Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZgjoA_al_mfC8HudOSfirTT-8CY.roa
File: ZgjoA_al_mfC8HudOSfirTT-8CY.roa (raw, json)
Hash identifier: Ok9p75mYxOdrvq2r0QlHLNyD/Ka3aGTMuwkSFdj1yiI=
Subject key identifier: 66:08:E8:03:F6:A5:FE:67:C2:F0:7B:9D:39:27:E2:AD:34:FE:F0:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7A9AE6CED0A9C746C423FF856BA99
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZgjoA_al_mfC8HudOSfirTT-8CY.roa
Signing time: Wed 01 Jan 2025 21:48:43 +0000
ROA not before: Wed 01 Jan 2025 21:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a9:ae:6c:ed:0a:9c:74:6c:42:3f:f8:56:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6608e803f6a5fe67c2f07b9d3927e2ad34fef026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:4f:68:7a:a5:f0:c4:af:34:3c:c4:3e:8a:
37:77:c1:e6:aa:38:b6:d1:18:0a:90:85:2d:7f:71:
ab:28:8d:bd:b6:f4:6a:81:10:ec:af:27:33:11:07:
ed:69:b6:45:cb:78:db:e4:58:54:57:83:4b:61:e0:
fa:f1:7e:4e:b8:10:7b:02:c0:9d:fa:d4:6c:7f:58:
9a:c3:9a:ac:f3:68:fb:95:bc:01:e1:f5:9a:e3:e9:
b7:64:60:45:2f:c9:14:39:2a:9a:1c:7a:06:15:12:
25:d8:9a:35:20:08:d1:6c:8a:10:99:56:3f:17:45:
4d:5e:47:55:49:4d:30:f9:05:48:8c:d4:67:3e:de:
cb:f8:37:52:7c:b1:5d:69:11:1a:95:81:e2:ad:84:
59:c7:d2:5b:0d:7c:31:c8:8b:51:d8:35:9f:b2:05:
fc:39:a8:0f:ee:97:7f:e7:26:bb:0e:2a:15:72:a9:
e0:af:1e:18:3b:f6:15:33:a4:cf:e1:0f:e2:30:5c:
09:3e:c1:cf:97:5c:bb:b4:d4:21:75:68:21:c3:4b:
fe:49:a5:d3:b7:6e:12:76:cf:39:c3:aa:7d:76:2d:
19:d2:b0:47:a0:a0:05:b6:14:c1:6d:0d:b9:f5:71:
59:39:9a:f1:54:45:4e:04:0e:89:83:f5:65:a8:f6:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:E8:03:F6:A5:FE:67:C2:F0:7B:9D:39:27:E2:AD:34:FE:F0:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZgjoA_al_mfC8HudOSfirTT-8CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
13:1c:f8:43:3e:c1:bc:d7:70:f5:f2:1b:dc:92:4d:5f:82:ff:
5b:85:ad:2c:2e:e3:da:aa:9d:8f:d3:e9:55:dd:17:6e:78:3f:
ae:5c:77:b4:0f:d0:9d:a1:70:fd:f8:d5:d1:e3:95:10:52:88:
b3:94:5a:54:ef:b6:4d:c9:f0:93:cb:81:e7:c3:1c:1b:ff:9d:
d5:90:94:67:4e:04:fa:22:4f:9b:16:e8:66:60:8f:ae:21:ea:
da:6b:4e:d6:da:2d:b2:8b:bf:3a:22:46:bc:64:20:fa:b7:05:
6e:ba:fc:65:91:1c:15:78:17:60:c3:ca:b3:1a:2c:96:37:47:
27:2b:7a:c3:3d:4b:20:eb:82:74:e3:ae:37:fa:0e:36:de:11:
42:05:77:88:61:ac:30:dc:36:d3:a6:c8:50:d5:af:6d:5b:26:
ad:68:29:67:64:59:a8:8c:e9:b7:4b:73:d8:ec:f4:9e:c3:ca:
39:09:85:6e:4c:7e:4c:e7:f9:c4:51:58:41:fc:55:65:b8:bb:
f4:e8:af:6b:17:d9:b4:9c:61:ab:88:84:e3:d3:9c:df:73:a8:
2f:2b:7a:88:b1:e7:e5:cc:cd:af:80:69:b7:d2:5b:5f:87:17:
22:2a:01:6c:8c:6f:3a:e0:39:c0:6a:7b:e8:da:06:9f:73:80:
be:85:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:15:39 2025 by rpki-client