Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9oZwo8BVMlra1YiAuoM_TwAtmWk.roa
File: 9oZwo8BVMlra1YiAuoM_TwAtmWk.roa (raw, json)
Hash identifier: BpXsi9aRtJAXX7jidT/S1eVtmDfi8B3Qu63M1yZyb5w=
Subject key identifier: F6:86:70:A3:C0:55:32:5A:DA:D5:88:80:BA:83:3F:4F:00:2D:99:69
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195662E9F1CA989A4E8ADEC06452EF37318
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9oZwo8BVMlra1YiAuoM_TwAtmWk.roa
Signing time: Wed 05 Mar 2025 12:01:26 +0000
ROA not before: Wed 05 Mar 2025 12:01:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.242.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:2e:9f:1c:a9:89:a4:e8:ad:ec:06:45:2e:f3:73:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 5 12:01:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f68670a3c055325adad58880ba833f4f002d9969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:52:cd:75:97:9e:c3:d8:eb:88:6e:81:40:
4a:31:a4:38:4d:73:b4:a7:5a:f1:bf:54:45:62:45:
3e:07:6f:10:9f:38:c2:7a:f0:7f:4d:b0:23:6d:34:
ee:c8:71:98:21:93:82:61:3c:94:ca:f1:b9:60:20:
a9:bb:21:75:db:7a:72:42:37:51:32:17:32:96:ba:
ea:c0:78:47:38:2c:85:33:5c:20:20:92:12:74:09:
32:98:e6:3f:8f:f5:44:fa:80:0c:e2:41:fa:aa:75:
72:12:c6:5a:ec:92:30:99:14:b4:34:72:11:bf:fb:
d0:ce:53:3e:fe:2a:f3:1f:5d:69:82:91:9d:ce:bb:
38:9b:17:85:7f:1a:4c:78:44:0c:23:d6:15:bd:e8:
26:55:4f:56:7c:57:cd:59:56:b0:6f:3d:e0:05:4f:
e6:de:e8:23:b7:fb:e0:7d:00:3e:ac:2e:8e:51:6c:
9a:cb:36:dd:fc:48:f0:d9:3c:3b:aa:f9:27:ff:34:
61:89:e3:10:c8:56:08:75:cf:f8:28:8d:48:ce:67:
b9:37:5b:1f:ab:88:2a:d0:d2:d7:eb:70:a0:a7:22:
d5:53:0e:99:93:13:17:3d:c1:2e:2e:17:ed:82:a9:
6b:72:f4:73:8f:a6:44:c1:86:23:1c:b5:d0:3a:d4:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:70:A3:C0:55:32:5A:DA:D5:88:80:BA:83:3F:4F:00:2D:99:69
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9oZwo8BVMlra1YiAuoM_TwAtmWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.242.63.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4d:ed:91:58:7d:29:d0:e3:f6:80:14:5b:76:05:03:40:fe:
2d:c6:e0:34:8d:cb:8b:e2:2e:33:55:7a:a5:96:dc:89:4f:c4:
6d:fa:3b:11:db:55:99:82:f8:f0:6d:cb:3e:17:00:89:4c:4c:
20:e3:6a:4a:d5:cf:fc:6d:9e:ea:e3:e9:4f:92:42:fb:91:6b:
61:78:67:83:13:e4:b3:a9:7a:31:19:af:2f:3d:73:a0:fe:8f:
f6:4a:53:1d:69:83:0a:57:b2:7d:44:a0:24:25:36:cb:7e:a3:
de:5f:42:0a:b0:d4:b1:9e:d7:40:e2:8b:bb:e4:9c:fe:31:5a:
d9:d6:34:91:86:5c:69:84:9a:f1:18:9e:19:6e:f5:0c:db:15:
dd:c2:3f:2a:3f:98:cf:14:22:4c:b6:8e:86:18:65:d3:73:fd:
d3:ee:03:27:06:e6:4e:6b:88:e2:fc:9e:c4:cf:03:34:4e:a3:
26:05:8f:4a:ec:4b:4f:fe:2e:39:88:0f:ac:3c:8e:19:3b:dc:
72:ad:cf:f5:9d:4c:78:c8:25:d4:d5:1f:18:e1:81:22:25:bb:
f0:6a:6e:49:12:6f:3c:49:37:83:c9:28:5d:a6:db:85:67:a7:
ac:91:00:97:a4:9b:37:e6:42:91:d9:56:22:d8:10:ad:7a:41:
c0:c9:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:49 2025 by rpki-client