Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NMj1qVvPHNleeGxzv8Q1dcGS9XM.roa
File: NMj1qVvPHNleeGxzv8Q1dcGS9XM.roa (raw, json)
Hash identifier: udmxa2h4jCnp1ErYBCAXnHTDmFTprWX6hUsinNYY6II=
Subject key identifier: 34:C8:F5:A9:5B:CF:1C:D9:5E:78:6C:73:BF:C4:35:75:C1:92:F5:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7B0FD95B2B325677879300196293F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NMj1qVvPHNleeGxzv8Q1dcGS9XM.roa
Signing time: Wed 01 Jan 2025 21:48:45 +0000
ROA not before: Wed 01 Jan 2025 21:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 37.202.220.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b0:fd:95:b2:b3:25:67:78:79:30:01:96:29:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34c8f5a95bcf1cd95e786c73bfc43575c192f573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:a3:d8:63:a0:28:45:3b:af:71:ae:4f:c2:
6c:9a:1b:14:a9:d1:b3:2b:94:6d:58:bf:2d:6a:02:
42:8c:b0:2d:40:4b:37:9b:3f:39:23:b4:f2:fd:1d:
4f:7b:20:64:0f:5b:1c:05:6d:5f:61:bc:68:89:01:
04:4d:11:1e:04:e5:c7:62:b0:c3:d1:46:6b:be:ca:
7a:c6:ab:0f:f3:a5:99:2e:80:05:51:c9:13:9e:d1:
4b:81:44:a5:ef:d6:79:cb:a8:c6:f4:7b:01:b2:4e:
50:a8:ee:7c:6b:17:33:20:19:c8:70:0b:41:4d:f0:
56:64:fd:cc:af:6c:83:ae:4a:9d:b9:e8:12:13:13:
e3:b4:70:70:47:93:47:6e:e3:91:25:47:9a:d2:b6:
89:37:19:3e:36:e3:b1:04:0c:e1:e3:84:ee:d6:54:
c7:e3:b1:0c:88:9a:c7:34:34:8c:ce:ac:14:12:b7:
0a:91:00:7f:c7:01:5e:a5:d2:61:ee:e9:62:4c:a8:
99:e1:60:1e:5c:23:f3:8b:85:7f:d4:4e:59:97:75:
fa:d1:44:44:6c:88:04:a9:8f:e7:6e:45:9d:05:ce:
29:18:52:8e:15:c8:8f:a5:0d:b3:f9:81:8a:e3:32:
ea:b0:cb:70:47:70:c1:46:77:a5:8c:ca:a3:38:43:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:F5:A9:5B:CF:1C:D9:5E:78:6C:73:BF:C4:35:75:C1:92:F5:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NMj1qVvPHNleeGxzv8Q1dcGS9XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:35:e4:cb:f2:4d:16:fa:a3:00:26:2e:57:e1:74:ac:53:03:
74:79:0b:8e:f6:75:7c:cb:d9:6c:d3:13:18:a4:74:f3:a9:0a:
68:f3:34:d0:bc:58:87:da:98:ef:81:8a:30:d5:7b:db:58:20:
42:04:8c:e6:d0:98:de:d6:94:6a:c7:d8:27:12:ed:dd:78:9e:
c2:c6:67:0a:2d:4e:f7:01:06:89:ec:67:7c:66:ed:7a:f0:b3:
86:bd:9b:69:b2:63:07:d3:d9:18:8d:b6:3d:7d:cd:e1:4e:2e:
7c:ae:14:72:a7:0a:da:82:34:98:77:d9:75:c3:2f:68:27:4f:
66:9b:f2:74:79:3a:5e:4a:82:a0:67:ee:11:32:bd:65:11:a1:
f7:3e:9c:e2:20:f8:5c:b4:ea:c5:fd:c0:db:50:36:f2:6f:62:
b9:f6:4b:f4:fb:2f:c6:71:19:91:b8:c4:f2:e0:b7:ef:c2:01:
a4:b5:d0:ca:d1:dd:b5:07:7f:68:dc:98:f9:94:03:dd:51:d5:
17:66:a1:7e:30:e7:8e:a9:ba:01:0d:cd:ee:73:7a:86:b5:f6:
e5:a2:7b:67:83:d9:93:b5:7c:8b:13:2a:99:23:cd:db:e9:94:
7f:8c:94:c4:58:30:41:de:9e:82:bc:db:15:59:3f:86:19:0c:
04:60:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:11 2025 by rpki-client