Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeEHKln2cSJbV-bdNh9ITNyHWOE.roa
File: EeEHKln2cSJbV-bdNh9ITNyHWOE.roa (raw, json)
Hash identifier: FWgm12gQ1oZoqnmgWhWED430vgsBBeCKdzGN3X3R6zQ=
Subject key identifier: 11:E1:07:2A:59:F6:71:22:5B:57:E6:DD:36:1F:48:4C:DC:87:58:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195511FE62D21C41F35030BD5412DA4972F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeEHKln2cSJbV-bdNh9ITNyHWOE.roa
Signing time: Sat 01 Mar 2025 09:53:19 +0000
ROA not before: Sat 01 Mar 2025 09:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.34.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.104.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:1f:e6:2d:21:c4:1f:35:03:0b:d5:41:2d:a4:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 09:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e1072a59f671225b57e6dd361f484cdc8758e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:c1:13:59:15:98:e4:d7:8d:03:d0:52:61:
f3:bb:87:8b:51:b7:12:96:0f:4b:7b:1d:a5:fc:00:
03:88:d3:8e:e9:39:e6:c4:3a:d1:96:b7:34:8d:90:
03:f8:a1:27:2d:ba:86:02:dc:81:95:72:e3:9f:0e:
0e:59:6c:96:28:6c:21:fb:cc:2d:4b:06:d9:62:62:
a6:59:da:d1:36:f7:e1:86:2d:90:72:e8:5b:0f:a4:
89:2c:fb:fb:ef:71:ba:18:75:f6:05:67:cd:33:e8:
7d:9a:01:08:ab:80:c2:98:91:21:26:8e:af:a6:69:
31:b1:4f:27:c8:f6:bb:a3:c3:2e:0e:71:78:f9:66:
ed:6d:b5:d7:67:a3:18:96:56:7d:9b:fd:b2:78:ca:
fd:69:7a:19:99:b3:14:bd:03:66:99:4c:4b:e4:df:
19:94:2f:02:64:b8:fb:f7:14:90:10:9e:8b:74:c6:
2f:71:94:77:db:7f:8a:79:c0:ff:6f:71:ab:14:cf:
06:c7:af:d7:43:0c:10:21:2e:57:09:65:b9:76:bb:
98:ce:4f:36:1c:f2:0f:2d:89:74:43:f2:26:3e:c3:
ad:64:e2:f5:08:83:ae:01:7a:0f:fa:74:6c:db:f5:
b3:f7:71:3a:ab:ac:2d:69:7f:ba:8e:f1:73:ad:eb:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:07:2A:59:F6:71:22:5B:57:E6:DD:36:1F:48:4C:DC:87:58:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EeEHKln2cSJbV-bdNh9ITNyHWOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.210.0/24
37.202.212.0/23
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.34.0/24
151.242.192.0/20
151.242.242.0/24
151.243.83.0/24
151.243.104.0/24
151.243.158.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:25:b2:3e:9a:b9:32:0b:e7:6e:a4:d9:0a:a9:31:52:3b:44:
a6:94:0d:9d:7e:a7:d0:0a:d7:e4:39:6a:ce:7f:74:2c:53:a5:
cc:5a:17:53:e4:38:48:7d:a6:82:56:85:ed:39:db:d0:06:66:
e7:5d:a5:b1:9a:a5:0b:5f:db:e2:9c:99:71:64:fc:94:92:d7:
13:c5:51:99:0d:c5:32:c2:4f:2a:51:62:53:38:35:fc:6c:20:
17:b3:86:23:64:36:5a:e8:72:9d:41:71:46:81:6b:d6:b4:a5:
b8:ec:82:27:57:ad:67:d2:8d:37:9b:74:90:70:6d:90:c9:c8:
64:3b:c8:09:67:71:dc:05:7c:62:5e:5d:ac:b7:d4:e8:80:5a:
ff:6c:b1:17:f9:58:3d:79:55:a3:ec:24:72:12:13:a2:00:c1:
27:6a:ca:db:eb:1e:31:3b:79:ab:6a:f7:57:51:4e:34:c7:af:
92:c3:98:60:3f:d6:0e:a6:fa:0c:15:f8:f1:be:25:ee:47:b5:
5a:37:ee:6a:6a:94:17:d9:0d:e7:ad:17:65:e4:79:ee:23:19:
44:94:d3:58:90:7c:24:d0:f5:f7:ed:38:b7:50:86:64:5b:86:
d2:86:6a:f1:b0:6c:84:a3:5e:d9:9f:ea:d0:ba:fb:21:1b:ff:
a4:b1:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:02:56 2025 by rpki-client