Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K9Xl80Up0htw_vQGFrhja2EGbDE.roa
File: K9Xl80Up0htw_vQGFrhja2EGbDE.roa (raw, json)
Hash identifier: 04CZScu44E2GEMGF+XJJ4R3rzWS0gudAaLKTXyeN2pI=
Subject key identifier: 2B:D5:E5:F3:45:29:D2:1B:70:FE:F4:06:16:B8:63:6B:61:06:6C:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019504A6979CB941C83ABF5CE7AD4B779CA2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K9Xl80Up0htw_vQGFrhja2EGbDE.roa
Signing time: Fri 14 Feb 2025 13:29:41 +0000
ROA not before: Fri 14 Feb 2025 13:29:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.104.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:a6:97:9c:b9:41:c8:3a:bf:5c:e7:ad:4b:77:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 14 13:29:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bd5e5f34529d21b70fef40616b8636b61066c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:ee:27:1f:4a:e2:38:f9:26:ee:24:0c:9b:
da:0e:c4:ca:6a:5b:8d:88:8b:8c:a3:39:dc:31:9f:
2d:ca:a4:2f:53:8f:ac:1f:12:a6:ef:c4:4a:cb:c1:
31:5a:f8:7c:16:20:89:fc:8b:60:89:8c:b0:78:28:
e0:2a:f2:f5:39:e1:f9:5f:e2:fa:9b:68:00:b2:c0:
07:d5:93:4f:fe:eb:23:56:10:bf:2c:52:b1:96:b9:
66:e5:ac:37:11:d0:b9:f9:f7:7b:fd:44:c7:39:e6:
06:cb:84:54:b8:5e:94:8d:58:45:d4:e8:bb:8a:4a:
45:14:0d:f2:d5:ab:4f:f1:e0:21:fa:c4:c4:3b:98:
92:bb:88:c2:df:89:fb:60:24:3c:00:4f:14:0c:ca:
7c:ff:23:42:5f:76:6c:8d:54:e0:40:7e:08:bd:b6:
85:68:39:51:40:6f:44:54:ae:7e:74:52:5c:df:6b:
8d:d8:7e:f7:d7:4b:19:d2:e4:ea:f5:a1:d7:de:7d:
74:98:b9:25:48:c2:f5:27:7b:e2:09:8f:cd:51:cb:
05:ff:68:8a:fd:00:4b:82:5a:e8:00:49:df:3e:98:
f0:dc:ef:33:14:3e:66:41:f8:6e:58:fc:34:03:a7:
bb:06:b0:d5:08:43:9a:3a:12:42:ca:32:6b:f5:f3:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:E5:F3:45:29:D2:1B:70:FE:F4:06:16:B8:63:6B:61:06:6C:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K9Xl80Up0htw_vQGFrhja2EGbDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.110.0/24
151.242.117.0/24
151.243.104.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
90:92:3c:8d:cc:c6:10:a6:ec:f0:dd:55:e6:71:81:16:04:70:
8b:61:6d:33:8e:a4:2a:1f:93:61:84:8e:8a:c7:14:61:d4:db:
7a:3c:77:8e:f6:52:0e:e8:85:44:aa:93:bf:4b:6f:93:64:fa:
de:51:58:ba:47:19:55:a5:73:37:1e:48:a3:e6:ee:c4:d9:4f:
38:8f:a5:94:80:30:f7:67:ba:28:dd:f1:5a:e3:77:b7:97:60:
6d:c9:57:39:e1:74:7b:35:87:15:80:b3:c8:ba:4a:b0:98:bb:
00:2e:72:38:c7:d9:16:c8:01:08:70:97:85:1b:28:58:6d:e3:
94:f5:e3:29:92:cb:a4:27:ee:a5:3b:f4:4c:4a:47:53:b5:7c:
be:02:35:6c:16:3a:34:a4:11:84:49:06:ea:eb:27:22:43:f8:
35:7a:87:ce:71:46:da:c2:ff:d3:70:7c:c4:e6:59:62:e7:76:
80:e8:1b:3b:88:d3:79:b7:15:e6:3d:92:cf:35:66:47:b7:8f:
15:90:e4:f1:df:7d:fd:8f:e9:1f:8a:4c:bd:1b:74:3a:f4:82:
d8:d9:69:08:48:34:b9:3b:ed:ae:38:3c:9b:5b:8b:4b:bb:b2:
24:b1:93:13:3e:7f:d3:14:71:16:fc:d7:32:ce:85:14:8f:f9:
58:b6:ff:20
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZUEppecuUHIOr9c561Ld5yiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjE0MTMyOTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQ1ZTVmMzQ1MjlkMjFiNzBmZWY0MDYxNmI4NjM2YjYxMDY2YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq7uJx9K4jj5Ju4kDJvaDsTKaluN
iIuMozncMZ8tyqQvU4+sHxKm78RKy8ExWvh8FiCJ/ItgiYyweCjgKvL1OeH5X+L6
m2gAssAH1ZNP/usjVhC/LFKxlrlm5aw3EdC5+fd7/UTHOeYGy4RUuF6UjVhF1Oi7
ikpFFA3y1atP8eAh+sTEO5iSu4jC34n7YCQ8AE8UDMp8/yNCX3ZsjVTgQH4IvbaF
aDlRQG9EVK5+dFJc32uN2H7310sZ0uTq9aHX3n10mLklSML1J3viCY/NUcsF/2iK
/QBLglroAEnfPpjw3O8zFD5mQfhuWPw0A6e7BrDVCEOaOhJCyjJr9fOUBwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFCvV5fNFKdIbcP70Bha4Y2thBmwxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSzlYbDgwVXAwaHR3X3ZRR0ZyaGphMkVHYkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAJcrNMAwD
BAQlytADBAAlytIDBAElytQDBACX8GkDBACX8IwDBACX8W4DBACX8g4DBACX8hQD
BACX8m4DBACX8nUDBACX82gDBACX86IDBAGX89QwDQYJKoZIhvcNAQELBQADggEB
AJCSPI3MxhCm7PDdVeZxgRYEcIthbTOOpCofk2GEjorHFGHU23o8d472Ug7ohUSq
k79Lb5Nk+t5RWLpHGVWlczceSKPm7sTZTziPpZSAMPdnuijd8Vrjd7eXYG3JVznh
dHs1hxWAs8i6SrCYuwAucjjH2RbIAQhwl4UbKFht45T14ymSy6Qn7qU79ExKR1O1
fL4CNWwWOjSkEYRJBurrJyJD+DV6h85xRtrC/9NwfMTmWWLndoDoGzuI03m3FeY9
ks81Zke3jxWQ5PHfff2P6R+KTL0bdDr0gtjZaQhINLk77a44PJtbi0u7siSxkxM+
f9MUcRb81zLOhRSP+Vi2/yA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:28 2025 by rpki-client