Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/85zqvf6FscQZlY29JgUXs5v3mTU.roa
File: 85zqvf6FscQZlY29JgUXs5v3mTU.roa (raw, json)
Hash identifier: LKCtGRyz9HAO95kUnwpllGYUcQkJBR0rIiKyRxSDer4=
Subject key identifier: F3:9C:EA:BD:FE:85:B1:C4:19:95:8D:BD:26:05:17:B3:9B:F7:99:35
Certificate issuer: /CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Certificate serial: 0193F4081911BB8D8D99534F4B0518A96610
Authority key identifier: CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/85zqvf6FscQZlY29JgUXs5v3mTU.roa
Signing time: Mon 23 Dec 2024 14:59:51 +0000
ROA not before: Mon 23 Dec 2024 14:59:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3242
IP address blocks: 151.1.0.0/18 maxlen: 18
151.1.0.0/23 maxlen: 23
151.1.7.0/24 maxlen: 24
151.1.24.0/21 maxlen: 21
151.1.32.0/21 maxlen: 21
151.1.40.0/23 maxlen: 23
151.1.42.0/23 maxlen: 23
151.1.44.0/23 maxlen: 23
151.1.46.0/23 maxlen: 23
151.1.48.0/24 maxlen: 24
151.1.49.0/24 maxlen: 24
151.1.50.0/24 maxlen: 24
151.1.62.0/24 maxlen: 24
151.1.66.0/23 maxlen: 23
151.1.68.0/22 maxlen: 22
151.1.72.0/24 maxlen: 24
151.1.74.0/23 maxlen: 23
151.1.76.0/22 maxlen: 22
151.1.80.0/20 maxlen: 20
151.1.84.0/24 maxlen: 24
151.1.96.0/22 maxlen: 22
151.1.100.0/22 maxlen: 22
151.1.101.0/24 maxlen: 24
151.1.104.0/21 maxlen: 21
151.1.104.0/23 maxlen: 23
151.1.106.0/23 maxlen: 23
151.1.112.0/20 maxlen: 20
151.1.128.0/18 maxlen: 18
151.1.192.0/18 maxlen: 18
151.1.192.0/22 maxlen: 22
151.1.192.0/24 maxlen: 24
151.1.194.0/24 maxlen: 24
151.1.195.0/24 maxlen: 24
151.1.196.0/22 maxlen: 22
151.1.200.0/21 maxlen: 21
151.1.203.0/24 maxlen: 24
151.1.208.0/21 maxlen: 21
151.1.212.0/24 maxlen: 24
151.1.216.0/21 maxlen: 21
151.1.224.0/19 maxlen: 19
151.1.227.0/24 maxlen: 24
151.1.232.0/21 maxlen: 21
151.1.244.0/24 maxlen: 24
151.1.247.0/24 maxlen: 24
151.2.0.0/20 maxlen: 20
151.2.32.0/19 maxlen: 19
151.2.36.0/24 maxlen: 24
151.2.96.0/20 maxlen: 20
151.2.102.0/24 maxlen: 24
2a01:65c0::/32 maxlen: 32
2a01:65c0:100::/48 maxlen: 48
2a01:65c0:101::/48 maxlen: 48
2a01:65c0:200::/40 maxlen: 40
2a01:65c0:e00::/48 maxlen: 48
2a01:65c0:e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:08:19:11:bb:8d:8d:99:53:4f:4b:05:18:a9:66:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Validity
Not Before: Dec 23 14:59:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39ceabdfe85b1c419958dbd260517b39bf79935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:49:94:26:d0:54:a0:77:82:3e:0d:17:5e:
13:ff:78:d3:1f:39:f3:1d:e9:2b:04:69:f0:08:28:
73:c2:65:06:20:98:ed:25:03:b5:55:ca:89:ac:4d:
a8:66:72:d6:5f:54:83:72:7a:f9:62:51:d5:fc:c8:
07:15:03:7d:6d:ab:52:d1:25:46:6e:95:98:49:4e:
c1:e2:7b:9f:00:f9:6d:74:7c:d4:eb:c2:3f:f2:93:
27:e1:e1:8a:82:a3:1e:89:00:cd:58:a8:58:13:8e:
51:13:37:5c:05:4a:23:aa:ae:fc:70:d6:91:18:4f:
1f:23:48:eb:2c:aa:93:5b:c7:82:a6:3c:a3:05:52:
52:54:4d:74:49:fc:b8:70:c7:4f:84:81:cf:e2:53:
5d:fd:97:77:12:79:c1:12:b7:8f:e1:a1:2c:1a:5a:
32:7e:58:f1:ee:83:90:53:27:71:c4:8d:84:56:fc:
4b:fd:db:3e:f9:5f:b1:6d:c3:84:d9:d2:20:39:a6:
2b:63:9f:81:68:80:6d:e3:90:da:39:b1:87:ba:73:
