Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qrljvOKi1LxD0D6pY6EjTQU28zg.roa
File: qrljvOKi1LxD0D6pY6EjTQU28zg.roa (raw, json)
Hash identifier: e0AHa+PrIyMAK8jDH+vD20qlc9lbX2BMW09NvjUFtHM=
Subject key identifier: AA:B9:63:BC:E2:A2:D4:BC:43:D0:3E:A9:63:A1:23:4D:05:36:F3:38
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFE887CF3F1F5F51CC6F2738A9C7E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qrljvOKi1LxD0D6pY6EjTQU28zg.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50186
IP address blocks: 151.237.96.0/21 maxlen: 21
151.237.98.0/24 maxlen: 24
151.237.99.0/24 maxlen: 24
151.237.100.0/24 maxlen: 24
151.237.101.0/24 maxlen: 24
151.237.102.0/24 maxlen: 24
151.237.103.0/24 maxlen: 24
151.237.104.0/23 maxlen: 23
151.237.104.0/24 maxlen: 24
151.237.105.0/24 maxlen: 24
151.237.106.0/24 maxlen: 24
151.237.107.0/24 maxlen: 24
151.237.108.0/23 maxlen: 23
151.237.108.0/24 maxlen: 24
151.237.109.0/24 maxlen: 24
151.237.110.0/24 maxlen: 24
151.237.111.0/24 maxlen: 24
151.237.112.0/24 maxlen: 24
151.237.113.0/24 maxlen: 24
151.237.114.0/24 maxlen: 24
151.237.115.0/24 maxlen: 24
151.237.116.0/24 maxlen: 24
151.237.117.0/24 maxlen: 24
151.237.118.0/24 maxlen: 24
151.237.119.0/24 maxlen: 24
151.237.120.0/24 maxlen: 24
151.237.122.0/24 maxlen: 24
151.237.123.0/24 maxlen: 24
151.237.124.0/24 maxlen: 24
151.237.125.0/24 maxlen: 24
151.237.126.0/24 maxlen: 24
151.237.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fe:88:7c:f3:f1:f5:f5:1c:c6:f2:73:8a:9c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab963bce2a2d4bc43d03ea963a1234d0536f338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:7c:bc:b1:37:66:53:03:6a:a1:41:b4:22:
f9:9d:09:af:dc:b8:25:36:3d:08:c9:5b:79:90:a4:
7b:e5:d2:50:60:d5:26:17:1e:18:6c:5e:d7:05:bd:
d9:a8:36:81:31:ea:84:50:72:32:bb:00:40:e8:0e:
24:e4:6b:93:e1:f2:c5:79:db:01:df:d0:bd:03:b8:
a3:96:48:55:bf:e8:53:80:c4:29:84:da:ed:ed:58:
b9:88:70:c1:81:30:fc:bd:dc:5b:19:ed:d7:22:77:
ab:c6:00:95:c6:c4:c7:8d:e6:2b:5c:21:0b:75:ed:
ef:d5:b7:40:82:97:8a:b9:86:18:8c:70:e4:82:4f:
05:9b:f3:2d:24:e2:42:62:dd:20:6d:2d:4c:f9:56:
4e:25:2a:a6:8d:f2:6d:3e:af:f4:72:ac:11:6e:d4:
83:cc:8f:2e:14:36:e9:cd:f2:7c:ff:d0:11:68:f6:
c4:34:5e:40:92:53:1c:3f:e6:31:9e:6e:95:81:ef:
c2:a4:f5:84:a0:bb:84:17:2b:ca:76:44:50:2e:33:
dd:a9:ae:d3:0e:57:5e:1e:73:17:fd:96:d2:e1:e2:
8a:19:7d:a7:61:ad:b9:e5:70:aa:9d:65:95:b3:c5:
4d:ea:73:7b:3b:ba:a7:52:cd:36:87:49:87:83:f5:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:63:BC:E2:A2:D4:BC:43:D0:3E:A9:63:A1:23:4D:05:36:F3:38
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qrljvOKi1LxD0D6pY6EjTQU28zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.96.0-151.237.120.255
151.237.122.0-151.237.127.255
Signature Algorithm: sha256WithRSAEncryption
c0:09:d2:ad:99:71:6a:41:59:30:f6:d2:7b:65:54:86:b9:f6:
c2:15:af:3b:5b:2a:03:66:1c:8e:fc:81:8a:45:ab:ae:08:3c:
5c:5b:aa:32:95:02:b0:50:3f:9f:c9:68:1e:b6:f5:72:26:32:
c8:57:c3:67:3d:fc:10:9c:c1:ee:88:a8:52:02:c9:9a:b0:28:
8b:e8:53:4b:38:c3:3e:00:a6:3e:a5:a8:42:1f:e7:f5:83:63:
9c:63:b8:d7:82:6f:0c:17:d5:25:8e:f6:1c:55:9b:eb:48:39:
4a:2e:ab:95:de:90:28:da:aa:53:c3:0b:23:09:35:ef:8d:65:
d0:27:b9:f2:43:c4:8a:f4:a3:ec:f0:19:c7:b6:11:4c:29:bc:
fd:e1:65:6c:9f:88:17:b6:34:0e:48:9b:63:25:58:c4:70:35:
b1:a4:6b:ab:0f:58:61:85:5c:dd:52:fb:20:b1:28:aa:c5:f7:
06:fc:f9:3a:38:73:59:5a:b6:1d:c6:f2:6b:20:83:59:82:9b:
e1:65:c3:77:48:ce:d8:c0:4e:e7:56:86:ae:17:ae:ae:7d:b9:
c0:14:cf:3f:ea:f7:bc:81:73:90:63:df:f4:b7:24:8d:03:4f:
1a:e1:e3:d6:c5:ea:fd:b4:09:b7:a6:6f:35:4a:ae:47:f7:09:
26:50:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:25 2025 by rpki-client