Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cHtnflYcN1OZX_8Ty12lmZdTKpc.roa
File: cHtnflYcN1OZX_8Ty12lmZdTKpc.roa (raw, json)
Hash identifier: gk95Xk1ORkLgi5EimahnJBXBTcCtfW+PE9J4XTOiA0Y=
Subject key identifier: 70:7B:67:7E:56:1C:37:53:99:5F:FF:13:CB:5D:A5:99:97:53:2A:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195C92BDD8D304EB877583A8147253EC54D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cHtnflYcN1OZX_8Ty12lmZdTKpc.roa
Signing time: Mon 24 Mar 2025 17:20:49 +0000
ROA not before: Mon 24 Mar 2025 17:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.80.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:2b:dd:8d:30:4e:b8:77:58:3a:81:47:25:3e:c5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 24 17:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=707b677e561c3753995fff13cb5da59997532a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:20:55:90:a7:6a:67:6d:2e:ec:50:04:f7:
1f:95:4f:be:b0:a5:c0:60:f0:35:45:1a:0d:6a:7f:
96:cc:86:4f:0e:9b:63:b6:72:e0:1a:fb:1a:db:fb:
cc:6e:46:92:f9:d1:be:41:41:21:ad:e9:fc:12:f3:
53:89:48:bd:58:9a:c5:5a:ee:ae:38:7d:4f:e4:e2:
e3:88:5f:85:95:c6:59:da:ab:ff:bc:20:86:ae:84:
92:f5:6d:b5:bb:f9:72:0e:09:c8:34:21:5c:90:23:
8e:4f:7b:5e:07:11:7f:14:15:9a:f9:90:85:4a:dd:
3b:9c:39:ff:34:c9:15:09:e3:ce:55:7a:f9:1b:c2:
87:05:98:9a:80:bf:73:ac:0d:11:42:f3:78:62:e4:
49:0b:9d:74:5a:3e:6a:aa:6d:6b:29:08:27:f4:07:
07:f8:fa:70:45:65:6e:7e:c3:52:c7:72:df:69:60:
7a:e7:8a:5e:77:ce:6e:47:8e:00:cf:66:9b:12:11:
6f:68:e4:47:e8:0e:c8:01:21:7c:a3:33:51:95:45:
9f:27:e2:f5:78:85:32:f7:bf:e1:60:e2:b9:d0:1a:
45:96:1d:33:f7:f3:0c:51:8a:07:37:d8:49:e0:07:
d6:a2:e1:7b:d6:b2:bd:6d:24:35:87:41:72:7d:d0:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:67:7E:56:1C:37:53:99:5F:FF:13:CB:5D:A5:99:97:53:2A:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cHtnflYcN1OZX_8Ty12lmZdTKpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.242.13.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.64.0/24
151.243.57.0/24
151.243.80.0/24
151.243.140.0/24
151.243.164.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0f:a5:57:27:0e:05:1d:cb:de:4f:22:74:12:5b:d4:a5:33:
11:77:e1:85:06:19:48:db:1c:9b:d3:f5:60:d3:63:60:03:53:
6b:b9:19:ed:4b:ef:a8:4e:54:48:a4:1f:6f:4e:66:ed:64:b9:
5a:0a:3d:a3:57:aa:83:18:cb:74:4f:75:37:b9:e5:31:49:49:
57:3b:79:73:fa:8b:ba:8a:c5:7a:8c:01:99:99:3e:83:11:45:
cd:be:10:84:93:f4:1a:1f:78:ed:a4:4c:96:45:ef:8f:15:dc:
1d:ab:6b:be:b1:d7:cb:4a:80:4d:41:8b:79:78:84:30:c0:f5:
ad:79:0c:75:15:69:63:2a:a9:34:38:3d:22:f1:63:cc:8e:f4:
86:b6:a5:b1:fd:10:77:e3:15:a1:b0:8c:02:c8:b9:0b:7b:41:
b0:ff:8d:b0:57:2a:13:93:a3:39:c6:7e:f1:bb:90:d1:6d:50:
ab:1c:54:fe:c2:1b:38:23:42:9a:0b:e5:07:00:d1:25:da:5d:
95:e8:5b:72:43:e7:b2:4f:16:e9:93:11:9c:7d:0d:6b:1f:c5:
0a:dc:31:7b:ce:ad:b8:9c:67:15:60:89:d1:57:dd:5d:3c:4d:
7e:d7:1e:a0:53:87:8d:db:9d:27:b0:79:41:cb:94:df:68:ca:
63:c5:27:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:02 2025 by rpki-client