Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa
File: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (raw, json)
Hash identifier: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=
Subject key identifier: 73:87:B8:BE:AC:20:65:DD:99:27:AC:08:C3:EA:63:B8:7C:13:70:08
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 01942825A085FFB32BF9FFF9888F1E9CCA82
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa
Signing time: Thu 02 Jan 2025 17:52:21 +0000
ROA not before: Thu 02 Jan 2025 17:52:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 151.248.104.96/27 maxlen: 27
151.248.104.128/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a0:85:ff:b3:2b:f9:ff:f9:88:8f:1e:9c:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jan 2 17:52:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7387b8beac2065dd9927ac08c3ea63b87c137008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:13:37:78:94:b0:2a:8d:d7:df:a3:1d:67:
61:21:67:0a:81:c5:88:99:af:71:94:1f:bd:83:cf:
0a:1e:32:fb:ee:95:59:4a:3d:f6:bf:f9:cf:64:3d:
97:a4:14:8d:4e:f3:8e:c8:24:1b:86:97:d9:98:f3:
b0:51:97:1a:3a:c4:97:5c:ba:e6:4a:5b:58:e6:b2:
47:f0:ba:9c:09:20:f9:d4:99:45:b8:7a:66:ac:d9:
21:30:c8:78:f0:bd:e3:78:27:97:cb:76:fa:7f:e3:
88:8c:04:c8:92:b6:b3:79:1d:4d:53:23:6c:1e:97:
e6:71:94:2b:15:03:c4:e9:42:49:8d:7f:af:79:cc:
7d:6d:f6:b9:7b:1e:6c:3d:d7:83:84:eb:b9:5a:d0:
79:2b:73:ca:df:7c:86:87:cc:4b:b0:95:c3:a5:a1:
a6:c8:0f:23:ae:e3:54:40:eb:9f:4a:2e:5b:43:50:
1e:e0:69:87:1f:00:75:a2:a9:81:9b:c7:1f:84:71:
8b:de:9d:be:3d:d3:09:e6:b0:3a:4a:c3:05:e0:14:
f5:fd:17:a2:64:19:dd:30:b4:c6:d1:23:09:63:35:
a0:48:be:79:74:01:fa:cd:4d:d8:a0:bc:f8:50:c1:
ea:0b:6f:53:19:3b:ec:5a:4b:48:fd:8d:4f:bf:d4:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:B8:BE:AC:20:65:DD:99:27:AC:08:C3:EA:63:B8:7C:13:70:08
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.104.96-151.248.104.159
Signature Algorithm: sha256WithRSAEncryption
25:de:2d:18:59:0f:0f:f2:0b:c1:3d:50:b5:c7:a9:38:20:65:
af:f1:5a:83:48:1a:6c:d8:fd:c8:9b:b6:8f:1e:d1:0c:a0:93:
b6:09:f1:53:3c:a5:ba:e7:8e:49:4b:52:65:f8:59:1d:08:65:
82:3d:e9:4b:94:d0:f2:b3:50:d8:7e:9a:24:ef:41:7c:bb:ff:
8b:0e:97:28:57:aa:53:5f:9b:b0:a8:97:24:55:a6:f9:14:1f:
d7:c0:d9:36:a6:c3:1f:31:9a:c1:21:e6:3f:c8:01:aa:f2:8f:
fd:8d:72:ad:c1:7f:3f:81:9f:92:ed:2f:d4:fd:cc:9d:e4:87:
07:f5:77:cd:8a:17:f4:82:13:db:53:49:10:79:54:43:95:97:
42:ee:ae:93:31:e6:43:34:c7:85:cb:a5:55:f7:5e:5e:da:b4:
f2:fc:60:d6:18:fa:fd:ee:cd:e5:52:e7:34:ae:d3:dd:4d:7e:
5a:ad:d6:87:03:8c:a7:6f:b1:29:f1:0c:7f:24:64:29:4f:05:
ee:18:52:d2:96:e4:43:3c:fb:05:f7:65:f8:63:ae:51:b2:40:
ad:47:22:61:40:29:96:8b:91:ec:b6:02:c2:99:4f:8b:17:d2:
cb:df:f3:8d:de:d5:f2:ec:f6:51:cc:4e:58:77:49:6f:de:5b:
9b:21:7f:44
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQoJaCF/7Mr+f/5iI8enMqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl
ODg3ZGMwHhcNMjUwMTAyMTc1MjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzg3YjhiZWFjMjA2NWRkOTkyN2FjMDhjM2VhNjNiODdjMTM3MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EsTN3iUsCqN19+jHWdhIWcKgcWI
ma9xlB+9g88KHjL77pVZSj32v/nPZD2XpBSNTvOOyCQbhpfZmPOwUZcaOsSXXLrm
SltY5rJH8LqcCSD51JlFuHpmrNkhMMh48L3jeCeXy3b6f+OIjATIkrazeR1NUyNs
HpfmcZQrFQPE6UJJjX+vecx9bfa5ex5sPdeDhOu5WtB5K3PK33yGh8xLsJXDpaGm
yA8jruNUQOufSi5bQ1Ae4GmHHwB1oqmBm8cfhHGL3p2+PdMJ5rA6SsMF4BT1/Rei
ZBndMLTG0SMJYzWgSL55dAH6zU3YoLz4UMHqC29TGTvsWktI/Y1Pv9RshwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFHOHuL6sIGXdmSesCMPqY7h8E3AIMB8GA1UdIwQY
MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt
YWFlMTQ0NzYwM2MwLzEvYzRlNHZxd2daZDJaSjZ3SXctcGp1SHdUY0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw
LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQMA4DBQWX+Ghg
AwUFl/hogDANBgkqhkiG9w0BAQsFAAOCAQEAJd4tGFkPD/ILwT1QtcepOCBlr/Fa
g0gabNj9yJu2jx7RDKCTtgnxUzyluueOSUtSZfhZHQhlgj3pS5TQ8rNQ2H6aJO9B
fLv/iw6XKFeqU1+bsKiXJFWm+RQf18DZNqbDHzGawSHmP8gBqvKP/Y1yrcF/P4Gf
ku0v1P3MneSHB/V3zYoX9IIT21NJEHlUQ5WXQu6ukzHmQzTHhculVfdeXtq08vxg
1hj6/e7N5VLnNK7T3U1+Wq3WhwOMp2+xKfEMfyRkKU8F7hhS0pbkQzz7Bfdl+GOu
UbJArUciYUAplouR7LYCwplPixfSy9/zjd7V8uz2UcxOWHdJb95bmyF/RA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:19 2025 by rpki-client