Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dahj-bgCX8Xyi73J8Ut945xJL2o.roa
File: dahj-bgCX8Xyi73J8Ut945xJL2o.roa (raw, json)
Hash identifier: YtHzS9dGu8R68PLo3YQsEHW3U5FmEvrt1e/LFNyjnlI=
Subject key identifier: 75:A8:63:F9:B8:02:5F:C5:F2:8B:BD:C9:F1:4B:7D:E3:9C:49:2F:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194701363FCD89B18CAD3DB37E2CE15C0DA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dahj-bgCX8Xyi73J8Ut945xJL2o.roa
Signing time: Thu 16 Jan 2025 17:05:06 +0000
ROA not before: Thu 16 Jan 2025 17:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:13:63:fc:d8:9b:18:ca:d3:db:37:e2:ce:15:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 16 17:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a863f9b8025fc5f28bbdc9f14b7de39c492f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:07:fe:3b:bc:9c:0f:f2:a6:fa:63:09:47:
d3:2b:8b:99:d7:e8:cd:c5:51:1c:8b:10:8e:44:92:
fb:aa:c0:16:db:c8:5c:b9:5e:5c:d1:5b:66:45:46:
15:29:88:b9:3c:83:02:ee:5f:b4:0d:cd:f2:88:34:
73:28:27:43:be:0f:66:9d:6f:9a:93:d8:9e:9c:52:
48:2b:7f:9d:cf:9c:7b:2b:df:10:cf:74:6c:42:33:
82:1b:e9:1c:1e:c3:12:03:1a:14:bf:7b:59:00:ce:
c1:15:d8:c9:01:28:ed:b0:8e:97:c9:7a:f1:3d:3b:
7f:c6:2b:75:60:5f:1c:34:f6:15:78:59:c5:6a:32:
f5:77:36:08:60:3c:89:11:57:a3:22:42:9a:42:2a:
05:34:5b:20:42:63:2e:be:35:aa:9d:47:21:c5:59:
97:3c:4a:ea:56:1b:94:ea:51:55:84:bc:29:5e:d5:
f0:5b:d9:2b:0a:b4:eb:00:06:4d:13:48:be:2c:1a:
2b:61:35:07:af:87:1d:5c:18:bc:73:8f:3f:d0:2a:
c9:16:d3:a8:c7:2c:04:99:d3:6a:68:ae:19:9c:df:
1c:7b:97:22:49:6b:0d:f1:46:7c:71:2e:5c:d2:f1:
a0:fc:05:f7:02:c4:70:43:8f:e5:c2:2a:8b:3d:11:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:63:F9:B8:02:5F:C5:F2:8B:BD:C9:F1:4B:7D:E3:9C:49:2F:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dahj-bgCX8Xyi73J8Ut945xJL2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
151.243.222.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
33:71:06:cb:a8:d8:68:07:2e:cd:8b:4b:6e:11:9f:0b:66:e6:
5d:58:f6:cb:74:72:8e:4a:d2:75:dd:f3:27:f4:06:36:61:25:
2a:0b:8c:82:d7:4f:8d:5e:bb:bd:c7:5c:71:cb:ea:fa:67:a3:
8b:c2:a4:44:8a:66:64:ee:61:e8:02:6c:b7:94:e6:58:ff:ba:
2e:31:4d:7d:df:af:a5:c3:d3:22:1d:33:53:90:2a:22:19:fd:
2c:93:9f:50:0a:e3:ce:3e:d3:9f:fe:94:e3:89:f1:36:f0:88:
6b:e5:67:52:10:cb:7c:bb:43:f8:1f:18:50:1a:30:7b:41:35:
e4:80:04:b3:7e:3f:a4:f6:c6:52:25:99:24:4c:45:08:ae:a3:
91:03:07:ee:69:77:64:a4:9a:bb:b3:09:15:f0:9f:26:47:11:
9c:cb:2a:6b:85:06:a5:3c:fa:0d:60:96:e9:c8:b4:8c:77:01:
0c:ea:24:56:56:90:ab:16:b7:f9:21:41:15:b2:14:6c:36:50:
b3:89:7a:4e:f9:98:09:cc:13:78:f2:77:4e:f1:12:f8:05:d3:
f9:66:62:cc:51:3f:3d:58:98:4a:7f:cd:c7:c4:8f:98:57:c0:
c5:34:ff:94:34:6c:61:f9:d5:8b:a5:8d:01:90:15:15:4d:72:
1c:8c:c1:65
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZRwE2P82JsYytPbN+LOFcDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE2MTcwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWE4NjNmOWI4MDI1ZmM1ZjI4YmJkYzlmMTRiN2RlMzljNDkyZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom4H/ju8nA/ypvpjCUfTK4uZ1+jN
xVEcixCORJL7qsAW28hcuV5c0VtmRUYVKYi5PIMC7l+0Dc3yiDRzKCdDvg9mnW+a
k9ienFJIK3+dz5x7K98Qz3RsQjOCG+kcHsMSAxoUv3tZAM7BFdjJASjtsI6XyXrx
PTt/xit1YF8cNPYVeFnFajL1dzYIYDyJEVejIkKaQioFNFsgQmMuvjWqnUchxVmX
PErqVhuU6lFVhLwpXtXwW9krCrTrAAZNE0i+LBorYTUHr4cdXBi8c48/0CrJFtOo
xywEmdNqaK4ZnN8ce5ciSWsN8UZ8cS5c0vGg/AX3AsRwQ4/lwiqLPRF6NwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFHWoY/m4Al/F8ou9yfFLfeOcSS9qMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZGFoai1iZ0NYOFh5aTczSjhVdDk0NXhKTDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAJcrNMAwD
BAQlytADBAAlytIDBAElytQDBACX8g4DBACX8hQDBACX86IDBACX894DBACX8/4w
DQYJKoZIhvcNAQELBQADggEBADNxBsuo2GgHLs2LS24Rnwtm5l1Y9st0co5K0nXd
8yf0BjZhJSoLjILXT41eu73HXHHL6vpno4vCpESKZmTuYegCbLeU5lj/ui4xTX3f
r6XD0yIdM1OQKiIZ/SyTn1AK484+05/+lOOJ8TbwiGvlZ1IQy3y7Q/gfGFAaMHtB
NeSABLN+P6T2xlIlmSRMRQiuo5EDB+5pd2SkmruzCRXwnyZHEZzLKmuFBqU8+g1g
lunItIx3AQzqJFZWkKsWt/khQRWyFGw2ULOJek75mAnME3jyd07xEvgF0/lmYsxR
Pz1YmEp/zcfEj5hXwMU0/5Q0bGH51YuljQGQFRVNchyMwWU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:16:33 2025 by rpki-client