Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DIhlYDMvquob05r6_XSfAtuw9rI.roa
File: DIhlYDMvquob05r6_XSfAtuw9rI.roa (raw, json)
Hash identifier: DIidxTaL2ruGqS9SwrpGrBbtZOKPGcRu/46Kh3WpgoE=
Subject key identifier: 0C:88:65:60:33:2F:AA:EA:1B:D3:9A:FA:FD:74:9F:02:DB:B0:F6:B2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193B5442692E0C30A7A4D911D6F6A4507E1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DIhlYDMvquob05r6_XSfAtuw9rI.roa
Signing time: Wed 11 Dec 2024 10:29:22 +0000
ROA not before: Wed 11 Dec 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.204.0/24 maxlen: 24
37.202.205.0/24 maxlen: 24
37.202.206.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:44:26:92:e0:c3:0a:7a:4d:91:1d:6f:6a:45:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 11 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c886560332faaea1bd39afafd749f02dbb0f6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:80:fe:3c:9d:1e:1f:eb:82:58:32:76:5f:
61:4f:4c:0e:8a:5b:96:ed:90:9c:56:97:07:22:82:
49:ba:38:43:9d:9b:e3:be:77:03:c4:85:1c:2d:f9:
41:b0:f1:53:ea:fa:de:bf:40:1b:09:aa:7d:fb:89:
23:03:78:1c:5d:c2:46:2f:b7:f1:ca:3b:90:13:4c:
66:90:c5:e4:db:f5:6a:74:28:0d:d7:e7:2c:c8:dd:
df:19:73:ba:dd:13:6a:71:24:b4:49:8f:3e:5c:11:
cf:db:1d:d1:45:28:71:81:52:a6:2d:8a:53:89:e0:
00:b1:4e:12:6c:ad:cc:eb:bf:06:25:0d:cf:28:ab:
ba:e5:82:72:e1:fd:da:b3:90:ec:50:e3:49:df:7d:
89:26:2e:bc:2d:a6:95:d0:03:9f:b5:df:b1:1d:9b:
17:83:5e:2a:62:d3:7f:59:a7:95:2b:07:d1:51:e5:
3e:00:ae:df:c8:82:90:98:8c:10:5e:c9:32:80:2e:
53:03:02:86:2c:55:2c:bd:ac:51:d9:bb:3a:29:5b:
09:ba:cb:0d:7b:0b:f1:e9:e6:18:e2:ae:b2:35:9f:
52:65:b0:e1:f6:73:ae:7d:f2:a0:9f:d7:36:c4:94:
63:0f:75:f9:fe:17:11:66:ce:40:1f:8e:05:e3:27:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:65:60:33:2F:AA:EA:1B:D3:9A:FA:FD:74:9F:02:DB:B0:F6:B2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DIhlYDMvquob05r6_XSfAtuw9rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0-37.202.206.255
37.202.208.0-37.202.210.255
37.202.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f1:fd:ff:71:9f:b9:9f:5c:f2:3f:4b:c5:1e:dd:9e:65:30:
86:09:07:e0:bb:8e:9c:5d:83:57:a3:24:f0:a7:3a:17:10:24:
6e:3e:9d:6d:1c:34:8d:30:0a:bb:df:27:ca:3d:b2:e4:3b:73:
19:6a:8d:1b:cd:86:50:f6:0a:15:6a:52:b1:e9:ab:35:9d:d8:
cb:03:b9:f7:2f:27:47:59:91:05:68:38:18:82:32:4b:27:a6:
8f:1c:5c:f3:6d:03:d3:6a:11:7e:75:8d:74:a7:0a:7f:3d:48:
84:23:00:a6:99:6e:f6:37:d2:4b:72:1d:38:b3:cc:d2:db:8e:
15:9d:86:a9:28:e9:13:e2:5f:ce:da:4b:4d:9c:cd:8c:25:d4:
e2:a1:91:d4:c1:9b:e9:08:a2:ef:e6:b1:65:5f:79:c1:ae:a5:
28:78:56:b4:cb:01:62:3d:19:95:7b:b3:19:7c:94:33:f9:d7:
78:42:fa:41:cd:5d:6d:7b:19:6a:83:41:fb:e9:ce:e7:c8:02:
22:ce:00:62:b9:69:c8:e1:bb:18:b0:25:d9:94:49:b2:d8:98:
44:e0:d7:15:5f:ee:25:4d:e4:29:8f:ab:ff:d0:36:36:bb:80:
57:b1:b4:f1:eb:3d:bb:21:3c:31:4f:b1:18:c6:a3:35:9a:c5:
87:dc:52:6a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZO1RCaS4MMKek2RHW9qRQfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMjExMTAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzg4NjU2MDMzMmZhYWVhMWJkMzlhZmFmZDc0OWYwMmRiYjBmNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2A/jydHh/rglgydl9hT0wOiluW
7ZCcVpcHIoJJujhDnZvjvncDxIUcLflBsPFT6vrev0AbCap9+4kjA3gcXcJGL7fx
yjuQE0xmkMXk2/VqdCgN1+csyN3fGXO63RNqcSS0SY8+XBHP2x3RRShxgVKmLYpT
ieAAsU4SbK3M678GJQ3PKKu65YJy4f3as5DsUONJ332JJi68LaaV0AOftd+xHZsX
g14qYtN/WaeVKwfRUeU+AK7fyIKQmIwQXskygC5TAwKGLFUsvaxR2bs6KVsJussN
ewvx6eYY4q6yNZ9SZbDh9nOuffKgn9c2xJRjD3X5/hcRZs5AH44F4ydWmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAyIZWAzL6rqG9Oa+v10nwLbsPayMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRElobFlETXZxdW9iMDVyNl9YU2ZBdHV3OXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAlyssD
BAAlys4wDAMEBCXK0AMEACXK0gMEASXK1DANBgkqhkiG9w0BAQsFAAOCAQEAT/H9
/3GfuZ9c8j9LxR7dnmUwhgkH4LuOnF2DV6Mk8Kc6FxAkbj6dbRw0jTAKu98nyj2y
5DtzGWqNG82GUPYKFWpSsemrNZ3YywO59y8nR1mRBWg4GIIySyemjxxc820D02oR
fnWNdKcKfz1IhCMApplu9jfSS3IdOLPM0tuOFZ2GqSjpE+JfztpLTZzNjCXU4qGR
1MGb6Qii7+axZV95wa6lKHhWtMsBYj0ZlXuzGXyUM/nXeEL6Qc1dbXsZaoNB++nO
58gCIs4AYrlpyOG7GLAl2ZRJstiYRODXFV/uJU3kKY+r/9A2NruAV7G08es9uyE8
MU+xGMajNZrFh9xSag==
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:05:44 2025 by rpki-client