45:f8:e9:b0:b6:dd:d4:9a:83:98:e9:69:c1:6b:42:
15:90:37:f3:05:1d:90:dd:06:22:b2:88:d1:33:9d:
23:bf:ac:5c:72:69:72:2c:9a:77:f4:2d:74:ab:6c:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9C:EA:BD:FE:85:B1:C4:19:95:8D:BD:26:05:17:B3:9B:F7:99:35
X509v3 Authority Key Identifier:
keyid:CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/85zqvf6FscQZlY29JgUXs5v3mTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.1.0.0/18
151.1.66.0-151.1.72.255
151.1.74.0-151.2.15.255
151.2.32.0/19
151.2.96.0/20
IPv6:
2a01:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:45:3b:28:4a:f5:3c:bf:11:b0:dc:67:1b:c3:76:e4:9c:d7:
d6:de:b5:a1:6e:da:9f:b3:54:43:82:61:38:93:bc:19:a8:b3:
b6:5c:53:40:62:c5:e4:84:88:24:8f:94:fd:2c:2a:b6:bd:bd:
b8:b5:4a:70:98:a3:6a:22:d9:83:b5:7f:8b:12:33:e0:a2:99:
2e:45:86:c5:ab:2b:64:6d:86:8a:a1:29:76:30:85:15:e2:b7:
b1:3d:31:d9:be:2b:a7:b9:f4:bf:fd:d7:10:78:1b:84:e1:ec:
32:4e:2d:b3:ff:f8:37:da:b4:79:be:57:d1:c1:5c:d5:fc:09:
b1:ae:1c:a9:fd:4b:cd:bb:ce:9c:a2:bd:a7:09:4c:fc:49:2d:
98:77:0f:07:7b:f9:ce:71:31:b9:fa:9f:09:e8:4a:a6:38:f7:
70:69:f9:ec:51:c5:a6:5f:ef:82:47:49:4e:d3:f4:b1:9a:b3:
8c:89:48:ef:02:2c:cd:ee:85:18:65:86:f5:0f:36:73:d8:ae:
ea:d8:8c:97:d0:0e:d9:bf:e7:d6:f2:a1:3c:ac:d5:5b:c6:05:
cb:52:03:80:ab:c3:ff:bf:42:9d:11:b0:53:8d:de:f5:b2:18:
6d:47:b8:69:6d:32:c7:d5:03:14:13:d0:84:3e:c7:5b:18:30:
da:84:07:14
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAZP0CBkRu42NmVNPSwUYqWYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNWIyMTM1M2Y5MmNiZGJmM2I3ZDI1MTNiOWE0NjVhYzUz
YjJkMzkwHhcNMjQxMjIzMTQ1OTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzljZWFiZGZlODViMWM0MTk5NThkYmQyNjA1MTdiMzliZjc5OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+RJlCbQVKB3gj4NF14T/3jTHznz
HekrBGnwCChzwmUGIJjtJQO1VcqJrE2oZnLWX1SDcnr5YlHV/MgHFQN9batS0SVG
bpWYSU7B4nufAPltdHzU68I/8pMn4eGKgqMeiQDNWKhYE45REzdcBUojqq78cNaR
GE8fI0jrLKqTW8eCpjyjBVJSVE10Sfy4cMdPhIHP4lNd/Zd3EnnBEreP4aEsGloy
fljx7oOQUydxxI2EVvxL/ds++V+xbcOE2dIgOaYrY5+BaIBt45DaObGHunNF+Omw
tt3UmoOY6WnBa0IVkDfzBR2Q3QYisojRM50jv6xccmlyLJp39C10q2xulwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFPOc6r3+hbHEGZWNvSYFF7Ob95k1MB8GA1UdIwQY
MBaAFMxbITU/ksvb87fSUTuaRlrFOy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZzaE5ULVN5OXZ6dDlKUk81cEdXc1U3TFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZmIwNTctNWRhZS00ODUxLWFkNDct
NWFkNWYzM2NjOTljLzEvODV6cXZmNkZzY1FabFkyOUpnVVhzNXYzbVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZmIwNTctNWRhZS00ODUxLWFkNDctNWFkNWYzM2NjOTlj
LzEvekZzaE5ULVN5OXZ6dDlKUk81cEdXc1U3TFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQGlwEAMAwD
BAGXAUIDBACXAUgwDAMEAZcBSgMEBJcCAAMEBZcCIAMEBJcCYDANBAIAAjAHAwUA
KgFlwDANBgkqhkiG9w0BAQsFAAOCAQEAQUU7KEr1PL8RsNxnG8N25JzX1t61oW7a
n7NUQ4JhOJO8GaiztlxTQGLF5ISIJI+U/Swqtr29uLVKcJijaiLZg7V/ixIz4KKZ
LkWGxasrZG2GiqEpdjCFFeK3sT0x2b4rp7n0v/3XEHgbhOHsMk4ts//4N9q0eb5X
0cFc1fwJsa4cqf1LzbvOnKK9pwlM/EktmHcPB3v5znExufqfCehKpjj3cGn57FHF
pl/vgkdJTtP0sZqzjIlI7wIsze6FGGWG9Q82c9iu6tiMl9AO2b/n1vKhPKzVW8YF
y1IDgKvD/79CnRGwU43e9bIYbUe4aW0yx9UDFBPQhD7HWxgw2oQHFA==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net