Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVHJump0RGx19ryAWmqLIkLJ48Y.roa
File: bVHJump0RGx19ryAWmqLIkLJ48Y.roa (raw, json)
Hash identifier: 2vuOwlUQ29LgZY+39MVQmiRBZ7pQ6hOFLTNpBqOHhZ8=
Subject key identifier: 6D:51:C9:BA:6A:74:44:6C:75:F6:BC:80:5A:6A:8B:22:42:C9:E3:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7B4DF2554E21FEC976B6300B3B20D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVHJump0RGx19ryAWmqLIkLJ48Y.roa
Signing time: Wed 01 Jan 2025 21:48:46 +0000
ROA not before: Wed 01 Jan 2025 21:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272605
IP address blocks: 37.202.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b4:df:25:54:e2:1f:ec:97:6b:63:00:b3:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d51c9ba6a74446c75f6bc805a6a8b2242c9e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:f2:d2:e5:d4:94:53:b7:3d:5e:56:de:b3:
5e:ad:0d:69:00:f5:76:70:d7:d3:08:78:59:b9:81:
20:75:5d:41:30:6c:da:71:ed:6d:44:47:06:99:63:
7f:d8:97:44:29:8f:23:cc:a0:df:70:6b:9e:9e:9f:
07:cc:eb:39:11:9d:45:6a:85:97:57:ea:6f:5d:cc:
b0:52:17:e3:12:35:f5:8c:48:c2:9d:50:ac:18:a4:
ba:7c:4e:5a:87:f5:f4:9c:4c:69:b6:c3:d0:f6:9d:
5c:08:31:77:5e:e4:59:29:34:91:59:6f:40:ea:5c:
eb:b3:a1:0e:d8:8c:7f:30:d1:b7:38:51:f2:e0:da:
04:31:ea:fa:fa:c4:f0:d0:df:57:b5:5f:c1:75:6d:
6c:ef:1d:e9:78:e4:c8:14:73:57:e5:19:2c:df:ce:
68:a0:67:dc:45:eb:a2:04:da:3a:e1:29:99:e5:c0:
6e:b1:5c:c6:b2:a2:50:9b:d3:96:a5:b7:45:1b:a2:
bb:02:14:ca:fe:b0:e5:fb:00:bf:b9:0c:26:ed:f7:
8b:cc:d9:2a:5d:43:33:a8:3d:03:f9:eb:fd:11:02:
29:93:9d:90:20:27:26:cb:e4:71:1f:87:5a:d8:4d:
05:55:c0:03:6f:62:a3:a7:38:5a:3b:9a:89:54:19:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:51:C9:BA:6A:74:44:6C:75:F6:BC:80:5A:6A:8B:22:42:C9:E3:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVHJump0RGx19ryAWmqLIkLJ48Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.208.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ff:61:9a:97:96:80:2e:f3:f9:aa:b0:86:d7:b4:b0:0f:c5:
e7:a3:7a:b7:28:2f:d6:bd:1d:76:af:c5:22:42:7c:c8:cf:58:
25:57:0c:7f:9b:07:a3:e9:12:c1:29:c6:83:9b:f3:17:4e:be:
c4:7c:d9:82:69:6c:9b:18:36:4e:1d:0c:4e:93:d8:6d:20:57:
76:b6:ee:e3:4c:ab:ab:63:25:c9:c7:14:5b:e2:33:c5:64:75:
33:85:22:cb:57:61:85:81:31:24:5d:e2:88:68:c7:7b:70:30:
08:98:51:74:ec:6b:22:79:ae:16:f9:c6:ba:47:7f:4c:96:3d:
3a:0f:49:c0:55:e8:40:14:bc:ef:d3:47:69:1e:5b:1e:f9:02:
9c:9a:5d:8d:66:25:9c:1f:d3:e5:d3:b3:45:08:cf:01:df:7f:
6c:90:2e:e0:93:f5:cf:4e:b9:2b:6d:c1:f8:e0:0d:26:72:6f:
d7:1a:31:5a:86:ea:cc:f4:f9:fe:8f:8a:a7:04:98:37:2d:0f:
f1:0b:4f:b1:8c:ce:ee:97:27:c4:d2:90:35:8c:c4:48:e3:8c:
ba:ef:c5:45:f8:8b:f0:78:4f:35:c7:5a:03:bc:11:00:51:69:
45:b0:dd:5a:72:35:1e:c7:3e:22:f1:5d:d9:92:b6:3a:ee:bb:
64:ee:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client