Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa
File: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (raw, json)
Hash identifier: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=
Subject key identifier: D5:81:59:51:67:85:B0:51:61:34:7E:A9:1F:EC:FA:A1:37:FB:7B:53
Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial: 01942444C02CDD05EC0D933FE05531F96CFC
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51311
IP address blocks: 178.251.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:2c:dd:05:ec:0d:93:3f:e0:55:31:f9:6c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d58159516785b05161347ea91fecfaa137fb7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:0e:ff:e6:3d:61:60:55:7c:67:b2:f6:0c:
ad:a6:21:75:b0:02:c3:12:93:c5:63:26:d9:e0:9f:
61:11:77:09:e7:ae:29:7d:58:56:20:68:27:fe:77:
c4:63:c6:0c:e5:0c:0c:01:46:f8:a6:11:06:d5:c4:
06:d1:86:ea:37:54:7c:d5:e3:44:ff:22:84:f2:a1:
e9:fa:08:4b:30:5c:c6:ed:0e:5b:75:c4:c2:07:fd:
ac:5f:b0:03:ff:10:88:f5:d6:97:a3:9b:41:02:eb:
1d:f8:d0:59:f2:d2:52:8e:d4:1f:e3:6f:02:7d:d5:
38:2f:76:f9:d1:d3:9a:c5:dd:77:b2:c8:d9:ce:1a:
58:1d:0a:b1:ec:83:5e:f0:20:62:48:b2:5f:dc:73:
9c:f6:e0:50:6c:81:54:83:a6:e5:01:7b:95:e7:df:
4c:13:03:67:fe:06:45:20:45:79:69:80:ea:ba:b4:
dc:28:0e:8f:16:ec:2e:71:fc:e3:30:e2:0a:8a:b7:
07:2d:2d:04:c9:1b:38:61:2f:32:d6:3e:a3:a0:bd:
bf:af:2a:25:4e:ff:f6:19:d2:41:dc:56:c6:cf:b9:
dd:ce:12:89:0f:25:8b:6c:e2:0e:e8:02:1a:d3:f0:
fc:aa:9b:be:f2:e7:72:13:96:be:31:f8:61:14:90:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:59:51:67:85:B0:51:61:34:7E:A9:1F:EC:FA:A1:37:FB:7B:53
X509v3 Authority Key Identifier:
keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:3c:e9:5f:fd:0c:d4:08:fc:d1:70:2a:dc:28:1e:03:68:10:
64:9f:db:1e:db:91:56:d1:a8:bf:db:9c:47:5b:f6:25:eb:d4:
ef:08:51:52:df:24:18:a4:ab:e4:9d:87:7c:e4:05:3e:20:af:
4c:89:b5:41:30:c1:65:93:40:6b:cc:19:86:08:2a:a0:6c:ef:
69:68:c6:e6:57:22:54:b9:d3:36:af:ba:83:7c:05:95:df:72:
db:bc:c2:c2:1d:fd:d2:29:64:8e:54:f3:67:23:59:8c:e2:7e:
f9:67:a0:c9:e2:5c:b2:c0:12:06:a4:95:c6:79:b1:55:69:1f:
ea:87:ae:2c:50:ba:3b:28:b6:5b:a0:4d:7d:b6:48:83:84:1f:
bb:e0:48:17:d0:11:7d:f1:2e:4d:81:42:bf:2c:c7:2a:d5:20:
20:52:10:1b:ef:84:df:5b:e9:bc:df:4c:b6:48:64:3d:57:10:
4e:58:cb:64:ca:1b:c0:d6:28:be:c7:73:c5:ef:fe:2b:2b:74:
a9:94:72:9c:6a:8d:5f:74:6e:3e:20:4c:25:6d:b5:e0:4a:91:
f4:4b:d8:35:f8:4d:a9:f2:d8:43:f2:1b:1d:2d:89:cb:58:2f:
99:9a:1e:7c:84:fc:44:76:05:57:4c:65:8c:3a:34:87:9a:5b:
cb:e8:5d:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRMAs3QXsDZM/4FUx+Wz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWM4ZGZmNGU5OWQzZTIyODlhZjYzYjE1ZDU1ZDI0NTBj
ODQyYzMwHhcNMjUwMTAxMjM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTgxNTk1MTY3ODViMDUxNjEzNDdlYTkxZmVjZmFhMTM3ZmI3YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4O/+Y9YWBVfGey9gytpiF1sALD
EpPFYybZ4J9hEXcJ564pfVhWIGgn/nfEY8YM5QwMAUb4phEG1cQG0YbqN1R81eNE
/yKE8qHp+ghLMFzG7Q5bdcTCB/2sX7AD/xCI9daXo5tBAusd+NBZ8tJSjtQf428C
fdU4L3b50dOaxd13ssjZzhpYHQqx7INe8CBiSLJf3HOc9uBQbIFUg6blAXuV599M
EwNn/gZFIEV5aYDqurTcKA6PFuwucfzjMOIKircHLS0EyRs4YS8y1j6joL2/ryol
Tv/2GdJB3FbGz7ndzhKJDyWLbOIO6AIa0/D8qpu+8udyE5a+MfhhFJCr3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWBWVFnhbBRYTR+qR/s+qE3+3tTMB8GA1UdIwQY
MBaAFCKsjf9OmdPiKJr2OxXVXSRQyELDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUt
ODI5OThhOTI4N2UyLzEvMVlGWlVXZUZzRkZoTkg2cEgtejZvVGY3ZTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUtODI5OThhOTI4N2Uy
LzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvuYMA0G
CSqGSIb3DQEBCwUAA4IBAQBvPOlf/QzUCPzRcCrcKB4DaBBkn9se25FW0ai/25xH
W/Yl69TvCFFS3yQYpKvknYd85AU+IK9MibVBMMFlk0BrzBmGCCqgbO9paMbmVyJU
udM2r7qDfAWV33LbvMLCHf3SKWSOVPNnI1mM4n75Z6DJ4lyywBIGpJXGebFVaR/q
h64sULo7KLZboE19tkiDhB+74EgX0BF98S5NgUK/LMcq1SAgUhAb74TfW+m830y2
SGQ9VxBOWMtkyhvA1ii+x3PF7/4rK3SplHKcao1fdG4+IEwlbbXgSpH0S9g1+E2p
8thD8hsdLYnLWC+Zmh58hPxEdgVXTGWMOjSHmlvL6F29
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:53 2025 by rpki-client