Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/R07lu6G8HJPwvR-eQrt4UdspHmA.roa
File: R07lu6G8HJPwvR-eQrt4UdspHmA.roa (raw, json)
Hash identifier: ysl+gwicgFD60chY0kE+qclyuIOGboBA9hkK0H0J4+I=
Subject key identifier: 47:4E:E5:BB:A1:BC:1C:93:F0:BD:1F:9E:42:BB:78:51:DB:29:1E:60
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0DC4BC3BF0391B37B17998C5169D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/R07lu6G8HJPwvR-eQrt4UdspHmA.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213271
IP address blocks: 151.237.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0d:c4:bc:3b:f0:39:1b:37:b1:79:98:c5:16:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474ee5bba1bc1c93f0bd1f9e42bb7851db291e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:0a:39:83:5d:6b:8c:6e:f2:84:12:cd:d3:
51:4d:fb:02:59:76:df:a0:a6:d4:8d:dc:6e:6b:e6:
ec:22:34:3c:15:03:20:10:71:df:b7:1e:d0:28:5b:
58:38:da:47:6c:be:4e:68:23:14:f6:89:3b:65:e2:
51:20:ec:46:e4:6f:68:ec:00:64:36:9a:cc:18:79:
e9:99:34:27:fd:a9:b2:ca:d8:79:11:bf:54:9a:3e:
d7:47:5d:e3:a9:b2:88:59:13:e3:e5:03:ae:59:19:
4a:7a:b0:f3:67:15:ef:8f:b0:ba:68:f3:c6:b2:75:
86:07:bc:8d:c3:cf:eb:cf:f5:86:b1:0a:96:e0:5e:
0e:1a:cd:24:4e:60:ed:e0:13:4b:b4:34:58:96:bb:
db:5a:3a:b1:30:48:03:78:ff:1c:28:88:c9:31:37:
b4:45:61:68:ab:67:52:b4:d6:7d:67:c6:3b:03:87:
a2:9c:03:36:2a:4e:82:04:fe:16:55:15:c7:70:53:
a4:cf:18:1a:87:9a:6c:fb:55:30:1e:48:45:5f:48:
3d:49:6a:0f:13:22:1c:48:49:4c:2d:a2:90:44:85:
bf:19:ea:58:5f:56:7f:ff:e1:72:8e:3a:65:3d:fa:
c6:51:be:b5:30:78:7e:6f:f7:99:de:bd:9a:66:3e:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:E5:BB:A1:BC:1C:93:F0:BD:1F:9E:42:BB:78:51:DB:29:1E:60
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/R07lu6G8HJPwvR-eQrt4UdspHmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7f:15:5c:b2:3a:2b:25:01:93:4f:4b:ca:2c:63:59:7d:be:
38:23:f9:92:b1:e7:bc:c9:31:5c:ec:77:c6:8d:6d:55:6d:8a:
f8:11:e6:4e:91:f5:b0:40:7f:2a:6e:f7:01:eb:49:84:d3:96:
98:3a:2d:cd:52:ed:26:f1:1f:0f:85:d1:f4:9e:f7:43:58:ed:
97:4f:73:fc:11:58:5e:3c:ff:8a:95:04:b1:98:26:f8:0d:10:
01:c9:e1:7f:0b:5a:cc:c9:4f:26:fd:01:32:1f:4d:46:35:68:
50:1f:df:bd:37:4b:18:98:54:2e:1a:2d:1f:f7:e6:25:00:57:
dc:1a:45:5c:89:fa:e3:99:0c:07:37:8a:c3:10:eb:8e:d6:65:
db:a9:02:b7:30:84:fe:92:12:f1:a5:ba:bd:61:45:a2:43:f9:
91:9a:5a:a4:41:71:a2:c4:c9:58:d0:06:a5:b5:51:19:bf:e1:
d1:92:25:83:9b:a6:50:ef:27:07:66:ad:a4:f2:54:87:fc:6b:
e4:af:7d:ed:24:79:79:93:29:fa:71:b4:e1:5d:b0:cd:d5:19:
00:aa:71:31:2e:fc:da:e2:53:2b:02:57:c1:e1:2f:1e:86:1e:
ee:c1:53:20:d2:45:66:77:eb:77:50:02:54:c4:f0:69:97:26:
85:a6:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:56:42 2025 by rpki-client