Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2mslRy8_mSfzX3Y1LbQFNy-aqQ.roa
File: f2mslRy8_mSfzX3Y1LbQFNy-aqQ.roa (raw, json)
Hash identifier: b2KuPpJD43H2t3T2Xm6Yqrhw46+eDmePagsiA2zxsJo=
Subject key identifier: 7F:69:AC:95:1C:BC:FE:64:9F:CD:7D:D8:D4:B6:D0:14:DC:BE:6A:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194EA3579830FE62862BDA2B0A772A525EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2mslRy8_mSfzX3Y1LbQFNy-aqQ.roa
Signing time: Sun 09 Feb 2025 10:16:00 +0000
ROA not before: Sun 09 Feb 2025 10:16:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.243.128.0/24 maxlen: 24
151.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:35:79:83:0f:e6:28:62:bd:a2:b0:a7:72:a5:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 9 10:16:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f69ac951cbcfe649fcd7dd8d4b6d014dcbe6aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:d6:4b:4c:04:b1:08:0f:83:18:64:27:45:
f7:78:02:a4:4b:e6:49:0d:ff:f7:20:eb:fa:31:25:
88:91:74:c1:99:c0:b6:5d:87:a3:3e:eb:d1:1b:99:
da:f1:f4:ab:78:b1:31:8a:00:f9:e3:63:4e:45:87:
95:a6:9d:23:ad:f1:f1:28:00:5b:e3:03:79:a2:af:
28:5e:d6:e0:e3:f9:ea:dd:b1:fb:e9:5e:84:b8:1f:
65:f0:a2:45:47:74:c0:6a:d5:87:8b:0e:2c:a2:f1:
82:37:db:78:bf:a7:26:b2:c3:95:56:36:58:d2:7a:
04:4a:61:f5:c2:0f:f8:a5:07:ba:8d:84:d5:6d:de:
b5:9d:be:79:9e:eb:5e:ac:5a:5d:d8:e9:68:c3:9e:
16:0a:73:b5:7f:a5:f7:1d:8f:8b:1c:c4:b1:09:7d:
23:2b:be:3f:d1:d4:50:d1:9d:dd:1a:30:c8:54:a9:
24:23:18:a4:64:9c:7d:ad:e8:77:08:6c:27:bb:eb:
64:a4:32:63:dc:2e:a6:13:ed:c5:d5:6e:cc:73:6e:
70:e6:cf:97:37:fd:36:c1:be:3c:71:00:be:3a:80:
4c:fc:72:fd:21:ee:fa:97:93:a5:02:a0:be:3f:7d:
45:97:e2:7b:87:bf:af:fb:c8:4d:2d:69:b8:b3:b9:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:AC:95:1C:BC:FE:64:9F:CD:7D:D8:D4:B6:D0:14:DC:BE:6A:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2mslRy8_mSfzX3Y1LbQFNy-aqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.243.128.0/23
Signature Algorithm: sha256WithRSAEncryption
72:40:14:78:bf:10:6b:14:52:04:33:0b:fd:f4:42:7d:d8:83:
41:48:2e:c8:42:41:21:08:9d:89:57:c7:24:3b:c5:b7:5a:aa:
5f:d5:72:f5:37:90:30:ab:5f:f4:70:ee:db:d9:31:76:ab:3b:
15:fe:37:79:fc:49:e1:91:bd:7d:1e:9a:61:21:2d:dd:2d:9a:
73:a3:ac:e6:f7:b3:f7:7d:11:a4:0b:8d:e8:a7:98:0a:dd:c8:
e7:34:8a:a7:22:9c:c5:c2:c7:4e:41:53:24:05:53:e5:19:8c:
ba:d4:18:ed:61:18:df:f0:13:f9:6f:87:7a:64:58:3a:28:79:
a3:80:f9:29:75:6d:cf:fb:2f:83:76:41:6c:14:00:10:cc:5e:
25:b8:70:4d:d7:52:37:03:ef:19:4a:bc:94:3a:0a:dc:fb:98:
a4:18:ee:0c:47:a7:47:c4:f9:c4:26:29:e6:d2:39:75:3e:04:
63:4b:b6:fd:d7:0e:ec:d0:10:c8:33:63:1f:d5:d7:67:53:a0:
f9:27:89:e5:29:ec:b0:70:9a:ee:c4:48:e9:2e:41:0e:8e:a9:
5b:1a:6a:9d:25:e3:44:12:d1:e1:af:23:f3:c5:2c:55:83:ab:
cf:9b:cf:9d:05:38:cc:a7:67:24:f2:41:69:ed:84:2e:71:b4:
3b:f1:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:40 2025 by rpki-client