Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JvrSAYbsgkJCEezlBrV8KbHIP1g.roa
File: JvrSAYbsgkJCEezlBrV8KbHIP1g.roa (raw, json)
Hash identifier: riPEwaWkn6hCB0CY0gRRCJB+Tw1r6gpSg5vRb+cqx9Q=
Subject key identifier: 26:FA:D2:01:86:EC:82:42:42:11:EC:E5:06:B5:7C:29:B1:C8:3F:58
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194DF0FDE98B5E6126C47D872BDFDE5A143
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JvrSAYbsgkJCEezlBrV8KbHIP1g.roa
Signing time: Fri 07 Feb 2025 06:19:06 +0000
ROA not before: Fri 07 Feb 2025 06:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.206.0/24 maxlen: 24
151.242.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:0f:de:98:b5:e6:12:6c:47:d8:72:bd:fd:e5:a1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 7 06:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26fad20186ec82424211ece506b57c29b1c83f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:d2:cf:fe:91:9b:05:a3:e7:6f:ea:3c:86:
92:07:5d:a9:4f:19:4a:20:59:54:bc:34:62:78:f4:
0b:12:c1:ec:70:b5:f1:09:94:ef:a5:f5:33:3c:12:
ba:cb:bd:c7:77:af:f9:0b:4c:e0:99:ca:6e:8a:ec:
9b:b2:35:6f:28:84:e6:2e:01:e0:88:c6:18:65:43:
28:35:7a:6f:95:b0:d9:99:f3:70:a7:be:cd:32:3e:
fa:06:a4:01:8c:8c:11:e2:e4:ca:33:89:87:37:12:
0e:c9:ae:de:6c:1a:18:2c:64:f0:67:c1:f6:5c:8e:
a1:04:1c:1a:a0:76:8c:5d:ee:3d:fe:fb:5a:5a:8d:
2e:9a:ee:ef:2a:eb:dd:49:4c:e7:8f:3e:08:8b:8e:
1a:fc:7c:d7:43:96:04:31:b0:47:f8:46:e5:09:11:
87:2f:cf:c7:89:41:a8:7f:cb:c7:d7:e4:a1:dd:b1:
ce:b1:fc:33:90:25:8d:2e:3a:b9:8b:20:ba:de:2e:
55:f0:a9:eb:e9:e3:0d:e2:e0:db:af:38:3f:8e:f0:
ea:29:2a:c6:c3:96:bd:15:c1:1d:1a:46:ce:c8:6e:
3b:68:54:4e:98:93:70:df:ab:6e:ed:10:7a:c3:0d:
ef:ae:e3:72:77:ae:2d:c9:74:77:2a:c7:78:6d:4d:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:D2:01:86:EC:82:42:42:11:EC:E5:06:B5:7C:29:B1:C8:3F:58
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JvrSAYbsgkJCEezlBrV8KbHIP1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.206.0/24
151.242.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ed:41:68:f2:fb:fa:c7:be:94:8b:0b:c4:65:7a:4e:19:ba:
e4:15:cc:a1:ff:7d:c5:cd:9a:25:8e:7e:d0:80:47:86:78:54:
7c:53:4a:e5:94:05:84:f5:56:84:34:f5:cc:31:3b:6f:fd:45:
69:f7:a9:f1:fe:3c:94:ef:0f:a0:f7:f7:4e:e7:6d:96:42:df:
ed:b4:e2:0e:f9:05:43:d5:b9:07:8b:13:75:30:63:e5:a6:fa:
24:e2:b1:c2:74:30:c8:cb:71:37:a0:1a:70:47:b9:86:c7:88:
af:d5:eb:5d:78:03:0c:5a:94:79:66:8c:0e:e7:7c:09:8f:52:
f3:1f:55:ac:d9:63:45:4b:61:87:f2:0e:2e:79:f6:7b:e2:4c:
b8:16:6d:b4:08:0e:c3:ca:bc:88:85:8c:47:3c:be:d1:c3:91:
86:bb:03:62:19:55:68:e3:e7:72:96:86:6a:54:f7:ee:53:5c:
a7:71:0f:2f:fa:30:ec:32:37:71:b4:96:ef:7e:be:d8:84:5a:
45:6c:5c:03:fa:50:f5:7a:94:33:3e:82:d6:b5:1a:75:27:d8:
0e:0d:73:aa:fc:e0:a6:0b:9c:5b:89:5b:a8:0a:a4:0d:40:9f:
83:f4:21:38:db:bd:3d:55:c2:dd:af:d8:4a:11:92:f8:9f:f5:
c7:6f:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:23 2025 by rpki-client