Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WzZZsNa6ASP9QuMZAngChcE7Xw8.roa
File: WzZZsNa6ASP9QuMZAngChcE7Xw8.roa (raw, json)
Hash identifier: V1mKWee2UM1PmKCD8OA6j4BRpUSNwx2Abqq1YSUXTBM=
Subject key identifier: 5B:36:59:B0:D6:BA:01:23:FD:42:E3:19:02:78:02:85:C1:3B:5F:0F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019482092BCC0940BCE5A17C966BC74894F2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WzZZsNa6ASP9QuMZAngChcE7Xw8.roa
Signing time: Mon 20 Jan 2025 04:47:06 +0000
ROA not before: Mon 20 Jan 2025 04:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.220.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:09:2b:cc:09:40:bc:e5:a1:7c:96:6b:c7:48:94:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 20 04:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3659b0d6ba0123fd42e31902780285c13b5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:9e:74:83:aa:e0:40:48:2f:e0:73:ca:5e:
c8:7b:24:fc:50:95:76:ab:a3:ae:1d:7c:28:72:89:
a5:f0:29:f8:47:39:11:5f:a4:8a:b4:6d:a7:16:1b:
41:49:7a:aa:10:3d:c2:4c:d4:8b:79:7b:3e:e8:1f:
c8:43:20:d5:28:4b:b6:25:7a:4d:1e:9e:38:81:9a:
e0:cb:56:2b:7a:59:e0:f4:86:01:87:40:b1:64:c8:
6e:b5:0a:be:06:69:a2:4f:fe:4b:26:51:06:22:ab:
3e:f1:38:8f:54:e1:80:de:ac:e3:ba:7c:67:da:d0:
9d:b5:2e:c5:d0:63:42:2c:95:1e:e8:af:91:f2:56:
86:78:dd:49:67:9c:f4:ee:d3:f5:24:07:9e:9f:48:
6f:3b:f3:a0:15:bc:c3:7c:ad:14:58:86:69:78:97:
84:62:56:b2:7f:c8:24:8a:23:2f:57:ba:4d:a7:cd:
84:a3:4b:ea:ae:f2:b9:e6:b6:3d:dc:1a:de:99:9d:
16:41:a3:d6:9e:8f:1b:7b:46:d1:ad:50:a4:5b:99:
d0:e4:d7:8c:24:ff:c1:c4:a8:b6:4b:f2:44:73:f5:
ee:97:8a:19:1e:fc:ce:ae:94:9f:52:10:3a:f3:90:
4e:90:ce:64:f0:9c:3f:5b:de:aa:9d:34:42:01:b9:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:59:B0:D6:BA:01:23:FD:42:E3:19:02:78:02:85:C1:3B:5F:0F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WzZZsNa6ASP9QuMZAngChcE7Xw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/24
151.243.243.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fa:ac:38:8a:d5:34:a5:c5:93:68:5c:f6:81:20:33:e6:03:
3a:39:d6:65:5d:0f:97:36:f4:05:c2:5c:26:5f:f2:55:90:71:
36:32:91:1e:38:c9:0a:94:d7:e2:b0:c5:02:16:0b:3d:1a:1d:
f4:c9:c8:a9:9c:62:a9:3c:48:e2:a4:97:c1:50:d3:6b:a6:ef:
68:65:14:7c:9b:67:68:67:b8:83:ee:63:56:4a:ef:d3:86:c3:
3b:3c:9d:9f:57:5b:ed:b7:19:a0:40:3f:2d:52:b0:1f:71:f4:
8a:eb:e8:7a:98:37:6e:55:85:fd:f7:bb:a8:54:a4:07:6c:18:
54:e4:31:9a:87:2e:d2:ea:55:ce:a1:1f:d3:e1:7f:81:4c:0e:
e7:1f:0b:32:bc:1f:1d:e1:a1:ad:e9:5f:e4:69:b8:38:ad:22:
27:f2:1a:18:36:b4:6f:64:ea:6e:e8:7d:52:39:02:88:9d:a2:
9b:09:a0:d3:f4:89:4f:ae:b6:ad:c4:69:ca:25:9e:4e:47:f9:
62:5a:1a:11:3a:c4:41:8c:49:39:87:85:c1:db:45:23:b9:06:
22:64:56:23:55:b6:c1:2d:c1:cb:01:4c:9b:5c:f6:a3:02:49:
aa:5f:8e:62:30:1a:81:c7:80:5b:14:22:f6:02:39:b7:61:1b:
75:6d:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:43 2025 by rpki-client