Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JUzQeFo6ltjoTnwrntrkKioxny4.roa
File: JUzQeFo6ltjoTnwrntrkKioxny4.roa (raw, json)
Hash identifier: 2kaArCjDCyjoH7j6XHeGtk/ZHhcfGXTf9pE0mppsFlo=
Subject key identifier: 25:4C:D0:78:5A:3A:96:D8:E8:4E:7C:2B:9E:DA:E4:2A:2A:31:9F:2E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F072F43BA16908E1999DD70CBCF0E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JUzQeFo6ltjoTnwrntrkKioxny4.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202439
IP address blocks: 151.237.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:07:2f:43:ba:16:90:8e:19:99:dd:70:cb:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=254cd0785a3a96d8e84e7c2b9edae42a2a319f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:4d:ad:a8:73:2c:08:e6:fd:35:a9:9c:48:
43:0d:4d:0d:aa:8b:54:05:2e:28:4d:6e:60:be:72:
26:6f:e6:79:3a:c2:21:f0:74:a0:a8:f0:60:76:f7:
23:8b:70:09:1d:02:1b:7e:67:bd:00:06:b9:80:e8:
f4:a2:7e:6d:83:f6:9b:97:77:79:ff:7a:3c:6e:96:
72:06:6e:76:68:e9:d1:34:40:17:a5:68:e5:62:20:
4e:03:da:0f:c8:71:64:70:01:1f:89:4f:82:26:79:
38:52:28:2f:f6:b8:dc:27:4a:8d:17:c3:84:6e:4b:
d9:63:8c:e2:4a:8d:34:b7:5d:75:e7:95:49:8d:fd:
ab:46:0a:77:4f:17:16:14:e1:6f:fd:04:82:88:0e:
50:3e:11:1d:1d:9d:ff:7b:8f:14:89:06:f3:a1:d4:
10:51:06:20:f5:15:c3:4b:cc:73:03:0c:f9:6d:ba:
3e:de:ef:35:27:09:2e:e0:9e:dd:5d:21:a1:04:54:
e2:f1:3f:ea:e8:2f:6f:c1:06:22:e9:64:58:a8:81:
20:d2:56:00:08:5e:dc:bc:58:f6:95:5b:8f:2b:e9:
fc:06:c1:67:e1:80:11:e4:54:36:fd:6c:a4:0c:c5:
fc:eb:cd:0d:63:5c:e8:e5:68:8a:da:e3:67:9e:bd:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:D0:78:5A:3A:96:D8:E8:4E:7C:2B:9E:DA:E4:2A:2A:31:9F:2E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JUzQeFo6ltjoTnwrntrkKioxny4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:51:f8:f8:06:f3:32:8c:5d:bc:01:9b:9c:f2:ac:03:ea:5b:
32:e4:6b:b2:18:5a:83:4b:fd:c7:25:f6:6a:f3:61:a9:b7:fb:
89:36:46:8b:c4:69:5f:2b:26:af:75:71:43:c7:57:83:23:b0:
a6:51:d2:92:a2:ec:16:73:b1:26:f4:6f:e1:58:12:0b:09:5d:
43:e1:0e:f6:ba:92:89:04:a1:c7:41:f4:b6:df:e0:ea:3e:1a:
5e:79:da:df:45:dd:75:a0:b6:3f:f0:18:1c:b6:74:97:7c:81:
b2:f3:e9:e5:df:f9:43:9b:f7:4f:72:7e:f9:bc:d8:76:ab:35:
d7:5c:b7:83:69:49:15:fd:ef:ba:13:73:1f:78:40:79:de:9b:
ac:b8:ab:3f:53:a9:e1:d7:14:9e:32:ad:b0:20:c1:49:3e:53:
c0:8f:b9:2b:31:ba:1c:4b:7f:3a:20:57:e8:7a:4d:03:5a:20:
04:b9:f4:bb:a9:b5:7c:31:69:81:8c:81:65:07:f2:7b:bf:87:
5e:3d:86:b1:22:fd:7a:b6:c2:60:85:09:11:41:1c:1a:88:a8:
f1:69:2b:3b:46:02:af:8f:5e:d3:36:60:8c:b0:38:75:fc:84:
f2:99:b8:2f:73:1d:4a:80:37:6f:80:42:1f:60:4d:d4:07:da:
61:fe:f0:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwcvQ7oWkI4Zmd1wy88OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTRjZDA3ODVhM2E5NmQ4ZTg0ZTdjMmI5ZWRhZTQyYTJhMzE5ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjORNrahzLAjm/TWpnEhDDU0NqotU
BS4oTW5gvnImb+Z5OsIh8HSgqPBgdvcji3AJHQIbfme9AAa5gOj0on5tg/abl3d5
/3o8bpZyBm52aOnRNEAXpWjlYiBOA9oPyHFkcAEfiU+CJnk4Uigv9rjcJ0qNF8OE
bkvZY4ziSo00t11155VJjf2rRgp3TxcWFOFv/QSCiA5QPhEdHZ3/e48UiQbzodQQ
UQYg9RXDS8xzAwz5bbo+3u81Jwku4J7dXSGhBFTi8T/q6C9vwQYi6WRYqIEg0lYA
CF7cvFj2lVuPK+n8BsFn4YAR5FQ2/WykDMX8680NY1zo5WiK2uNnnr2wRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVM0HhaOpbY6E58K57a5CoqMZ8uMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvSlV6UWVGbzZsdGpvVG53cm50cmtLaW94bnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+2KMA0G
CSqGSIb3DQEBCwUAA4IBAQAaUfj4BvMyjF28AZuc8qwD6lsy5GuyGFqDS/3HJfZq
82Gpt/uJNkaLxGlfKyavdXFDx1eDI7CmUdKSouwWc7Em9G/hWBILCV1D4Q72upKJ
BKHHQfS23+DqPhpeedrfRd11oLY/8BgctnSXfIGy8+nl3/lDm/dPcn75vNh2qzXX
XLeDaUkV/e+6E3MfeEB53pusuKs/U6nh1xSeMq2wIMFJPlPAj7krMbocS386IFfo
ek0DWiAEufS7qbV8MWmBjIFlB/J7v4dePYaxIv16tsJghQkRQRwaiKjxaSs7RgKv
j17TNmCMsDh1/ITymbgvcx1KgDdvgEIfYE3UB9ph/vAb
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:52:54 2025 by rpki-client