Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ctXZfGbe4ugA7jUjpmp2ualAucA.roa
File: ctXZfGbe4ugA7jUjpmp2ualAucA.roa (raw, json)
Hash identifier: nKQqNRnkLx3XUS2xmqWwH8xMvQpTK9mY+ywFje05aSU=
Subject key identifier: 72:D5:D9:7C:66:DE:E2:E8:00:EE:35:23:A6:6A:76:B9:A9:40:B9:C0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019434EE97722818155D0DD38FEBF014883F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ctXZfGbe4ugA7jUjpmp2ualAucA.roa
Signing time: Sun 05 Jan 2025 05:27:18 +0000
ROA not before: Sun 05 Jan 2025 05:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.97.0/24 maxlen: 24
151.242.99.0/24 maxlen: 24
151.242.102.0/24 maxlen: 24
151.242.104.0/24 maxlen: 24
151.242.106.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.242.118.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
151.242.125.0/24 maxlen: 24
151.242.127.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:ee:97:72:28:18:15:5d:0d:d3:8f:eb:f0:14:88:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 5 05:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72d5d97c66dee2e800ee3523a66a76b9a940b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:38:8f:92:88:36:06:0e:0d:2b:40:d1:16:
32:d6:d4:46:a3:59:0e:d2:bf:14:e4:c1:38:ec:de:
97:a2:33:f3:f1:10:31:cd:40:52:7c:9a:7c:2d:e9:
3d:08:c5:00:a2:57:04:3b:4e:f0:ec:0e:55:21:bf:
c8:54:6f:c9:e6:8b:ea:cd:cf:24:4b:92:6c:1b:4f:
d0:a8:2b:0f:9b:0c:11:25:21:4a:8b:cd:05:0d:8d:
0d:30:1a:f2:17:87:a4:65:61:c6:83:6d:b8:1d:bf:
c2:a2:c1:40:42:6d:af:53:84:2a:6a:19:02:ac:e9:
c5:ae:c3:83:8d:16:23:b6:ff:ef:72:42:69:30:0c:
4c:15:ef:e4:9c:19:51:05:a4:8e:83:8b:23:97:9c:
5d:9c:35:ef:dd:78:08:48:97:da:e5:58:32:c7:fe:
70:6e:d5:c4:d9:f8:fc:07:2b:c5:e4:40:6d:68:07:
3e:e9:07:c2:d3:ae:2a:ac:c1:4b:f4:75:ab:a6:59:
0b:e7:5d:e4:1c:b5:00:65:01:a1:73:e4:4d:13:65:
7b:ac:cd:a4:2e:1e:c3:a9:79:7b:d4:6e:8b:a8:84:
d3:b2:02:61:fe:1c:56:44:70:40:86:cb:4a:e1:c4:
11:9a:aa:4a:7c:44:a4:d5:b0:d3:fc:50:0d:08:e1:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:D9:7C:66:DE:E2:E8:00:EE:35:23:A6:6A:76:B9:A9:40:B9:C0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ctXZfGbe4ugA7jUjpmp2ualAucA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.97.0/24
151.242.99.0/24
151.242.102.0/24
151.242.104.0/24
151.242.106.0/24
151.242.108.0/24
151.242.111.0/24
151.242.114.0/24
151.242.118.0/24
151.242.121.0/24
151.242.123.0/24
151.242.125.0/24
151.242.127.0/24
151.243.93.0/24
151.243.96.0/24
151.243.99.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b5:df:ff:c9:3e:6e:f8:80:01:16:15:84:8f:7e:80:27:04:
ef:7c:2d:70:b6:8d:64:aa:03:17:2c:5f:00:6b:c1:55:ee:cb:
29:93:b2:67:fc:5f:38:3a:25:38:b9:a9:a4:b2:fe:e4:33:44:
20:da:8a:8c:7b:23:85:2b:64:88:c0:3e:4c:7e:4f:61:2d:d4:
32:30:f0:f0:f9:52:78:76:29:4a:c7:fe:e9:ec:31:4b:6e:0f:
7d:c5:ef:90:c4:1f:c3:99:8f:37:87:3d:d3:53:73:8d:b9:ea:
5a:26:03:5b:c2:69:8c:95:2b:7a:e0:59:32:0a:1f:d1:7e:46:
30:c6:63:e5:57:66:ad:7e:c4:82:15:a5:09:ca:24:d2:5a:88:
6d:da:ab:52:03:b6:74:41:eb:c6:9b:75:2a:64:93:1a:5f:14:
d0:c1:bb:b1:aa:85:26:e0:17:4d:86:04:19:f9:ad:65:bc:fd:
ab:2b:79:09:f2:fa:1d:6a:57:bb:4b:bf:f4:26:6c:cb:e7:45:
7c:a4:4b:e6:8a:8a:b5:15:72:42:3c:55:2e:07:2d:41:0a:31:
cb:8c:59:d9:c2:b0:1d:75:00:35:cf:b6:62:93:81:bb:20:c4:
76:d0:cf:87:2d:c7:bf:94:0b:c5:2c:29:73:6b:fc:8e:6e:cc:
8e:34:93:87
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZQ07pdyKBgVXQ3Tj+vwFIg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTA1MDUyNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ1ZDk3YzY2ZGVlMmU4MDBlZTM1MjNhNjZhNzZiOWE5NDBiOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h84j5KINgYODStA0RYy1tRGo1kO
0r8U5ME47N6XojPz8RAxzUBSfJp8Lek9CMUAolcEO07w7A5VIb/IVG/J5ovqzc8k
S5JsG0/QqCsPmwwRJSFKi80FDY0NMBryF4ekZWHGg224Hb/CosFAQm2vU4QqahkC
rOnFrsODjRYjtv/vckJpMAxMFe/knBlRBaSOg4sjl5xdnDXv3XgISJfa5Vgyx/5w
btXE2fj8ByvF5EBtaAc+6QfC064qrMFL9HWrplkL513kHLUAZQGhc+RNE2V7rM2k
Lh7DqXl71G6LqITTsgJh/hxWRHBAhstK4cQRmqpKfESk1bDT/FANCOEjbwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFHLV2Xxm3uLoAO41I6ZqdrmpQLnAMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvY3RYWmZHYmU0dWdBN2pVanBtcDJ1YWxBdWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEACXKwTAM
AwQAJcrDAwQBJcrIAwQAl/JhAwQAl/JjAwQAl/JmAwQAl/JoAwQAl/JqAwQAl/Js
AwQAl/JvAwQAl/JyAwQAl/J2AwQAl/J5AwQAl/J7AwQAl/J9AwQAl/J/AwQAl/Nd
AwQAl/NgAwQAl/NjMA0GCSqGSIb3DQEBCwUAA4IBAQCFtd//yT5u+IABFhWEj36A
JwTvfC1wto1kqgMXLF8Aa8FV7sspk7Jn/F84OiU4uamksv7kM0Qg2oqMeyOFK2SI
wD5Mfk9hLdQyMPDw+VJ4dilKx/7p7DFLbg99xe+QxB/DmY83hz3TU3ONuepaJgNb
wmmMlSt64FkyCh/RfkYwxmPlV2atfsSCFaUJyiTSWoht2qtSA7Z0QevGm3UqZJMa
XxTQwbuxqoUm4BdNhgQZ+a1lvP2rK3kJ8vodale7S7/0JmzL50V8pEvmioq1FXJC
PFUuBy1BCjHLjFnZwrAddQA1z7Zik4G7IMR20M+HLce/lAvFLClza/yObsyONJOH
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:02 2025 by rpki-client