Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9xoFMaWolzXC84gwEyAOWrDbYy8.roa
File: 9xoFMaWolzXC84gwEyAOWrDbYy8.roa (raw, json)
Hash identifier: UxIWRBAYguj4Pim2XlNsIxrCZaih3Ptapjky9Va6JBE=
Subject key identifier: F7:1A:05:31:A5:A8:97:35:C2:F3:88:30:13:20:0E:5A:B0:DB:63:2F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192B1501101E798C25E96B7C404B1CF3BF5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9xoFMaWolzXC84gwEyAOWrDbYy8.roa
Signing time: Mon 21 Oct 2024 23:01:07 +0000
ROA not before: Mon 21 Oct 2024 23:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214046
IP address blocks: 150.241.105.0/24 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b1:50:11:01:e7:98:c2:5e:96:b7:c4:04:b1:cf:3b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 23:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f71a0531a5a89735c2f3883013200e5ab0db632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:5f:8d:6c:de:61:e9:bd:24:f2:82:e4:46:
c6:d6:f5:34:78:f3:45:de:85:35:7a:7a:1f:b9:25:
04:0c:ec:da:e9:96:5a:b5:0c:ae:fd:d6:c3:71:93:
8e:8a:6a:17:d9:89:d4:53:86:76:cd:06:50:01:b4:
78:17:47:17:b7:96:d9:9c:cf:be:b1:60:4a:ba:d5:
cf:55:48:85:ef:4c:49:68:87:13:09:70:62:6a:12:
b1:32:fc:03:17:27:71:de:2b:24:3f:28:ea:2f:2c:
41:47:9d:49:ab:e3:5c:b5:15:86:30:0a:80:d8:9c:
d8:6f:ec:9c:8d:14:82:a6:4f:1d:93:37:83:11:ca:
6e:3f:4b:11:de:80:a7:4d:0d:d0:cf:1d:10:21:1b:
8a:9e:a9:31:c8:f4:6a:62:9b:5b:6b:42:96:49:b4:
0e:6c:5a:85:10:dc:51:b6:c1:19:21:39:b8:58:51:
da:19:b3:ea:0d:f9:2f:70:da:e2:44:87:5d:58:cb:
1a:9a:11:86:5e:c3:14:75:7d:f1:50:94:dd:02:ae:
b9:f7:9c:1f:eb:66:18:b5:27:67:db:02:4e:c9:fb:
01:ad:09:23:43:26:5d:3d:db:7f:91:17:27:ea:b0:
20:c1:62:b2:c3:e2:d2:f4:12:b2:4a:96:a7:bd:fe:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:05:31:A5:A8:97:35:C2:F3:88:30:13:20:0E:5A:B0:DB:63:2F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9xoFMaWolzXC84gwEyAOWrDbYy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
150.241.113.0-150.241.116.255
Signature Algorithm: sha256WithRSAEncryption
75:c3:4e:bb:ba:02:fd:87:51:9f:38:01:57:76:05:ff:dc:3d:
15:14:f8:9b:88:5a:cf:9a:5f:3f:eb:5f:b1:1a:d2:dc:53:8c:
85:bf:7c:0f:02:3f:8a:0c:9f:a8:aa:d4:9a:33:cb:a0:8d:ea:
51:e3:d6:ad:2f:06:d7:92:0d:21:18:a7:c7:c5:12:60:2a:1b:
41:3e:96:40:80:5b:dc:4e:f2:aa:ca:af:b2:09:82:88:66:1e:
d1:ca:a1:c4:3f:b0:39:a3:a7:cf:8d:1b:ff:25:29:09:87:cf:
cf:02:e9:9d:4b:22:96:e7:00:23:f9:df:34:e0:23:b8:e6:05:
0e:54:59:77:c8:37:4c:39:b9:8c:d2:09:65:dd:23:55:7f:69:
59:a9:58:35:af:8f:67:41:14:74:5d:a0:62:6f:6a:98:de:0a:
17:0f:be:b0:6b:72:ca:95:4c:d9:67:e9:9a:95:07:a3:00:12:
00:16:41:8e:01:65:3f:44:aa:93:71:16:60:a0:01:59:83:1c:
7c:a1:74:1d:6d:da:3a:5c:00:f0:bd:03:f8:70:f1:1f:da:ca:
b7:0a:63:69:46:dd:7a:90:82:92:83:8f:65:fe:0b:e7:7a:96:
bb:00:b1:1b:a5:50:04:f2:55:27:df:5d:34:0f:85:be:d0:53:
89:25:02:d8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZKxUBEB55jCXpa3xASxzzv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQxMDIxMjMwMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFhMDUzMWE1YTg5NzM1YzJmMzg4MzAxMzIwMGU1YWIwZGI2MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrJfjWzeYem9JPKC5EbG1vU0ePNF
3oU1enofuSUEDOza6ZZatQyu/dbDcZOOimoX2YnUU4Z2zQZQAbR4F0cXt5bZnM++
sWBKutXPVUiF70xJaIcTCXBiahKxMvwDFydx3iskPyjqLyxBR51Jq+NctRWGMAqA
2JzYb+ycjRSCpk8dkzeDEcpuP0sR3oCnTQ3Qzx0QIRuKnqkxyPRqYptba0KWSbQO
bFqFENxRtsEZITm4WFHaGbPqDfkvcNriRIddWMsamhGGXsMUdX3xUJTdAq6595wf
62YYtSdn2wJOyfsBrQkjQyZdPdt/kRcn6rAgwWKyw+LS9BKySpanvf7BsQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPcaBTGlqJc1wvOIMBMgDlqw22MvMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOXhvRk1hV29selhDODRnd0V5QU9XckRiWXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAlvFpMAwD
BACW8XEDBACW8XQwDQYJKoZIhvcNAQELBQADggEBAHXDTru6Av2HUZ84AVd2Bf/c
PRUU+JuIWs+aXz/rX7Ea0txTjIW/fA8CP4oMn6iq1Jozy6CN6lHj1q0vBteSDSEY
p8fFEmAqG0E+lkCAW9xO8qrKr7IJgohmHtHKocQ/sDmjp8+NG/8lKQmHz88C6Z1L
IpbnACP53zTgI7jmBQ5UWXfIN0w5uYzSCWXdI1V/aVmpWDWvj2dBFHRdoGJvapje
ChcPvrBrcsqVTNln6ZqVB6MAEgAWQY4BZT9EqpNxFmCgAVmDHHyhdB1t2jpcAPC9
A/hw8R/ayrcKY2lG3XqQgpKDj2X+C+d6lrsAsRulUATyVSffXTQPhb7QU4klAtg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:57 2025 by rpki-client