Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/arSQEcImX1MdDi_u4ZjCU1ey0v4.roa
File: arSQEcImX1MdDi_u4ZjCU1ey0v4.roa (raw, json)
Hash identifier: Xbp1//reV7WQkBdHt4c5oI9pmNUjzPd3Pi1tkNFNuLQ=
Subject key identifier: 6A:B4:90:11:C2:26:5F:53:1D:0E:2F:EE:E1:98:C2:53:57:B2:D2:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194DF16473665D5436DD65BCF3717839141
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/arSQEcImX1MdDi_u4ZjCU1ey0v4.roa
Signing time: Fri 07 Feb 2025 06:26:06 +0000
ROA not before: Fri 07 Feb 2025 06:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:16:47:36:65:d5:43:6d:d6:5b:cf:37:17:83:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 7 06:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab49011c2265f531d0e2feee198c25357b2d2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:a0:2e:09:ed:d9:f3:18:7c:f6:96:69:e9:
38:d0:08:59:03:93:1b:72:a5:56:ee:91:5a:d3:a0:
8b:06:5c:1b:6d:55:13:f0:4a:1a:32:3c:e0:a4:a2:
69:13:c0:f0:8d:49:52:5a:84:e1:ad:45:c6:2a:61:
6b:ec:a8:7e:a1:d2:60:51:e8:d0:3c:74:9c:09:71:
2b:1a:d3:12:d8:67:c3:26:1b:1c:52:bd:d6:7a:c5:
13:ac:3f:8d:d1:71:c2:8b:96:c4:7f:b8:61:7c:7b:
3a:2f:81:00:bd:d2:2a:86:d9:e4:b2:44:8e:1b:b1:
dd:97:9e:75:d2:bf:bf:68:20:24:32:88:f9:25:3b:
c6:0f:2b:39:77:c9:04:b7:06:53:a6:ff:0a:0f:6c:
ca:63:96:d3:cb:d3:5d:8d:22:82:b6:07:51:c5:bc:
d7:39:17:54:27:af:2a:f1:b7:c6:b9:bf:d7:ce:5f:
30:f2:34:16:1b:fa:ab:f8:da:60:91:fc:9e:e7:65:
46:c1:c2:34:23:8f:3e:a6:af:cd:76:e9:0a:94:28:
ee:22:63:ef:89:d4:33:5a:38:28:f5:b4:c4:c7:37:
27:1b:ea:13:59:aa:df:73:0f:15:40:bb:c4:ca:bb:
09:ed:70:8a:05:b3:9a:c7:38:ad:e6:38:8b:3e:51:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:90:11:C2:26:5F:53:1D:0E:2F:EE:E1:98:C2:53:57:B2:D2:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/arSQEcImX1MdDi_u4ZjCU1ey0v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.220.0/24
151.243.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7b:fd:2c:d9:72:ae:7e:bf:c6:79:14:e3:cb:44:d6:41:43:
a7:e1:30:da:56:09:84:cc:7b:25:eb:10:64:40:da:1e:c3:b3:
21:17:f3:b4:9a:93:3f:be:5c:a6:71:f1:67:b6:c9:c5:44:fa:
63:81:cf:b7:36:cf:a1:81:38:79:46:7f:5c:90:11:88:67:4e:
08:2b:7e:78:e8:3a:b1:81:55:ad:d7:c2:b5:bf:84:f0:51:f6:
13:b5:fd:5d:1e:83:b6:7b:80:fe:67:af:41:bf:94:fb:88:96:
3e:e6:3d:6a:de:a5:bd:ce:10:af:c3:11:8b:9a:61:71:63:46:
c2:40:5f:de:e0:15:5d:88:ba:f4:65:97:e4:c4:10:47:51:ae:
3d:70:95:26:57:fd:3c:36:b3:83:d5:90:6d:2b:d7:d9:98:e9:
cd:da:fc:db:f2:00:96:15:77:ec:31:87:d2:c8:b8:90:3e:40:
67:58:b9:f6:f6:a7:b9:70:b3:b9:5b:f0:bd:1b:45:a0:8d:bb:
fb:54:80:d2:b8:4f:7b:24:58:01:42:bf:63:21:f1:87:aa:6b:
00:55:d1:dd:8b:b1:88:cd:32:50:b9:16:54:6d:ed:f5:69:1a:
85:99:67:9b:8d:25:6a:b9:a3:2a:5c:e5:67:08:68:1b:14:9e:
59:51:50:ca
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTfFkc2ZdVDbdZbzzcXg5FBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjA3MDYyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWI0OTAxMWMyMjY1ZjUzMWQwZTJmZWVlMTk4YzI1MzU3YjJkMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYugLgnt2fMYfPaWaek40AhZA5Mb
cqVW7pFa06CLBlwbbVUT8EoaMjzgpKJpE8DwjUlSWoThrUXGKmFr7Kh+odJgUejQ
PHScCXErGtMS2GfDJhscUr3WesUTrD+N0XHCi5bEf7hhfHs6L4EAvdIqhtnkskSO
G7Hdl5510r+/aCAkMoj5JTvGDys5d8kEtwZTpv8KD2zKY5bTy9NdjSKCtgdRxbzX
ORdUJ68q8bfGub/Xzl8w8jQWG/qr+Npgkfye52VGwcI0I48+pq/NdukKlCjuImPv
idQzWjgo9bTExzcnG+oTWarfcw8VQLvEyrsJ7XCKBbOaxzit5jiLPlEIOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGq0kBHCJl9THQ4v7uGYwlNXstL+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYXJTUUVjSW1YMU1kRGlfdTRaakNVMWV5MHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJcrCAwQA
JcrcAwQAl/PzMA0GCSqGSIb3DQEBCwUAA4IBAQCze/0s2XKufr/GeRTjy0TWQUOn
4TDaVgmEzHsl6xBkQNoew7MhF/O0mpM/vlymcfFntsnFRPpjgc+3Ns+hgTh5Rn9c
kBGIZ04IK3546DqxgVWt18K1v4TwUfYTtf1dHoO2e4D+Z69Bv5T7iJY+5j1q3qW9
zhCvwxGLmmFxY0bCQF/e4BVdiLr0ZZfkxBBHUa49cJUmV/08NrOD1ZBtK9fZmOnN
2vzb8gCWFXfsMYfSyLiQPkBnWLn29qe5cLO5W/C9G0Wgjbv7VIDSuE97JFgBQr9j
IfGHqmsAVdHdi7GIzTJQuRZUbe31aRqFmWebjSVquaMqXOVnCGgbFJ5ZUVDK
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:07 2025 by rpki-client