Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RQV7_wG0h3TT2Sc4EiLNkIfFquk.roa
File: RQV7_wG0h3TT2Sc4EiLNkIfFquk.roa (raw, json)
Hash identifier: Hgae40DBTLZZ54q3WsvmsxIHXJec9W6tgy2r2VQ2QOY=
Subject key identifier: 45:05:7B:FF:01:B4:87:74:D3:D9:27:38:12:22:CD:90:87:C5:AA:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FDAB5BEB1B787FC2ED4C172AAB5D80B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RQV7_wG0h3TT2Sc4EiLNkIfFquk.roa
Signing time: Thu 13 Mar 2025 14:13:50 +0000
ROA not before: Thu 13 Mar 2025 14:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.80.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:da:b5:be:b1:b7:87:fc:2e:d4:c1:72:aa:b5:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45057bff01b48774d3d927381222cd9087c5aae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:45:6e:65:6d:a6:ee:12:4a:29:25:5e:b1:
dc:81:3d:24:f9:69:1c:0e:25:11:43:fc:4a:90:cb:
4a:82:d8:98:b5:43:ec:2c:8a:2d:25:c2:4c:53:d9:
21:e8:d5:06:ae:86:56:50:f3:ec:5b:14:e6:d7:31:
f2:8b:14:0e:50:82:67:9a:d3:9a:68:c8:bf:84:4f:
35:27:00:f2:41:04:25:ab:72:36:6b:03:93:01:51:
79:fa:e9:57:fd:78:4a:b1:57:cb:52:9b:9f:1b:37:
82:64:4e:33:ed:66:71:6e:12:4b:a5:6e:2d:e2:ed:
ae:6a:49:2a:f4:55:af:d1:07:12:90:f3:18:a1:0c:
64:ac:81:da:9e:60:4b:70:dc:ea:85:bb:fc:db:dc:
ab:ce:6b:84:c1:54:9e:dc:b2:7b:8c:b8:b3:39:78:
a9:93:30:88:fc:98:3a:e1:5c:80:e9:7e:bd:18:11:
99:b2:ef:13:cb:21:9f:a9:a6:55:75:d9:03:1a:dc:
82:23:b5:3c:87:8c:20:09:3d:e1:63:76:d9:aa:fa:
13:25:86:dc:90:74:8e:a8:ec:fa:34:a7:79:27:60:
c4:2b:d1:71:40:4f:2a:7d:b0:90:e1:eb:70:ae:26:
15:03:5c:59:3c:33:58:af:e1:0c:66:e0:75:df:8c:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:7B:FF:01:B4:87:74:D3:D9:27:38:12:22:CD:90:87:C5:AA:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RQV7_wG0h3TT2Sc4EiLNkIfFquk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.64.0/24
151.243.57.0/24
151.243.80.0/24
151.243.140.0/24
151.243.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ef:81:0e:44:7f:e8:60:94:e5:d1:fc:5d:f2:d3:90:f4:be:
bb:ab:f9:75:39:ca:62:bc:f6:97:25:e8:1d:bf:8f:34:47:6c:
99:02:30:6b:5c:b9:dd:58:81:0b:fb:17:bd:c6:d2:db:09:e5:
c3:3f:e6:7d:2c:1b:63:1f:ac:80:e3:e4:fe:fd:d2:05:fb:64:
a0:39:d8:74:31:78:32:c0:34:48:14:14:8f:92:b7:4a:72:51:
94:42:2d:17:a2:ce:41:34:45:b7:5e:10:25:57:e2:dd:20:99:
ba:9f:21:29:c7:26:f8:fb:e2:a1:41:2e:d0:05:64:1f:4c:56:
9f:80:dd:ff:48:2d:72:91:18:70:c4:62:78:31:e6:d3:37:e7:
dd:4e:a6:d2:4a:a8:34:09:61:49:e4:e3:4e:95:92:8c:69:e2:
a9:57:a8:6e:f1:9b:e3:47:ab:29:42:d6:83:84:61:c0:9e:cf:
26:70:d1:17:9e:5b:24:e6:35:a3:ec:8b:b5:69:b7:a7:fd:d8:
31:39:4b:f7:eb:ba:87:b8:4f:ab:e7:61:a6:ed:a9:69:72:23:
34:be:6a:49:54:2b:19:6a:06:09:7f:0f:f3:3d:44:2d:05:50:
42:ee:07:b0:37:87:58:1a:6b:b5:f9:ab:12:28:cb:b1:da:76:
79:b1:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:51 2025 by rpki-client