Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SC4sy2BIEF_QvDHZ3FQYjY0ipp4.roa
File: SC4sy2BIEF_QvDHZ3FQYjY0ipp4.roa (raw, json)
Hash identifier: qXid4VKhC6D2GEpLcBDcSJGp/lCytUxCGOU2s/OBKvQ=
Subject key identifier: 48:2E:2C:CB:60:48:10:5F:D0:BC:31:D9:DC:54:18:8D:8D:22:A6:9E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194515B16FD77F541B467CEDD3693C39AC2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SC4sy2BIEF_QvDHZ3FQYjY0ipp4.roa
Signing time: Fri 10 Jan 2025 17:55:11 +0000
ROA not before: Fri 10 Jan 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:5b:16:fd:77:f5:41:b4:67:ce:dd:36:93:c3:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 10 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=482e2ccb6048105fd0bc31d9dc54188d8d22a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:58:06:70:90:11:3b:9b:f6:17:e6:1b:9d:
70:86:07:1f:a7:c8:4c:19:f3:22:c1:6e:31:5b:97:
60:6d:c1:f5:26:8c:3f:8b:6a:86:b3:51:9e:04:54:
f3:5d:7d:98:a0:ef:c5:24:2c:79:6b:72:c3:df:17:
6e:99:b0:20:5b:53:0f:04:c2:32:62:03:74:68:ca:
cd:c9:c2:56:7c:38:ef:c7:28:a4:d0:7f:c7:00:bb:
da:ec:cc:ab:56:d7:1b:31:84:44:5a:86:57:17:e0:
5c:1d:c4:05:80:45:71:05:04:17:1a:68:0c:ec:e7:
db:37:7c:ad:d4:94:2f:ff:f4:fc:eb:4b:29:a2:6f:
43:f1:f3:2f:e8:dd:13:a0:58:40:8f:81:a4:26:91:
3d:89:b1:d6:64:da:1e:85:52:01:95:60:50:c4:18:
ca:58:48:d0:51:87:28:1b:fe:93:f4:c0:42:ac:67:
75:ce:2e:29:0e:5c:41:d2:eb:77:d7:a3:b8:38:c5:
e8:f9:7f:80:08:37:c8:b2:4c:47:80:6b:78:f9:fa:
ec:2a:d5:05:8c:48:d4:3c:5a:96:8b:0f:c8:0d:24:
29:9c:8f:6a:5f:54:4c:9c:98:31:da:74:d6:7e:11:
4d:7d:32:17:08:39:3f:55:4d:3e:db:08:eb:a9:3f:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:2C:CB:60:48:10:5F:D0:BC:31:D9:DC:54:18:8D:8D:22:A6:9E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SC4sy2BIEF_QvDHZ3FQYjY0ipp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.137.0/24
151.243.162.0/24
151.243.222.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:dd:7f:35:da:0d:64:6e:05:14:61:a9:88:da:2e:b4:a8:a1:
a9:a2:cd:f2:50:12:ee:28:59:57:89:6e:73:db:14:09:35:06:
8c:ad:d3:91:2a:ed:5b:ee:43:08:dd:05:21:b8:ab:9f:7f:8a:
6d:65:07:39:a9:15:34:0b:f6:e7:b1:f3:e2:5c:fc:21:77:a1:
4c:ae:05:d4:7d:53:c8:1d:a3:86:d2:9e:e8:7c:88:d6:37:67:
eb:df:f1:0e:f8:b3:03:ca:b2:cf:6e:c1:44:75:e3:4e:bd:a6:
82:42:08:d2:3e:3d:11:cc:28:8e:2e:61:aa:10:34:c6:8f:c0:
fe:38:a8:76:98:fb:24:26:d7:9c:29:05:3a:bf:43:4a:e8:74:
21:2d:3e:03:04:17:aa:9d:e8:cf:c9:c0:4d:e6:ad:9d:1f:dc:
2b:7e:32:5b:51:80:95:4e:29:1e:a7:98:73:fe:47:4d:29:ef:
df:95:dd:8d:68:b0:2d:52:32:53:43:f5:56:ec:4a:91:a8:4e:
e0:6a:fc:cc:37:62:b2:be:e4:e1:4f:24:58:d7:7f:d2:86:05:
8e:5a:46:fc:9f:44:3e:90:c0:de:ca:ad:89:30:67:39:09:45:
9e:cd:e4:79:8d:0a:60:e1:a6:da:fc:1f:97:4c:82:f7:56:18:
04:36:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:38:48 2025 by rpki-client