Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R3b84kLBip75k7GPmULbhXoIbqU.roa
File: R3b84kLBip75k7GPmULbhXoIbqU.roa (raw, json)
Hash identifier: K5E+pkS/h5fH4X8KETiKNYZ7eRhJG1VsNOIGm7/KRQs=
Subject key identifier: 47:76:FC:E2:42:C1:8A:9E:F9:93:B1:8F:99:42:DB:85:7A:08:6E:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194515B1790DCDF291381FC036A111A3FFD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R3b84kLBip75k7GPmULbhXoIbqU.roa
Signing time: Fri 10 Jan 2025 17:55:11 +0000
ROA not before: Fri 10 Jan 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 37.202.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:5b:17:90:dc:df:29:13:81:fc:03:6a:11:1a:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 10 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4776fce242c18a9ef993b18f9942db857a086ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:55:9e:10:a0:c7:1d:9a:45:6f:94:cd:ec:
ca:2f:e0:78:70:8a:5c:e2:46:e6:29:4a:51:a5:37:
11:9a:ab:92:11:7f:a5:b5:70:4d:f5:d2:f8:7f:bf:
ed:bf:e6:f6:0f:62:5a:ba:01:a2:68:68:92:c1:4b:
ff:28:84:51:fd:e1:1e:3d:3c:32:9c:e2:61:68:69:
be:10:ec:fa:67:da:8c:5d:b2:25:aa:84:bb:a1:74:
31:b9:23:80:5d:ac:60:c1:80:33:ba:cb:31:82:71:
df:a6:b5:1a:25:02:7f:af:19:2a:d8:4e:77:32:e1:
ab:70:0f:65:a6:d7:73:c2:2e:3a:41:f5:34:88:21:
de:a6:09:6d:f5:26:da:b6:ee:36:76:d5:3d:76:10:
33:51:bb:49:5f:9f:e7:87:52:5d:2d:85:09:68:69:
c4:7f:2a:8f:4e:5c:c6:5f:d7:24:32:95:1e:ba:26:
46:b4:81:97:b6:7c:a7:81:12:f4:7b:df:41:b6:e7:
66:57:fb:b5:3d:60:8f:a9:14:cd:cd:8d:1b:42:43:
74:c4:02:aa:ae:a0:27:1b:38:4c:59:ac:e9:87:0a:
4f:db:24:d5:5e:96:d5:07:87:44:cc:84:50:1a:17:
cb:4e:63:89:d0:7c:8f:f6:73:f8:6e:7b:66:30:f5:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:FC:E2:42:C1:8A:9E:F9:93:B1:8F:99:42:DB:85:7A:08:6E:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R3b84kLBip75k7GPmULbhXoIbqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e9:28:8b:c5:68:1c:43:dc:2f:f1:45:b2:5d:88:51:8e:72:
56:5c:a0:9a:86:79:47:6f:f0:ae:f1:49:a1:e9:49:01:0c:4b:
92:21:10:27:1e:43:2a:f3:ee:ec:f4:9a:56:75:eb:ff:83:d1:
ac:e3:61:b1:67:bd:b3:89:c9:87:6e:be:4a:d6:00:72:5e:40:
60:21:89:e0:c5:af:88:88:63:49:04:1c:05:51:b9:61:c5:83:
d8:9f:1f:64:0a:2e:31:cc:7d:5f:a9:fb:3f:6c:01:de:53:b5:
3d:b3:58:63:f2:bb:95:03:30:c7:b1:5a:84:28:da:81:0f:39:
67:56:fb:0f:d1:96:e6:70:58:89:c3:d2:3e:6f:a7:36:d9:ca:
75:22:fe:88:05:c4:71:ad:71:18:3c:f4:b2:58:bb:81:ac:c4:
b4:aa:b9:33:ea:6b:7b:38:50:a4:70:b9:2c:94:1c:6b:57:56:
3f:76:e2:6a:1f:2c:04:61:81:1a:1d:03:60:21:ad:db:49:fd:
17:59:a1:28:1b:56:6b:0b:45:3c:02:f0:81:a5:78:eb:62:37:
d7:f7:52:7c:94:bf:9e:74:3e:dc:88:25:74:c9:fa:72:e2:b3:
62:55:eb:b4:4d:de:ba:69:ad:a3:c4:17:73:5f:66:29:86:f4:
93:3e:b6:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRRWxeQ3N8pE4H8A2oRGj/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTEwMTc1NTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzc2ZmNlMjQyYzE4YTllZjk5M2IxOGY5OTQyZGI4NTdhMDg2ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG1VnhCgxx2aRW+UzezKL+B4cIpc
4kbmKUpRpTcRmquSEX+ltXBN9dL4f7/tv+b2D2JaugGiaGiSwUv/KIRR/eEePTwy
nOJhaGm+EOz6Z9qMXbIlqoS7oXQxuSOAXaxgwYAzussxgnHfprUaJQJ/rxkq2E53
MuGrcA9lptdzwi46QfU0iCHepglt9Sbatu42dtU9dhAzUbtJX5/nh1JdLYUJaGnE
fyqPTlzGX9ckMpUeuiZGtIGXtnyngRL0e99BtudmV/u1PWCPqRTNzY0bQkN0xAKq
rqAnGzhMWazphwpP2yTVXpbVB4dEzIRQGhfLTmOJ0HyP9nP4bntmMPUayQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEd2/OJCwYqe+ZOxj5lC24V6CG6lMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUjNiODRrTEJpcDc1azdHUG1VTGJoWG9JYnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrSMA0G
CSqGSIb3DQEBCwUAA4IBAQAt6SiLxWgcQ9wv8UWyXYhRjnJWXKCahnlHb/Cu8Umh
6UkBDEuSIRAnHkMq8+7s9JpWdev/g9Gs42GxZ72zicmHbr5K1gByXkBgIYngxa+I
iGNJBBwFUblhxYPYnx9kCi4xzH1fqfs/bAHeU7U9s1hj8ruVAzDHsVqEKNqBDzln
VvsP0ZbmcFiJw9I+b6c22cp1Iv6IBcRxrXEYPPSyWLuBrMS0qrkz6mt7OFCkcLks
lBxrV1Y/duJqHywEYYEaHQNgIa3bSf0XWaEoG1ZrC0U8AvCBpXjrYjfX91J8lL+e
dD7ciCV0yfpy4rNiVeu0Td66aa2jxBdzX2YphvSTPrY3
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:52 2025 by rpki-client