Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d26Rb2F0WGkdQy5Hmh5lXR5KYis.roa
File: d26Rb2F0WGkdQy5Hmh5lXR5KYis.roa (raw, json)
Hash identifier: wRAAQ43WUTFtDQaOP9df+u+Ng+3WkMYGigYh7MLuUxg=
Subject key identifier: 77:6E:91:6F:61:74:58:69:1D:43:2E:47:9A:1E:65:5D:1E:4A:62:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195B4C2F2D1620B8F963AA26A0650E5DA68
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d26Rb2F0WGkdQy5Hmh5lXR5KYis.roa
Signing time: Thu 20 Mar 2025 18:13:49 +0000
ROA not before: Thu 20 Mar 2025 18:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.63.0/24 maxlen: 24
151.243.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:c2:f2:d1:62:0b:8f:96:3a:a2:6a:06:50:e5:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 18:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=776e916f617458691d432e479a1e655d1e4a622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:7a:f4:31:12:95:50:75:77:e5:96:9b:6a:
58:87:b8:96:f7:1e:b4:ad:2d:97:8f:1a:39:0b:af:
01:6c:fd:ff:b6:7e:d3:1e:50:21:43:c5:95:44:69:
ad:3f:07:69:5c:d6:03:7f:00:c8:0f:45:65:ef:31:
23:b5:41:2e:9c:b6:f5:da:3e:7b:56:d5:19:c3:14:
15:17:00:47:e0:99:15:dd:25:84:35:fa:95:f4:7b:
a4:62:83:86:bf:f2:71:64:94:f1:af:70:b0:4d:2a:
7a:2c:f0:53:39:aa:27:de:b7:ca:27:ee:0c:63:d5:
8b:67:94:72:a8:64:62:af:55:ea:64:44:f3:58:6b:
c9:27:52:ef:8c:ab:55:63:dc:4d:26:ec:43:40:59:
93:3b:c7:a3:8c:0b:f8:f3:b4:09:d5:11:41:3c:8b:
01:00:72:21:24:3e:2c:5f:f9:64:9f:ad:7f:b0:33:
11:41:6f:ea:97:f8:ab:80:6b:94:a5:af:2f:75:7c:
10:36:15:ad:1e:d0:4c:be:4f:5f:d1:40:e7:21:91:
92:b0:85:29:01:f9:02:61:71:80:3e:d7:d1:78:f8:
a1:d6:2e:20:08:06:de:f9:4e:32:66:56:dc:5b:41:
00:17:0c:4b:9c:bb:e4:74:11:e0:33:d1:18:df:4e:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:91:6F:61:74:58:69:1D:43:2E:47:9A:1E:65:5D:1E:4A:62:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d26Rb2F0WGkdQy5Hmh5lXR5KYis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.242.33.0/24
151.242.63.0/24
151.243.13.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0a:10:87:ac:78:88:43:77:7a:ec:f2:76:a3:57:b9:86:8e:
dd:3d:00:ae:9e:33:04:73:97:53:4c:42:14:93:9a:4c:b2:c8:
00:c5:4d:b9:6a:ee:ac:6a:b2:f0:23:e8:e3:b9:ff:7e:3a:1a:
aa:a5:e0:d5:56:a5:fe:7f:ca:f8:4c:3b:52:84:11:80:ee:e4:
34:ce:98:a2:5e:62:6a:ed:04:fe:6d:07:89:57:ce:ad:7c:29:
3e:51:75:ac:a8:67:85:37:b9:c7:72:d5:79:c7:cd:52:d5:cd:
55:f6:de:c7:9a:2f:9d:dd:17:35:38:0f:69:19:d3:cd:da:f6:
49:a8:9d:21:52:6b:07:94:2e:f0:d9:1d:41:ef:5b:74:9c:81:
ca:f8:8b:6c:95:f6:28:29:22:50:72:31:b6:64:ad:09:d3:d7:
fb:73:8c:7c:a6:83:f7:92:9e:c6:40:c7:79:91:68:50:0f:1c:
85:ac:83:3a:00:ea:92:a4:52:78:55:06:14:06:6e:05:84:a9:
86:82:43:a4:10:e5:d1:db:05:9d:56:9f:02:5d:b6:1d:5f:6a:
45:98:fe:41:c2:7d:33:df:bc:2e:c6:3d:50:57:60:ae:d1:15:
48:d7:93:7b:7e:44:0a:7f:a9:53:96:73:f1:7d:2c:18:21:40:
b1:5f:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:56 2025 by rpki-client