Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/6_SorJ25G4u7YBwW2zeSokP08Hc.roa
File: 6_SorJ25G4u7YBwW2zeSokP08Hc.roa (raw, json)
Hash identifier: NlgmlGFa+T46F9+6RUbpmORo7iUI0GDNp4IaSTudvHk=
Subject key identifier: EB:F4:A8:AC:9D:B9:1B:8B:BB:60:1C:16:DB:37:92:A2:43:F4:F0:77
Certificate issuer: /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial: 019421B227DDC6B0A82C850007914C933508
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/6_SorJ25G4u7YBwW2zeSokP08Hc.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24771
IP address blocks: 151.88.0.0/16 maxlen: 16
151.88.113.0/24 maxlen: 24
151.92.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:dd:c6:b0:a8:2c:85:00:07:91:4c:93:35:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf4a8ac9db91b8bbb601c16db3792a243f4f077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:d1:17:1c:ba:85:25:b1:49:92:06:d1:0d:
27:0e:40:77:fa:ad:f8:ac:7e:59:1e:3a:8b:6e:db:
b0:63:3c:2d:2b:53:8a:fe:73:10:fa:9f:3b:41:e4:
b7:b5:62:83:2b:ec:f2:18:68:d4:a9:48:32:43:47:
03:33:ad:69:e0:4d:a6:89:d7:be:b1:95:7e:2d:b9:
1f:9c:f7:05:56:99:66:8c:f7:ff:1a:43:85:38:a5:
25:26:d9:1c:49:c1:7a:f3:e4:7c:57:32:9f:51:f9:
73:8d:00:c7:64:7c:22:30:4e:e2:8d:ec:fc:50:d9:
a9:2d:d4:42:0c:79:4c:ba:47:dd:22:da:63:6c:7d:
56:25:ac:fa:2f:02:43:3a:c9:23:5b:36:4f:dd:90:
27:6a:91:05:f0:12:5f:ef:1d:54:3b:c0:09:62:ab:
d0:f3:09:44:f9:57:23:2a:fb:f1:5c:ff:c9:15:8d:
d5:53:2d:55:5e:98:94:10:84:c0:41:d8:a2:a2:e0:
ba:16:d0:8a:0b:9f:fe:22:3d:b0:78:ec:34:e8:46:
c5:29:59:f8:ef:56:bc:55:81:01:8b:89:63:c9:ae:
7a:40:12:e8:e6:5f:ba:ae:d4:aa:38:93:e6:0a:8c:
35:f2:89:5f:2b:7d:84:01:53:76:39:04:4c:79:e7:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:A8:AC:9D:B9:1B:8B:BB:60:1C:16:DB:37:92:A2:43:F4:F0:77
X509v3 Authority Key Identifier:
keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/6_SorJ25G4u7YBwW2zeSokP08Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.0.0/16
151.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:55:62:64:de:dc:bd:6e:f7:7e:4c:5e:3d:8c:bb:46:87:5a:
f9:cc:d4:aa:33:33:c2:04:0c:40:9a:f7:75:72:06:6d:fe:2c:
e0:3e:c1:a9:70:91:f9:bc:f8:c5:af:ae:bb:a0:14:e3:24:2d:
21:f6:02:95:73:28:f2:ab:4e:7f:50:f7:12:0d:89:15:ed:b0:
a2:c5:93:8c:46:2b:cc:cf:d0:31:93:5d:21:23:f5:21:ad:c0:
80:c3:38:00:62:54:19:c9:f7:75:d0:6f:ec:2c:0b:43:85:60:
b7:b3:43:a2:24:ef:41:aa:ac:68:6f:20:92:f5:09:5e:80:21:
04:cd:aa:63:98:aa:15:ca:ea:eb:09:71:19:fc:7e:cf:f7:dd:
01:0a:e1:44:67:8a:8f:72:8a:e0:e2:24:d8:c7:f3:0b:04:d3:
6b:4e:ef:74:4d:f9:b3:94:7b:8b:e8:e9:fb:e3:3f:67:3e:ec:
ae:d2:97:48:34:b5:2d:e6:5c:a7:92:81:ae:09:fe:2b:62:1d:
6a:80:38:05:37:fa:12:10:52:77:e5:9f:c4:1a:22:12:e0:e6:
68:29:0e:ca:fb:6a:1e:a4:f1:3c:f6:87:73:7b:fc:39:5f:b7:
47:9f:00:bd:ce:b2:2f:72:aa:29:6b:50:aa:89:4f:5b:32:42:
68:27:ed:b5
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQhsifdxrCoLIUAB5FMkzUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YWFmZjg3ZjZkYzBkMzY5OWJjMjkzN2EzNGRjNzE3Zjk0
ZjAwN2UwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmY0YThhYzlkYjkxYjhiYmI2MDFjMTZkYjM3OTJhMjQzZjRmMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5DRFxy6hSWxSZIG0Q0nDkB3+q34
rH5ZHjqLbtuwYzwtK1OK/nMQ+p87QeS3tWKDK+zyGGjUqUgyQ0cDM61p4E2mide+
sZV+LbkfnPcFVplmjPf/GkOFOKUlJtkcScF68+R8VzKfUflzjQDHZHwiME7ijez8
UNmpLdRCDHlMukfdItpjbH1WJaz6LwJDOskjWzZP3ZAnapEF8BJf7x1UO8AJYqvQ
8wlE+VcjKvvxXP/JFY3VUy1VXpiUEITAQdiiouC6FtCKC5/+Ij2weOw06EbFKVn4
71a8VYEBi4ljya56QBLo5l+6rtSqOJPmCow18olfK32EAVN2OQRMeefo9QIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFOv0qKyduRuLu2AcFts3kqJD9PB3MB8GA1UdIwQY
MBaAFASq/4f23A02mbwpN6NNxxf5TwB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2Mt
ZTNlMGMyZGJmMDY3LzEvNl9Tb3JKMjVHNHU3WUJ3VzJ6ZVNva1AwOEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2MtZTNlMGMyZGJmMDY3
LzEvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAl1gDAwCX
XDANBgkqhkiG9w0BAQsFAAOCAQEAJ1ViZN7cvW73fkxePYy7Roda+czUqjMzwgQM
QJr3dXIGbf4s4D7BqXCR+bz4xa+uu6AU4yQtIfYClXMo8qtOf1D3Eg2JFe2wosWT
jEYrzM/QMZNdISP1Ia3AgMM4AGJUGcn3ddBv7CwLQ4Vgt7NDoiTvQaqsaG8gkvUJ
XoAhBM2qY5iqFcrq6wlxGfx+z/fdAQrhRGeKj3KK4OIk2MfzCwTTa07vdE35s5R7
i+jp++M/Zz7srtKXSDS1LeZcp5KBrgn+K2IdaoA4BTf6EhBSd+WfxBoiEuDmaCkO
yvtqHqTxPPaHc3v8OV+3R58Avc6yL3KqKWtQqolPWzJCaCfttQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:33 2025 by rpki-client