Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/5XRUgfB6hT-K5PBqJMvomXzfVqk.roa
File: 5XRUgfB6hT-K5PBqJMvomXzfVqk.roa (raw, json)
Hash identifier: wmLF8BoU6sFiH55+O+kKBZHT8GOO9SgEIyzCEkilDxg=
Subject key identifier: E5:74:54:81:F0:7A:85:3F:8A:E4:F0:6A:24:CB:E8:99:7C:DF:56:A9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F061F19F952D6F6962AB781697C52
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/5XRUgfB6hT-K5PBqJMvomXzfVqk.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.67.0/24 maxlen: 24
151.237.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:06:1f:19:f9:52:d6:f6:96:2a:b7:81:69:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5745481f07a853f8ae4f06a24cbe8997cdf56a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:5e:31:df:38:32:63:05:b6:2f:22:e4:e0:
3c:2e:8c:19:f6:75:7e:ba:da:4c:8d:72:57:e2:b2:
e1:7d:c2:18:ee:ff:7d:fc:09:cf:3e:70:c9:e1:04:
29:cf:de:31:82:ff:66:54:57:db:cd:f5:51:64:e9:
d8:75:0c:40:ac:b8:c4:45:ff:41:5b:69:93:b0:05:
06:2c:36:3f:a6:e4:b8:52:08:a0:ef:24:b5:e3:73:
54:ce:f5:57:e3:0c:2e:59:ab:21:1e:1c:5f:05:1d:
12:ad:2d:56:37:89:0c:d3:5a:33:eb:0b:11:03:f1:
cc:8a:64:84:e5:11:3b:7f:71:f4:a3:9e:c9:49:0a:
3c:31:7c:92:58:e7:d7:d1:0f:41:ef:09:bd:ed:d8:
93:ee:88:60:5c:7f:01:da:37:88:c5:a7:89:9c:4f:
a7:a0:99:50:46:a0:a7:0a:bb:f6:df:a2:3c:f4:f7:
60:65:86:82:11:a9:84:88:19:3b:79:4c:0f:c5:31:
89:81:84:7f:dc:8b:40:2e:d1:a4:3a:7f:77:f4:71:
e6:64:c0:2d:e8:58:cc:7a:6f:e6:16:1c:c7:3a:2f:
de:f0:ff:a5:a7:20:aa:6a:ff:91:ce:08:68:2c:f4:
7c:c2:62:9c:73:e9:68:a7:f5:aa:ff:47:b7:27:76:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:54:81:F0:7A:85:3F:8A:E4:F0:6A:24:CB:E8:99:7C:DF:56:A9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/5XRUgfB6hT-K5PBqJMvomXzfVqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.67.0/24
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:8a:5a:71:84:e5:14:a0:66:7b:fc:f6:3b:c5:5c:00:40:3e:
8c:76:7e:ec:52:34:11:a1:14:f1:e2:21:ab:aa:05:01:13:c2:
0c:69:9c:8c:9a:98:55:0c:13:6e:68:f5:6d:d5:3b:9d:c1:2c:
43:ba:9d:6c:13:d1:01:52:2e:41:d8:c9:7c:07:d3:50:fc:92:
b1:22:ba:98:5b:da:24:3e:d4:2a:54:77:75:a4:ea:a2:d3:ad:
96:95:43:22:76:ae:13:db:d3:38:cd:52:fe:93:3a:2f:cd:1f:
66:2b:0b:9e:a6:97:c1:95:32:37:28:47:47:d6:67:df:32:10:
a7:10:89:43:b0:14:2c:db:ec:6c:48:8c:51:a4:7a:fa:87:e9:
05:4e:c1:1d:99:99:12:f0:b6:cb:d8:fe:f2:54:f1:1f:d8:31:
c7:6b:60:db:29:81:e7:6c:41:5e:fa:fe:16:af:9a:f8:8c:12:
2a:5f:7b:2c:26:81:b9:8e:a3:07:08:55:d3:57:eb:eb:30:b2:
b9:49:37:33:8b:88:cd:89:d2:a0:fa:86:69:6c:7b:bb:d9:bf:
31:c1:f3:a3:56:2b:5b:37:82:7f:bd:9f:2b:07:a2:78:7b:98:
a3:1d:14:20:b3:e5:86:cb:6d:87:58:13:2a:08:e6:3a:b0:93:
46:7d:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:13 2025 by rpki-client