Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ItrFP7lWGd2TRqGwJcjBhfAtFvo.roa
File: ItrFP7lWGd2TRqGwJcjBhfAtFvo.roa (raw, json)
Hash identifier: SJln/Fh3r6/tmpY3WrQ9ydC1rXtFn/HIsvC84InlaUw=
Subject key identifier: 22:DA:C5:3F:B9:56:19:DD:93:46:A1:B0:25:C8:C1:85:F0:2D:16:FA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195653EAA14D3C54C614E415880BAC3559B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ItrFP7lWGd2TRqGwJcjBhfAtFvo.roa
Signing time: Wed 05 Mar 2025 07:39:20 +0000
ROA not before: Wed 05 Mar 2025 07:39:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 37.202.219.0/24 maxlen: 24
151.242.92.0/24 maxlen: 24
151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.95.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.101.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.112.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:3e:aa:14:d3:c5:4c:61:4e:41:58:80:ba:c3:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 5 07:39:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22dac53fb95619dd9346a1b025c8c185f02d16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:c4:33:06:ad:bb:1c:9e:61:cd:d5:f5:a6:
15:cd:06:1a:39:99:84:87:bc:ef:4e:57:a3:8b:93:
d4:77:16:ba:35:c3:31:14:bb:2a:d0:50:e0:7b:51:
4a:5e:e7:3f:e1:0c:f2:7c:0c:de:d2:d8:a8:f2:67:
a1:53:39:18:41:fc:83:e5:e7:7e:4b:fd:5a:e2:54:
ce:bb:74:1a:7a:c3:79:ee:44:66:52:74:d5:26:0c:
32:92:0a:fa:fa:61:71:d2:1d:b5:53:0d:b2:12:4a:
01:59:3c:f2:9b:54:84:0f:80:b6:30:e6:cd:06:0c:
1d:37:4d:23:4b:3a:c6:bd:ac:f2:6e:34:e0:cc:a3:
b2:ee:d5:d3:37:08:ce:e5:71:73:53:32:e5:81:46:
a5:40:fb:c8:8d:a1:08:4a:3f:88:4a:02:d3:47:34:
f9:ee:aa:d9:18:ef:8f:e2:8c:f0:13:d3:a7:d2:2f:
89:b1:25:c1:63:76:b3:04:38:51:bd:55:63:f0:d9:
77:de:4a:13:10:9b:4d:30:52:e7:f8:09:3b:04:3e:
9a:e9:fe:41:a4:cb:fb:5f:32:65:92:c4:c2:ff:48:
7d:50:ab:b1:fd:63:0a:3d:a1:0d:8e:c4:59:e7:00:
63:17:d8:93:43:36:05:71:4e:2e:fd:8d:7d:e7:17:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:C5:3F:B9:56:19:DD:93:46:A1:B0:25:C8:C1:85:F0:2D:16:FA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ItrFP7lWGd2TRqGwJcjBhfAtFvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.242.92.0-151.242.96.255
151.242.98.0/24
151.242.100.0/23
151.242.103.0/24
151.242.105.0/24
151.242.107.0/24
151.242.109.0/24
151.242.112.0/23
151.242.115.0/24
151.243.168.0/24
151.243.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:62:13:a8:2a:f7:29:ec:2d:ee:50:be:37:ca:a8:d5:23:5e:
f2:82:d2:57:4f:c6:07:57:01:0a:4f:21:33:95:c4:60:dd:e2:
fc:37:0d:59:a3:94:1d:4c:a6:24:04:8c:a9:a3:51:63:c0:67:
cb:d4:f7:64:9b:5a:a6:45:83:a0:ac:e0:8e:ff:d6:57:3e:a9:
cb:08:4b:fc:b0:8d:c2:b1:82:6b:c9:e2:b1:cd:5b:fc:89:2c:
47:3a:1f:b8:65:63:62:12:5d:f1:89:92:71:0d:89:98:d8:13:
76:6e:0c:53:5b:82:7a:df:ba:33:ab:cd:4f:15:15:69:50:a3:
80:0a:a3:7e:28:6b:16:f8:e2:84:d2:cb:50:70:db:1a:db:57:
71:df:20:ef:95:00:cd:1c:56:84:6c:db:99:58:1f:ff:e3:20:
c2:bc:c9:5d:b7:cc:29:a3:c1:32:8f:5e:d7:c1:bd:c3:1d:05:
1b:0f:78:8c:5f:3e:ea:1b:e7:3d:41:6c:1e:73:6b:d7:b8:44:
41:e8:d2:07:9c:80:d3:09:85:f4:03:51:54:21:cc:ef:13:fb:
83:ee:41:b0:b4:ac:40:14:63:f2:5d:a1:23:e3:2e:4f:5e:77:
81:a6:c7:13:18:af:bc:f7:71:b2:7a:1f:85:5e:c6:07:e8:c4:
07:72:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:14 2025 by rpki-client