Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7CAy8dXDV7vnWt3DW8id4C-AG84.roa
File: 7CAy8dXDV7vnWt3DW8id4C-AG84.roa (raw, json)
Hash identifier: UwrjZILG35+5rlswFbp8dClyotiaeewLgpNAfWFzuPA=
Subject key identifier: EC:20:32:F1:D5:C3:57:BB:E7:5A:DD:C3:5B:C8:9D:E0:2F:80:1B:CE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0C78907BC1CBD58EF4CD4EEB525F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7CAy8dXDV7vnWt3DW8id4C-AG84.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210154
IP address blocks: 46.254.135.0/24 maxlen: 24
151.237.20.0/24 maxlen: 24
151.237.21.0/24 maxlen: 24
151.237.22.0/24 maxlen: 24
151.237.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0c:78:90:7b:c1:cb:d5:8e:f4:cd:4e:eb:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2032f1d5c357bbe75addc35bc89de02f801bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:a9:9f:74:44:af:a9:44:72:76:d6:e6:07:
a2:f8:f7:47:cf:c2:58:e3:fc:92:b9:dd:29:93:b8:
ec:69:10:01:ac:35:b3:c8:31:39:df:3d:1d:3b:7f:
cc:ea:08:16:e4:c7:0c:54:b1:8c:e2:48:58:a0:fd:
3a:d8:fb:9f:07:cd:c6:fa:70:3e:44:64:c9:8f:76:
54:35:c9:1e:41:57:98:a9:4d:c6:26:66:93:d4:67:
92:0e:36:03:f6:d9:36:99:c9:91:c7:4e:cd:1c:2e:
46:0b:09:d9:02:57:e6:b5:3a:56:29:24:f9:a4:18:
ce:69:e6:7a:5a:94:cc:7e:fe:a3:84:2e:cc:cb:65:
91:e7:1b:05:16:a7:a0:2b:d6:91:fb:83:61:df:0c:
de:fe:61:56:f5:04:9d:1b:64:3b:1b:ea:d3:3b:ca:
69:a0:6c:33:25:92:7c:74:0b:a4:91:36:cc:cc:1d:
73:54:4f:91:cc:ff:56:fd:ba:51:24:8e:75:48:61:
df:f2:53:a2:7a:1b:b6:f6:2d:07:ce:0d:17:e1:47:
d2:0a:37:2c:08:d0:95:b2:f6:f1:1f:f8:80:8b:51:
81:e1:43:7f:3f:ef:1a:e7:f8:02:cd:21:a6:fd:ba:
46:39:11:57:f5:fd:27:2e:c9:03:e8:61:92:ef:c6:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:32:F1:D5:C3:57:BB:E7:5A:DD:C3:5B:C8:9D:E0:2F:80:1B:CE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/7CAy8dXDV7vnWt3DW8id4C-AG84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.135.0/24
151.237.20.0-151.237.22.255
151.237.32.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:1c:d6:ed:4c:df:e0:c0:a1:69:f8:3a:3b:0e:60:f6:8a:66:
70:e9:1d:c6:fa:56:7f:fc:76:a5:32:41:9a:d3:dc:e2:a9:ae:
39:2d:fe:38:68:0e:c8:03:19:9c:f0:d9:4f:0d:3e:b4:c1:0b:
80:e0:b7:5a:f0:ed:c3:5b:82:32:ab:5b:48:34:1b:45:e2:eb:
e5:52:e1:0f:a9:4e:d0:d6:0b:00:eb:20:a8:e9:f2:a5:18:d7:
1d:36:db:50:fe:07:7f:98:ee:17:f2:f6:ee:c1:82:54:a7:10:
6f:cb:5c:59:92:d8:bf:6e:a6:ae:0a:70:98:64:39:b0:5f:43:
db:92:b0:98:70:3b:eb:90:42:07:4b:4c:7c:00:4c:55:c7:89:
9c:6c:de:09:df:0b:44:4d:4d:a9:82:7e:47:a8:59:7a:e5:79:
63:07:20:4b:52:5a:8f:0f:af:af:87:f5:99:37:6e:77:3a:50:
d9:89:6c:73:a7:99:fc:e9:d7:35:c3:38:f3:ae:59:f0:2d:e0:
7b:fd:ab:da:15:93:07:9f:98:5c:b7:11:0d:d3:35:0a:c7:cf:
e3:c5:de:46:0e:c3:e9:21:1e:d8:0b:fd:43:60:a9:fa:77:dd:
a7:6b:ed:bd:82:6a:76:59:1d:ad:3f:cd:4d:6f:ae:71:37:6e:
e7:56:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:44:59 2025 by rpki-client