Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TzhUhjiY0bP6ApVnmq_Ja-x3mCI.roa
File: TzhUhjiY0bP6ApVnmq_Ja-x3mCI.roa (raw, json)
Hash identifier: HxPFYAttWqJeRjjr2exc79iltET1tmccx3zQDQBuSyg=
Subject key identifier: 4F:38:54:86:38:98:D1:B3:FA:02:95:67:9A:AF:C9:6B:EC:77:98:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194697695611523DBC0B5C14EB4AF9A31B0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TzhUhjiY0bP6ApVnmq_Ja-x3mCI.roa
Signing time: Wed 15 Jan 2025 10:16:06 +0000
ROA not before: Wed 15 Jan 2025 10:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.72.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:76:95:61:15:23:db:c0:b5:c1:4e:b4:af:9a:31:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 10:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3854863898d1b3fa0295679aafc96bec779822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:95:fb:4c:27:6b:a9:67:72:e6:bc:77:f9:
a3:81:6b:4e:3d:e3:30:a1:93:36:98:c1:70:e1:1d:
fb:f9:c8:d7:de:7e:9c:f7:b4:80:61:c7:9b:66:66:
8d:0b:f0:db:41:74:36:37:b6:e8:fa:09:32:5e:b0:
d7:28:61:fb:2d:ec:2f:d4:f7:35:5d:a9:80:11:a2:
ec:41:11:30:a5:de:19:80:a8:70:8c:d6:ff:de:9f:
08:1d:c2:c1:6c:93:06:91:f2:d4:50:97:cd:3d:f4:
70:88:7b:f4:c6:ad:86:3e:da:8f:21:d1:6d:6b:81:
95:d5:6c:75:1c:e3:90:cb:5c:ce:e6:b4:8d:ef:af:
d7:5f:eb:ae:3b:80:90:ec:7d:e3:d6:6d:4e:40:16:
d4:20:2c:62:42:4e:7a:2c:b2:2e:f1:28:f2:7a:90:
e3:b6:e3:34:c0:8f:4b:fa:0b:80:8e:a4:df:9c:78:
d6:bf:5c:24:fb:94:46:f0:8e:cf:d1:a3:0a:26:28:
be:35:26:e4:20:39:97:22:59:a4:45:69:4b:79:fb:
39:e7:ec:ba:2f:4d:6a:31:2e:ef:1c:28:38:a2:13:
f0:7c:3f:2b:f2:72:aa:0f:1b:cf:b4:6c:91:95:81:
28:f0:e5:dc:ba:3f:17:e5:f8:2c:62:8b:6d:27:91:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:54:86:38:98:D1:B3:FA:02:95:67:9A:AF:C9:6B:EC:77:98:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TzhUhjiY0bP6ApVnmq_Ja-x3mCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0-151.242.72.255
151.243.107.0-151.243.110.255
Signature Algorithm: sha256WithRSAEncryption
99:79:01:cb:2d:f4:c4:82:e8:0f:42:db:3a:5c:9a:54:3d:ad:
6b:d0:c0:af:24:eb:6a:8d:97:20:64:79:9a:66:f0:bc:71:1f:
3b:d9:c8:70:2c:9e:ed:07:87:55:eb:a4:fb:16:8f:27:ff:c3:
2a:18:19:00:5a:b0:72:48:70:f3:9a:84:69:aa:32:a5:e7:5e:
f4:23:26:33:b5:6b:ed:a8:3e:d5:b8:e8:39:f6:f4:18:00:b1:
d9:b0:9d:b3:46:7f:17:e9:25:0a:64:3d:2c:ad:e5:95:d8:9f:
f8:ff:69:9e:6f:c9:40:eb:68:77:ed:b1:57:7c:65:29:07:db:
71:a0:f9:a5:87:d6:ff:0f:57:20:51:5e:de:1d:28:ed:e5:a4:
11:0c:f0:cd:64:d3:cc:d7:db:83:9c:1c:1a:91:f6:5f:54:4a:
ec:67:b8:69:f3:7e:9d:0a:50:80:fb:58:e9:e7:d3:83:12:f8:
67:fb:4f:24:ef:48:43:96:80:50:ef:a9:62:70:b1:0a:3c:dd:
55:0a:87:3c:75:6b:60:4e:b5:e6:d2:95:e0:9c:cb:d0:f7:69:
a0:08:11:a0:cf:40:c8:c8:46:b2:24:38:bc:8a:74:06:65:52:
3d:68:3b:d0:0f:d6:01:02:39:55:b0:66:80:b6:a4:21:cf:c7:
f9:98:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:01 2025 by rpki-client