Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4xmPfZwwL-3LA6_7Op73Ran_Flk.roa
File: 4xmPfZwwL-3LA6_7Op73Ran_Flk.roa (raw, json)
Hash identifier: 53fkFmrwJsBOpECVaJEyPWxTHJeZFnhr7SRfaSFLQbA=
Subject key identifier: E3:19:8F:7D:9C:30:2F:ED:CB:03:AF:FB:3A:9E:F7:45:A9:FF:16:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7A87E4453131F28294F85F3CC6142
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4xmPfZwwL-3LA6_7Op73Ran_Flk.roa
Signing time: Wed 01 Jan 2025 21:48:43 +0000
ROA not before: Wed 01 Jan 2025 21:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 37.202.219.0/24 maxlen: 24
37.202.223.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a8:7e:44:53:13:1f:28:29:4f:85:f3:cc:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3198f7d9c302fedcb03affb3a9ef745a9ff1659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:49:27:b7:8e:32:f2:24:00:ab:ca:2c:51:0e:
80:c5:28:94:19:bc:50:de:20:3a:02:db:ad:f2:40:
7f:7c:4a:c6:ff:54:4a:e5:16:01:b3:f1:ad:8a:71:
45:8d:c7:c4:2c:05:d9:2f:73:3c:42:39:bb:8a:54:
ea:e7:22:70:33:b7:3b:15:66:6b:7b:ee:94:63:dc:
e0:d5:93:68:a1:c7:b4:e1:03:60:37:2c:f9:f5:99:
8b:85:0e:d7:4a:95:39:af:57:a5:c5:3a:32:f4:ea:
27:00:77:c1:09:86:04:5f:97:f8:99:d1:ad:4d:d8:
f0:11:be:29:87:4c:ca:3a:12:10:ad:27:34:b4:16:
a0:15:d6:e4:14:25:6f:9e:d8:c8:42:2a:65:db:98:
d6:e1:fe:a5:c2:93:d0:20:23:3e:e8:3e:6d:e6:85:
c7:f3:9e:69:4b:15:50:4c:ba:72:62:2e:4a:44:d9:
4e:10:b2:f9:22:c0:a2:86:94:7c:21:de:34:ac:27:
75:1b:0f:ac:2b:b3:42:4b:13:8c:24:60:d6:2c:a5:
46:0a:ac:f7:87:20:c5:58:c2:e8:ca:f1:bd:35:62:
5b:13:19:ee:31:95:04:a7:78:5e:ae:9c:52:8d:1d:
85:c6:76:e0:02:e9:96:35:c2:16:bb:2c:08:48:da:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:8F:7D:9C:30:2F:ED:CB:03:AF:FB:3A:9E:F7:45:A9:FF:16:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4xmPfZwwL-3LA6_7Op73Ran_Flk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
37.202.223.0/24
151.243.168.0/24
151.243.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fe:6e:ee:35:dd:4c:ba:af:0c:b7:a4:d3:e9:14:ab:66:1d:
b4:9f:6b:fb:ac:79:53:32:c3:cb:48:18:94:6a:53:f5:ee:1d:
df:46:b7:15:ef:20:99:9f:3f:87:25:bc:13:82:8b:66:80:85:
d6:e1:70:18:33:09:af:76:e5:e6:d2:d5:93:2d:8b:11:f0:50:
77:b5:96:4c:9c:86:f3:4d:09:9f:94:fe:4c:96:0c:ba:2e:89:
6f:fa:22:8b:7e:94:24:7f:67:0a:7c:09:a8:f8:4f:03:1b:22:
85:8c:69:95:57:0c:36:67:bd:e5:c7:56:76:ab:ea:35:90:ad:
ef:e1:e1:25:bc:48:37:b3:24:3b:0f:2d:05:af:32:11:93:76:
e2:25:1d:45:b2:46:b8:80:71:71:5e:43:3a:7a:7e:41:22:f6:
7c:43:34:cd:29:02:f5:75:b1:1a:3a:77:a9:b5:56:44:47:74:
7d:c6:c5:bb:ee:25:57:29:b0:57:a7:9a:0b:cb:39:4d:ce:df:
d5:a1:61:ac:a6:33:53:b9:10:ec:2a:81:ad:5b:27:0a:c7:81:
d1:cf:f5:2e:d2:d5:e0:bd:aa:39:f9:cf:c1:ee:54:9a:1f:e8:
25:85:e3:f7:5d:27:fc:47:cb:7d:71:00:00:d5:25:ad:11:5f:
d2:75:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:12 2025 by rpki-client