Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XLafpvLl3yKW4sOv8SaOoCXDfdI.roa
File: XLafpvLl3yKW4sOv8SaOoCXDfdI.roa (raw, json)
Hash identifier: LSONfGaDykHNrpYAQaHhD4hDbbUZlLjJa68wMkjgb4U=
Subject key identifier: 5C:B6:9F:A6:F2:E5:DF:22:96:E2:C3:AF:F1:26:8E:A0:25:C3:7D:D2
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFE3D6C7CACCAD03EF7AAC4B17277
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XLafpvLl3yKW4sOv8SaOoCXDfdI.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49773
IP address blocks: 151.237.31.0/24 maxlen: 24
151.237.33.0/24 maxlen: 24
151.237.34.0/23 maxlen: 23
185.242.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fe:3d:6c:7c:ac:ca:d0:3e:f7:aa:c4:b1:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cb69fa6f2e5df2296e2c3aff1268ea025c37dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:50:46:45:ad:96:56:0a:96:38:7a:05:cc:
13:75:6b:db:fb:68:01:38:c1:6f:40:8f:51:1c:36:
21:e8:7a:37:43:72:e0:d4:61:9f:51:51:d5:d0:f5:
2f:e6:8f:a7:21:02:7f:fd:4a:14:46:d5:8f:5a:d2:
a0:13:4b:f2:96:b8:c5:4e:4b:de:c3:69:1b:0b:f9:
ed:c8:07:64:c9:9c:9c:20:c2:97:1e:10:e2:47:0c:
fe:b4:55:70:58:16:e9:9d:1f:c7:6f:0e:1f:a3:de:
ba:b5:8c:ad:b2:cb:09:2c:8e:c6:1e:89:89:1a:a2:
e3:9b:ba:3c:6f:1e:c6:60:a4:6f:48:03:d6:f0:65:
7d:16:0e:96:d2:6b:a4:71:b8:33:a5:a1:0e:d4:f3:
36:74:73:54:73:7a:71:a5:ab:85:7d:a1:3c:2e:a0:
b8:5c:1c:5e:f1:8f:b9:66:98:d4:c2:e6:90:77:8e:
da:ff:06:d1:c5:4c:f0:80:cb:fc:12:82:8c:5f:57:
d1:1b:48:95:6e:d6:b2:8f:cf:59:56:b9:90:eb:bf:
c6:26:21:9f:94:74:20:cf:4b:1c:2d:85:54:6f:a1:
76:45:07:f4:b1:b2:cc:83:bc:ab:82:19:c0:62:5f:
85:48:56:d3:3c:9b:8f:7c:94:69:5b:a3:1a:92:c9:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:9F:A6:F2:E5:DF:22:96:E2:C3:AF:F1:26:8E:A0:25:C3:7D:D2
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XLafpvLl3yKW4sOv8SaOoCXDfdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.31.0/24
151.237.33.0-151.237.35.255
185.242.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e0:d7:8b:96:a6:ba:c1:10:48:a7:87:94:03:c7:4d:92:29:
d8:a7:07:6d:f6:19:b4:ca:09:09:c4:67:de:4f:bd:02:67:70:
71:be:19:0c:84:73:e0:10:dc:d3:c1:a6:25:47:97:24:46:c1:
48:3c:a4:f1:c9:8f:db:77:4d:1d:61:98:3b:2c:c3:8a:72:3a:
ec:9a:bb:13:37:16:80:12:87:54:a4:f2:53:d5:10:41:a7:5c:
75:53:8f:0c:e2:2f:bd:af:c6:02:e9:73:20:30:d8:e3:4e:ff:
29:30:bd:a7:43:d3:ab:d2:1b:c2:e8:10:f8:96:20:80:f3:e4:
8f:4e:2c:f6:8c:52:44:98:e1:67:4d:8b:51:dd:81:09:30:01:
9b:14:99:67:1c:1a:be:95:88:eb:d7:fb:45:69:39:3e:d8:eb:
a8:bc:5d:12:b5:c8:46:ba:85:83:77:62:7d:d6:a1:c2:61:35:
e3:69:59:44:27:bd:34:6b:27:07:49:e5:d2:86:40:5a:74:cb:
0a:61:04:de:27:31:0b:c8:ec:f6:fa:bf:d3:bd:96:aa:cb:19:
d9:56:3e:b0:fa:fe:a6:9f:45:b4:52:dd:27:85:b7:79:bc:84:
59:ef:d4:cf:8b:f7:38:eb:19:5f:ff:c8:41:39:0d:d7:a6:4e:
a8:46:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:53:43 2025 by rpki-client