Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/12593qgGGgFROR4Nuj1nIdwQMNI.roa
File: 12593qgGGgFROR4Nuj1nIdwQMNI.roa (raw, json)
Hash identifier: A9CEjuuCS0H6YeHz4UNQ1Webvr8iVS30m2NA2Qfkjp0=
Subject key identifier: D7:6E:7D:DE:A8:06:1A:01:51:39:1E:0D:BA:3D:67:21:DC:10:30:D2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01940CC8E1F863353E02E3CBEFDF25CEE8A7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/12593qgGGgFROR4Nuj1nIdwQMNI.roa
Signing time: Sat 28 Dec 2024 10:21:19 +0000
ROA not before: Sat 28 Dec 2024 10:21:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0c:c8:e1:f8:63:35:3e:02:e3:cb:ef:df:25:ce:e8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 28 10:21:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d76e7ddea8061a0151391e0dba3d6721dc1030d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:cf:c4:d8:ff:8f:49:64:de:27:02:8c:54:
7b:11:02:3e:59:f7:23:4e:6f:51:a4:44:81:ab:0f:
38:90:7d:3d:5d:8b:27:65:a9:2f:d2:21:80:1f:2a:
0d:9b:2a:37:33:bd:6b:82:4d:46:b3:14:4d:41:22:
0e:fa:39:c9:92:c0:1c:e0:69:11:db:dd:09:cc:3c:
21:0f:74:50:4b:70:e3:6e:fb:cf:d8:ba:4e:eb:b4:
f8:1c:b9:84:2a:f4:c0:6a:21:c9:c8:b5:e6:68:fe:
02:b2:b7:b4:4b:57:f2:4f:0e:5c:04:e9:b1:ce:e3:
c1:79:d5:55:80:a3:a8:e2:94:84:c7:7c:2b:ad:3c:
f3:75:bd:9c:ee:8d:00:de:33:c8:48:bf:a3:13:25:
96:97:a1:e4:89:53:a0:58:e0:cc:a6:69:d8:d1:fd:
6b:51:ed:aa:45:64:2a:4c:9d:ad:30:bd:b0:62:2e:
f7:e3:2d:b0:25:5e:3f:ce:e0:eb:98:16:43:22:47:
29:a4:b4:5d:3e:4d:ae:96:2b:87:57:55:e7:5b:43:
0d:7f:39:22:6b:a1:68:18:7c:5e:c2:63:d5:b5:2e:
6d:4c:69:57:9b:e8:ca:92:f4:fb:db:d7:f7:3a:f8:
3c:93:0e:78:32:d1:6b:36:b7:04:af:82:30:4c:d2:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:7D:DE:A8:06:1A:01:51:39:1E:0D:BA:3D:67:21:DC:10:30:D2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/12593qgGGgFROR4Nuj1nIdwQMNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
4d:f5:d1:db:ec:d3:be:60:05:f2:df:fa:bd:c6:3d:d4:62:27:
32:06:4a:ba:fa:95:09:47:70:7d:42:c2:18:2d:6a:61:f5:b4:
0f:21:1d:bc:27:ba:4a:e4:a0:7b:bd:ab:24:75:51:8a:5d:18:
5b:fe:ca:90:52:d0:b0:95:52:a0:95:77:e3:7c:39:40:b2:6e:
b2:7d:eb:1a:ba:30:09:e5:4b:44:6d:fe:42:cd:c0:ac:a2:60:
79:44:89:5a:c5:05:a3:e3:14:db:01:cc:82:06:5c:cc:4b:7a:
36:07:bd:2e:22:8e:50:2f:9b:a6:22:e6:29:af:9d:47:a9:b7:
d1:87:07:dd:d3:c6:70:22:d4:20:f0:e8:57:52:f1:15:7a:e1:
2a:4e:e1:ff:14:13:36:27:a2:22:81:92:b5:8d:f9:06:3e:fc:
b3:94:84:aa:51:43:c2:04:74:68:67:b6:e2:f6:79:e9:f8:c5:
21:6d:01:f3:ae:55:6f:d1:7b:d3:9f:e1:85:b9:4b:46:49:71:
75:b4:33:45:ef:a8:29:54:0e:b3:5f:5e:05:9e:93:2f:d9:ca:
84:e4:8a:da:de:6b:f8:2b:20:1e:0e:07:0d:e8:7e:ca:4a:ce:
8d:7f:28:d1:47:23:04:3a:aa:de:17:ea:7a:1e:27:88:49:17:
08:3a:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:21:11 2025 by rpki-client