Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/faR7v_a9Va3-r60WSU_WaTJtc24.roa
File: faR7v_a9Va3-r60WSU_WaTJtc24.roa (raw, json)
Hash identifier: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=
Subject key identifier: 7D:A4:7B:BF:F6:BD:55:AD:FE:AF:AD:16:49:4F:D6:69:32:6D:73:6E
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019425FC4E048DAFEB83D8BD6900EC4A3619
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/faR7v_a9Va3-r60WSU_WaTJtc24.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204720
IP address blocks: 91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.69.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.79.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.93.0/24 maxlen: 24
151.236.97.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.104.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4e:04:8d:af:eb:83:d8:bd:69:00:ec:4a:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7da47bbff6bd55adfeafad16494fd669326d736e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:ed:54:64:8d:8c:82:ed:4d:38:4b:96:ae:
61:9d:78:f0:f0:1c:e0:e1:7a:91:78:82:35:74:cf:
c7:07:e2:6f:34:16:9c:41:4f:b6:0c:ec:79:c9:93:
d7:7a:cb:d8:ad:d9:e8:00:9d:50:3c:39:99:8b:f9:
d9:26:11:b5:92:07:2a:90:45:be:88:70:47:30:c0:
08:ee:60:0d:76:cb:da:69:5b:98:20:21:22:cf:94:
e2:28:c0:2d:01:78:f2:b8:28:97:d5:f6:ee:21:54:
4e:73:27:bf:ca:5f:86:f1:af:93:43:56:f5:e4:6c:
58:76:ba:c7:69:7a:03:72:13:46:36:67:59:bf:71:
bb:91:73:be:91:f5:31:47:eb:ca:13:78:83:43:11:
15:71:83:8a:ac:08:02:97:e7:89:88:32:2c:8e:6f:
af:5d:f8:b1:e1:f7:9d:27:ef:cc:4e:03:78:fc:0a:
ec:de:10:eb:c7:3a:3b:bc:16:c1:ba:19:c4:87:69:
e5:f7:db:6e:51:97:6c:34:0a:4d:69:a9:65:09:29:
60:ff:0a:25:60:37:b3:63:88:aa:21:67:c9:5f:fd:
b4:df:55:63:db:b0:42:3b:72:b2:9e:a5:c6:88:47:
e8:21:30:03:ec:ef:fb:cb:1a:b0:ae:47:78:ae:eb:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:7B:BF:F6:BD:55:AD:FE:AF:AD:16:49:4F:D6:69:32:6D:73:6E
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/faR7v_a9Va3-r60WSU_WaTJtc24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.68.0/23
151.236.71.0/24
151.236.79.0/24
151.236.82.0/24
151.236.92.0/23
151.236.97.0-151.236.98.255
151.236.101.0/24
151.236.103.0-151.236.105.255
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/23
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f4:54:26:d6:a1:5f:96:1b:5e:5e:df:8d:94:65:ce:ad:98:
bd:47:4f:4b:35:33:2e:48:f2:59:8a:e9:45:1b:fb:5d:49:b6:
e9:ef:23:91:7f:29:df:5f:c1:2d:13:d2:dd:b7:4b:b8:33:7e:
7b:d8:cb:c2:89:a0:d1:98:34:f8:2b:ea:db:0d:f3:ee:24:48:
21:a6:55:a6:c1:87:12:c3:ed:80:e6:f2:33:34:57:93:cc:bd:
c1:f4:31:d3:d3:7d:ca:79:fd:2e:ee:19:d3:62:c7:10:a3:bc:
b1:c4:1d:a3:00:01:d4:e2:27:03:22:fe:da:14:f0:c1:be:ff:
26:fc:af:79:e0:b7:2e:9f:1c:d4:7f:18:b2:a4:a0:00:e7:52:
4b:eb:92:df:cb:7d:8c:12:2d:46:0b:92:4b:51:13:de:0c:61:
3d:16:6a:fe:00:bf:b9:e1:db:d6:24:b2:16:17:29:a6:75:79:
10:05:c8:b2:98:3a:10:13:99:9b:78:09:da:6d:f4:a8:c5:04:
09:c3:e3:b8:39:ec:e0:ba:79:18:b2:45:9e:f0:20:0b:b8:e3:
85:36:ce:3a:ee:79:a0:76:ae:ab:bd:e5:d4:86:6c:8d:cc:0f:
0f:54:ce:7c:2e:85:b0:7a:ea:35:10:dd:84:4b:0b:a4:01:a7:
f5:5e:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:38 2025 by rpki-client