00:c8:fd:f9:53:89:cf:ee:6b:ef:d8:
fe:73:f6:1e:f7:94:c6:15:41:a0:7f:a3:bd:37:68:
72:de:61:e3:81:68:99:35:3f:32:33:af:2a:28:c6:
59:5f:da:33:56:28:03:3a:e1:7b:7f:27:e2:76:c1:
d4:79:e5:ab:41:81:45:ab:50:64:ba:c4:e6:50:f9:
0e:da:95:bd:17:00:23:f5:40:47:c4:65:e2:df:83:
99:89:63:cd:a8:90:e4:15:a8:40:2e:58:f2:bc:f4:
6a:c6:97:46:c8:eb:76:92:d9:26:1b:43:7e:43:ab:
c6:19:6e:67:27:01:2a:2a:9d:ed:32:fe:f6:e8:a5:
b1:f8:8d:a0:b1:64:2e:03:2d:bd:f3:14:7b:ca:ec:
3b:49:e9:60:f5:6b:29:58:7c:5e:e6:4a:47:a7:39:
f4:9d:0e:75:24:a2:9c:78:19:1d:41:98:56:79:b2:
2e:dd:f3:dd:d6:dc:d0:0d:63:af:c2:8e:2a:2c:d7:
d0:47:8a:42:fc:e7:48:50:e7:5c:58:7c:1c:dd:75:
0b:4c:1a:e2:d1:4b:3f:3f:23:58:e2:dd:f6:1b:72:
66:dd:64:a8:1f:92:51:02:10:0d:3b:49:ea:4f:ff:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:AB:71:8C:61:E7:E8:DE:C8:21:E7:70:00:78:2E:77:0C:77:05
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/1vircYxh5-jeyCHncAB4LncMdwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.252.198.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4d:5c:2e:06:13:c9:43:80:41:5a:59:2c:51:08:16:7c:b1:
7a:9f:57:de:84:aa:25:50:8e:4a:13:c5:4f:13:5f:ce:ad:46:
6a:1f:bf:9b:28:3b:e5:85:41:a3:bd:52:84:ce:30:f1:2a:05:
75:86:ba:f4:39:4d:21:b6:d7:31:57:5e:f7:c3:0c:f0:c2:ec:
5f:7b:40:c8:41:6d:55:52:49:26:3d:87:51:e4:01:64:66:f5:
a3:07:b6:6f:e5:12:0f:f4:c8:43:31:96:09:c2:90:09:ec:c0:
94:d7:3e:ef:e9:66:ce:03:bc:19:1c:72:a0:99:24:ad:22:b5:
d8:c4:aa:cd:b6:e9:6f:b9:2f:35:9c:4a:5d:58:c6:2a:6c:4c:
e1:42:fa:0c:9c:ed:07:3f:79:d6:2a:e1:4a:81:53:12:bd:70:
ff:cc:02:98:1a:d7:13:2a:53:fb:93:3b:c9:99:73:20:5f:03:
d9:15:a5:b9:13:a4:9a:56:4a:b8:d6:94:e2:be:76:ae:34:f3:
7f:ff:47:7f:25:a1:ca:62:3a:12:0b:87:40:c0:5f:c4:dd:a9:
0a:6f:3e:56:26:27:ee:38:9d:f7:01:bc:4e:ca:68:6f:7c:2e:
8d:fe:b3:c6:30:e8:8a:b1:e4:be:5f:89:d5:32:ff:49:42:2f:
38:6e:2e:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma1k1O2/QE7SoFDT8PDvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwMTAyMDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY4YWI3MThjNjFlN2U4ZGVjODIxZTc3MDAwNzgyZTc3MGM3NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YGAjBvuwHgNHIIoThgwYFkeAMj9
+VOJz+5r79j+c/Ye95TGFUGgf6O9N2hy3mHjgWiZNT8yM68qKMZZX9ozVigDOuF7
fyfidsHUeeWrQYFFq1BkusTmUPkO2pW9FwAj9UBHxGXi34OZiWPNqJDkFahALljy
vPRqxpdGyOt2ktkmG0N+Q6vGGW5nJwEqKp3tMv726KWx+I2gsWQuAy298xR7yuw7
Selg9WspWHxe5kpHpzn0nQ51JKKceBkdQZhWebIu3fPd1tzQDWOvwo4qLNfQR4pC
/OdIUOdcWHwc3XULTBri0Us/PyNY4t32G3Jm3WSoH5JRAhANO0nqT/9q2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNb4q3GMYefo3sgh53AAeC53DHcFMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvMXZpcmNZeGg1LWpleUNIbmNBQjRMbmNNZHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/zGMA0G
CSqGSIb3DQEBCwUAA4IBAQBVTVwuBhPJQ4BBWlksUQgWfLF6n1fehKolUI5KE8VP
E1/OrUZqH7+bKDvlhUGjvVKEzjDxKgV1hrr0OU0httcxV173wwzwwuxfe0DIQW1V
UkkmPYdR5AFkZvWjB7Zv5RIP9MhDMZYJwpAJ7MCU1z7v6WbOA7wZHHKgmSStIrXY
xKrNtulvuS81nEpdWMYqbEzhQvoMnO0HP3nWKuFKgVMSvXD/zAKYGtcTKlP7kzvJ
mXMgXwPZFaW5E6SaVkq41pTivnauNPN//0d/JaHKYjoSC4dAwF/E3akKbz5WJifu
OJ33AbxOymhvfC6N/rPGMOiKseS+X4nVMv9JQi84bi6K
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:54:08 2025 by rpki-client