Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VBK-_fhbVuRxHp8fREAoqFnNflM.roa
File: VBK-_fhbVuRxHp8fREAoqFnNflM.roa (raw, json)
Hash identifier: hHECtiJchHW+kiQiSXb88a8xzqQsuO+9HMcTBbbf2x4=
Subject key identifier: 54:12:BE:FD:F8:5B:56:E4:71:1E:9F:1F:44:40:28:A8:59:CD:7E:53
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193F3D9EB36842676360F2123E905293FD8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VBK-_fhbVuRxHp8fREAoqFnNflM.roa
Signing time: Mon 23 Dec 2024 14:09:25 +0000
ROA not before: Mon 23 Dec 2024 14:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:d9:eb:36:84:26:76:36:0f:21:23:e9:05:29:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 23 14:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5412befdf85b56e4711e9f1f444028a859cd7e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:83:ce:a6:ff:b8:cd:d7:22:05:33:c9:d3:
34:45:27:9a:85:c3:e0:77:f6:11:51:10:9d:27:1c:
67:8b:a5:49:eb:fa:a3:32:9a:f4:16:f0:1d:00:5e:
6a:c3:a7:c5:0d:93:53:eb:64:27:79:23:82:bd:64:
e3:bb:40:4a:cc:78:e2:28:92:43:01:ee:7d:58:3c:
c3:d1:73:a0:1a:f6:05:7b:93:79:99:55:3f:6d:24:
71:4d:a8:a3:e4:17:d8:35:a2:14:5b:6f:62:1d:93:
7a:8c:de:51:ce:40:f9:4d:89:b0:b4:80:c8:69:ef:
01:10:43:cb:4b:56:57:9a:f1:46:c7:7a:22:8b:9a:
f3:ea:6e:53:23:e8:c8:8d:22:f9:25:b7:fe:7a:0f:
cb:75:c1:62:60:95:7b:2f:73:0f:b1:99:2a:9c:d4:
45:59:57:7c:72:c1:24:37:0d:a2:76:c1:f7:7b:e9:
71:8d:87:5e:d6:64:ad:ad:ab:a9:cf:1a:3d:64:c1:
5f:4e:0a:8e:06:21:38:89:4e:73:a6:00:5e:c0:6e:
7c:00:f7:b6:9a:40:73:6f:c9:af:2f:14:1e:3e:7f:
1f:9c:4e:d0:31:ee:9d:9a:85:86:52:33:ac:30:98:
f3:1d:46:f0:0c:cd:b7:0c:b6:14:13:da:b9:41:db:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:BE:FD:F8:5B:56:E4:71:1E:9F:1F:44:40:28:A8:59:CD:7E:53
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VBK-_fhbVuRxHp8fREAoqFnNflM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.243.137.0/24
151.243.162.0/24
151.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:9b:1c:ea:37:d5:58:c3:2f:3e:74:40:e9:ed:06:ed:7b:
ca:17:7f:d0:8b:e0:9f:4a:95:6a:8f:e4:6d:23:cf:24:68:a2:
f2:f6:74:4c:eb:bc:a9:3e:c2:ff:f6:79:ef:53:12:fb:6f:f7:
45:91:13:d1:1e:d2:c8:ed:29:c6:b0:ea:4e:38:4a:fb:3d:0c:
5c:37:c5:0f:03:b7:1b:07:f7:48:db:0d:ca:9b:28:76:d3:a1:
02:90:79:0d:01:5e:d5:57:a3:cd:37:9c:87:dc:5e:6f:28:6b:
7b:5d:76:60:91:30:5d:80:8a:d1:4c:93:56:9c:c4:73:cc:cc:
f8:a7:5b:ab:48:ec:8d:d5:29:7c:1a:56:77:d5:90:7c:51:61:
fb:e6:86:ae:2e:4c:c3:da:4f:3c:60:b7:2c:2b:f2:6f:20:62:
82:0b:d7:e9:82:4f:a6:54:83:86:1e:05:ac:cb:50:b1:08:3f:
f8:90:39:8a:aa:12:6d:cb:04:a5:e9:3b:de:3b:a0:a1:29:3b:
52:d9:8e:b7:4d:6a:fe:d3:37:d3:6a:d3:fc:c8:7b:39:87:4b:
76:3f:9c:61:da:f0:8e:0e:7d:29:d0:43:0f:e1:72:c1:27:a0:
e9:03:a8:a8:af:92:94:7b:76:30:d5:23:15:4c:21:38:7f:71:
6a:11:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:18 2025 by rpki-client