Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2iw9lP54Jgk0ub8GajDckXnZVF0.roa
File: 2iw9lP54Jgk0ub8GajDckXnZVF0.roa (raw, json)
Hash identifier: eyyb/a6YZmzF9rIZfStdsZqBt+97IB9KRSZuR+vYVwk=
Subject key identifier: DA:2C:3D:94:FE:78:26:09:34:B9:BF:06:6A:30:DC:91:79:D9:54:5D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019469769507DAAD37DC5DA2F37B5C5B59BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2iw9lP54Jgk0ub8GajDckXnZVF0.roa
Signing time: Wed 15 Jan 2025 10:16:06 +0000
ROA not before: Wed 15 Jan 2025 10:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
37.202.217.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:76:95:07:da:ad:37:dc:5d:a2:f3:7b:5c:5b:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 10:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da2c3d94fe78260934b9bf066a30dc9179d9545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:ea:f7:c0:d9:97:32:9c:b5:f5:17:f2:7c:
dd:c7:89:be:67:b8:83:37:48:c0:b0:df:ed:c5:a5:
4a:97:01:22:fd:a7:db:5a:e8:f4:fe:24:23:bf:74:
a3:73:13:58:e6:05:2d:4d:9b:c0:16:54:01:51:d4:
24:7d:6f:2f:dc:c0:fb:3a:d2:f9:61:5a:67:e5:4a:
8b:92:06:6a:85:03:6d:68:20:4c:60:b7:78:92:c6:
34:dc:94:52:b7:73:e8:5e:9f:7a:d2:d6:b1:d1:c3:
f3:53:ba:ba:e7:ad:b9:40:33:a4:07:cc:91:13:d2:
bc:01:16:f5:08:74:97:f0:a3:c0:b4:4c:81:fd:d8:
41:2b:e2:1a:b8:f6:e5:1f:af:f7:61:6d:5d:57:4c:
c6:8d:d9:80:57:7f:2e:b2:0f:ce:20:9b:f5:3e:d8:
23:28:fc:06:e2:19:80:66:51:a5:a2:ba:74:cd:31:
86:ab:ed:39:e7:41:d8:78:2b:4d:2c:a1:5f:0f:a3:
9b:37:0f:09:04:f6:96:41:a7:a3:42:fd:e3:3a:54:
d2:f1:86:cf:c6:cd:22:8c:af:1f:e6:2e:ea:5f:ec:
46:3c:41:55:87:03:44:b4:08:95:87:a3:36:18:a2:
07:20:78:a0:5f:d9:95:b0:0a:b3:08:ca:55:92:a6:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:3D:94:FE:78:26:09:34:B9:BF:06:6A:30:DC:91:79:D9:54:5D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2iw9lP54Jgk0ub8GajDckXnZVF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
37.202.217.0/24
37.202.220.0/24
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
151.243.222.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
35:13:7c:14:7d:95:62:15:1c:dd:1a:51:13:18:b0:d2:d9:07:
6c:1a:77:7c:c7:c6:75:06:62:6c:d0:cc:82:ef:ec:9b:a6:c3:
e3:dd:f8:0e:62:3d:d7:3c:f4:6a:65:20:94:5c:35:0f:1d:2b:
16:d1:c7:0b:1d:2f:0f:29:c5:90:03:93:88:f7:09:b9:86:9d:
cd:33:4d:24:7a:58:96:8e:82:cd:ea:de:e2:40:29:15:be:87:
2d:ed:2d:59:a8:2c:f9:63:87:0e:83:8f:60:42:8f:d3:06:fc:
31:f5:e5:f3:7c:1e:b7:64:77:d0:c5:6a:b5:75:7d:5a:d8:a3:
7a:44:b5:14:5a:4d:e9:e8:7a:27:7d:f3:3e:b8:55:d4:57:49:
88:a2:60:f9:db:d9:88:be:b1:25:1b:cf:a2:0f:6e:14:0b:61:
f4:44:c1:27:d5:33:72:6d:3c:3b:1a:27:a7:39:d1:e4:58:47:
e0:31:42:bb:e6:d5:f7:0a:69:88:59:b6:83:29:c7:d2:9f:54:
02:47:05:70:18:43:82:25:ca:aa:45:81:56:40:00:6b:7c:38:
79:25:3a:7f:d8:da:7c:ae:ac:33:03:ed:b3:2d:cf:ac:f8:70:
1a:88:d4:21:52:a1:67:ee:f6:bb:fb:d5:3c:bc:47:76:e5:27:
7f:68:ac:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:06 2025 by rpki-client