Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ev27KUApF_5gp0LGUiopp14lkNM.roa
File: Ev27KUApF_5gp0LGUiopp14lkNM.roa (raw, json)
Hash identifier: vR19oJPJKMzcC5meu32bfJ2nmibL28fXPeYNDq47+7A=
Subject key identifier: 12:FD:BB:29:40:29:17:FE:60:A7:42:C6:52:2A:29:A7:5E:25:90:D3
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0D3F39763F20BB9663E13CCED738
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ev27KUApF_5gp0LGUiopp14lkNM.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211159
IP address blocks: 151.237.19.0/24 maxlen: 24
151.237.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0d:3f:39:76:3f:20:bb:96:63:e1:3c:ce:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12fdbb29402917fe60a742c6522a29a75e2590d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:72:da:2f:13:0c:c1:0c:4e:a2:93:70:10:
5d:07:8d:85:3a:f7:08:d4:61:9e:7e:92:7f:39:de:
f0:d6:33:f1:cf:f4:15:8e:eb:ee:15:0f:9d:7d:14:
52:74:58:04:49:50:c1:74:14:04:dc:99:02:f6:2f:
ef:03:5d:1a:92:ab:80:d5:ab:d8:3f:8d:cf:60:37:
36:69:48:8c:ea:49:40:e0:15:9b:81:d2:9f:2f:86:
b2:3d:74:c2:ce:7f:bb:e5:e5:0e:98:9a:41:40:67:
81:c2:f3:16:51:c8:25:a5:14:42:8e:ee:19:d5:2c:
0d:ec:0e:aa:29:3e:ae:dc:92:8e:68:c7:e1:be:90:
e4:01:c2:78:f1:cd:a1:95:34:b7:fe:6e:49:2c:d8:
98:34:40:07:ad:7f:2b:93:59:90:a6:e5:86:ab:80:
a4:eb:07:78:95:ae:5e:e4:23:97:55:32:ca:28:d8:
a0:54:d5:4a:e9:f4:91:37:ae:db:89:1c:0c:f9:7d:
2b:91:06:f7:31:64:2c:28:2a:99:ec:01:4d:16:bc:
82:a3:45:3b:ba:2e:23:54:57:77:f6:c8:7a:50:9d:
05:5e:42:6b:79:dd:05:ad:78:38:89:34:9d:4e:bb:
b3:c1:b9:22:ae:99:f5:a4:c7:52:33:60:38:88:fb:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:BB:29:40:29:17:FE:60:A7:42:C6:52:2A:29:A7:5E:25:90:D3
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ev27KUApF_5gp0LGUiopp14lkNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.19.0/24
151.237.24.0/24
Signature Algorithm: sha256WithRSAEncryption
92:58:aa:59:f0:0a:68:c7:c9:5a:4d:01:78:ae:52:35:74:07:
f0:43:5b:1f:af:9c:3d:1b:ad:48:b5:b6:81:0f:19:5d:d0:46:
f1:7c:10:b5:20:c9:77:0c:c3:55:74:72:c2:1d:5c:c0:61:33:
a0:fc:f0:f7:51:2f:15:70:78:7a:48:e4:0a:fc:61:43:09:38:
56:9f:d2:d3:38:32:79:ae:74:e1:1f:a5:29:c6:14:37:ae:a0:
5c:c8:a3:97:83:7c:d3:fa:74:4b:a2:43:c6:20:c4:26:03:68:
20:a2:10:35:d2:27:c3:f4:73:7c:b8:7e:d2:03:f8:57:86:bc:
8b:0e:c6:fc:80:c1:c2:fe:b4:37:c0:aa:fa:a1:52:5a:87:27:
b3:3d:6a:62:a3:4f:44:0f:55:21:44:16:b6:e0:a9:88:d2:5d:
c5:16:02:30:c0:b6:48:df:d2:e2:04:14:4f:ef:a5:21:14:16:
b9:7d:8e:51:1a:dc:c9:94:0c:45:bf:da:db:d4:5e:dd:17:3a:
d6:5b:a9:44:34:5d:5c:03:ac:35:11:4e:f1:1d:55:bc:6c:77:
dd:6c:13:3d:bf:9f:1a:a6:88:ee:45:5c:89:34:51:d5:c4:93:
ab:b5:08:e5:21:d8:14:45:b9:8d:8a:5a:f5:65:8d:73:58:9e:
01:cc:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:02 2025 by rpki-client