Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxaVm33XruqsW2k7RbiOg8KaybQ.roa
File: FxaVm33XruqsW2k7RbiOg8KaybQ.roa (raw, json)
Hash identifier: mTsILqhYWs6WAdFZZTT4h1RDKM7/7qGm17YB8D9lIeE=
Subject key identifier: 17:16:95:9B:7D:D7:AE:EA:AC:5B:69:3B:45:B8:8E:83:C2:9A:C9:B4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019610733E11F0AF44FF2407E71DC822E864
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxaVm33XruqsW2k7RbiOg8KaybQ.roa
Signing time: Mon 07 Apr 2025 13:31:50 +0000
ROA not before: Mon 07 Apr 2025 13:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141383
IP address blocks: 151.242.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:73:3e:11:f0:af:44:ff:24:07:e7:1d:c8:22:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 13:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1716959b7dd7aeeaac5b693b45b88e83c29ac9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:52:2b:6b:ad:0f:66:bc:72:03:3a:73:87:
aa:51:8e:b9:b7:ee:db:c8:79:ce:4f:36:b3:d6:29:
0c:35:00:0b:31:f9:43:9e:39:92:3a:b3:c6:a9:4f:
8d:f6:b9:b4:21:0e:3b:f4:f4:93:0e:93:27:78:e0:
99:dc:5a:3d:09:11:a1:48:9a:4f:ab:e1:a0:5d:e7:
36:b6:38:b4:ad:c5:9e:e6:24:f2:48:b4:c8:aa:84:
0c:8a:53:e3:a6:77:c6:4b:18:91:ed:a3:06:67:b4:
c6:75:3d:75:ef:89:8b:b8:06:3e:7f:1b:11:26:2e:
64:a2:ee:55:a7:52:e2:82:03:7e:82:1a:4e:6d:d2:
eb:7f:37:5b:4d:11:de:59:67:e6:ce:a2:19:15:23:
0b:1b:15:cc:41:c8:aa:9a:00:8b:2f:de:5c:c0:86:
20:9d:3d:66:ee:d4:46:4e:21:31:69:a4:bd:2b:cd:
53:24:37:d2:80:7a:27:9b:cc:8a:db:bd:42:94:c8:
bd:6e:a6:b6:47:ae:8d:bb:8c:30:5c:f2:64:d5:a9:
08:6c:74:fd:07:6d:bd:a3:85:48:cb:fb:d6:5c:38:
17:be:8d:a5:1c:fb:f5:cb:ba:47:74:f7:69:b7:da:
20:f7:0f:f3:ae:d4:9b:52:89:6d:10:83:99:fa:03:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:95:9B:7D:D7:AE:EA:AC:5B:69:3B:45:B8:8E:83:C2:9A:C9:B4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxaVm33XruqsW2k7RbiOg8KaybQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e7:ab:df:05:27:79:76:c1:74:9e:a9:37:63:27:c0:1f:31:
e4:e3:64:95:be:ae:25:47:f1:60:04:45:54:b3:6e:6e:f4:e0:
35:09:4e:2d:3c:57:d6:9a:08:a4:6a:59:2a:6c:0d:ba:40:a3:
59:0d:ed:b8:0b:ab:f4:ed:b0:d5:20:6c:b8:db:9e:72:e8:d8:
e1:40:75:d1:39:e6:b5:9f:2a:c8:3f:1a:51:ea:d9:5a:30:9e:
58:41:d3:28:72:26:50:91:7f:d8:86:b4:3c:9d:b9:3f:b0:f2:
ff:a1:8c:c1:3f:98:41:5c:94:d1:03:dd:bb:b6:81:cd:9d:dd:
97:11:fa:d9:6b:18:5b:14:6e:cb:ad:66:09:40:dd:11:9e:b9:
c7:6f:e8:18:03:2e:91:5d:ba:3b:e8:28:56:b2:37:2c:e0:fd:
12:0e:7f:d8:bb:07:6e:7f:5f:cc:9e:02:8c:09:31:f0:8f:45:
de:14:5f:ba:6c:68:26:c0:7c:e7:1a:d2:a2:d7:bf:63:c2:70:
30:48:6a:d7:bf:98:6f:61:4b:51:d0:a5:10:83:60:8d:21:02:
8a:2e:75:7a:f4:c0:fa:bb:40:47:b4:bf:32:45:f4:d1:7b:65:
76:69:91:3b:78:cc:a2:64:83:e6:5a:df:ab:8c:94:31:b3:b7:
28:13:c3:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYQcz4R8K9E/yQH5x3IIuhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDA3MTMzMTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzE2OTU5YjdkZDdhZWVhYWM1YjY5M2I0NWI4OGU4M2MyOWFjOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjlSK2utD2a8cgM6c4eqUY65t+7b
yHnOTzaz1ikMNQALMflDnjmSOrPGqU+N9rm0IQ479PSTDpMneOCZ3Fo9CRGhSJpP
q+GgXec2tji0rcWe5iTySLTIqoQMilPjpnfGSxiR7aMGZ7TGdT1174mLuAY+fxsR
Ji5kou5Vp1LiggN+ghpObdLrfzdbTRHeWWfmzqIZFSMLGxXMQciqmgCLL95cwIYg
nT1m7tRGTiExaaS9K81TJDfSgHonm8yK271ClMi9bqa2R66Nu4wwXPJk1akIbHT9
B229o4VIy/vWXDgXvo2lHPv1y7pHdPdpt9og9w/zrtSbUoltEIOZ+gNkEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcWlZt9167qrFtpO0W4joPCmsm0MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRnhhVm0zM1hydXFzVzJrN1JiaU9nOEtheWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/KWMA0G
CSqGSIb3DQEBCwUAA4IBAQB056vfBSd5dsF0nqk3YyfAHzHk42SVvq4lR/FgBEVU
s25u9OA1CU4tPFfWmgikalkqbA26QKNZDe24C6v07bDVIGy4255y6NjhQHXROea1
nyrIPxpR6tlaMJ5YQdMociZQkX/YhrQ8nbk/sPL/oYzBP5hBXJTRA927toHNnd2X
EfrZaxhbFG7LrWYJQN0RnrnHb+gYAy6RXbo76ChWsjcs4P0SDn/Yuwduf1/MngKM
CTHwj0XeFF+6bGgmwHznGtKi179jwnAwSGrXv5hvYUtR0KUQg2CNIQKKLnV69MD6
u0BHtL8yRfTRe2V2aZE7eMyiZIPmWt+rjJQxs7coE8MG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net