Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hxDx07kqeVlkTRyxjCds-_teVas.roa
File: hxDx07kqeVlkTRyxjCds-_teVas.roa (raw, json)
Hash identifier: wgZI1IL5ZbsCSJ/ey27GiTFchCxT7tzBUYeHx76sgUw=
Subject key identifier: 87:10:F1:D3:B9:2A:79:59:64:4D:1C:B1:8C:27:6C:FB:FB:5E:55:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193BEC2E030170766EE8E8C9F47DDB21C58
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hxDx07kqeVlkTRyxjCds-_teVas.roa
Signing time: Fri 13 Dec 2024 06:44:22 +0000
ROA not before: Fri 13 Dec 2024 06:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.206.0/24 maxlen: 24
37.202.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:c2:e0:30:17:07:66:ee:8e:8c:9f:47:dd:b2:1c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 13 06:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8710f1d3b92a7959644d1cb18c276cfbfb5e55ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:5c:5b:49:cf:68:a7:16:ba:31:f6:b3:c8:
43:f5:03:b0:36:f4:3c:7d:21:fa:ed:88:0d:14:96:
33:7c:dc:30:4c:a5:78:c3:d8:1a:3e:c1:b9:79:e0:
f9:03:a9:aa:c3:db:cf:ed:6a:cc:53:fd:27:60:1b:
41:e4:74:21:aa:df:86:1a:ad:71:10:72:a8:e4:72:
87:d3:fc:59:59:04:78:1c:a9:c3:1a:e4:26:87:80:
f0:5e:82:d1:3a:2c:fd:2d:5c:9e:db:8e:c1:72:28:
fa:36:8f:c8:8d:79:53:7d:97:2e:07:81:8c:50:46:
64:d5:f4:74:c0:65:7a:cf:1f:6a:82:bc:4a:f1:e2:
b7:6d:75:55:e8:b9:08:7c:9f:4a:cf:46:bc:ca:1c:
c8:2c:b2:46:1e:e2:33:e8:2c:92:f0:96:c8:d2:56:
5b:6c:31:e5:c9:5a:55:be:95:40:1a:44:93:68:75:
40:d8:4d:be:a3:84:b7:ec:07:eb:73:5a:1a:c8:cd:
48:87:fe:01:74:04:28:21:6b:70:7b:ad:a5:1c:11:
fc:4f:8a:a7:2d:1b:27:3f:79:dc:e9:38:b3:f9:70:
82:a4:53:ff:7c:d8:85:f6:bc:39:5e:f4:93:e5:37:
75:80:36:df:b5:bd:6b:0d:a1:8a:dd:70:7e:28:a8:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:F1:D3:B9:2A:79:59:64:4D:1C:B1:8C:27:6C:FB:FB:5E:55:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hxDx07kqeVlkTRyxjCds-_teVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.206.0/24
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ca:17:cf:42:5e:db:bb:ac:2f:03:a2:a7:c8:53:31:78:98:
d5:70:05:8f:1e:9b:17:92:3a:c5:61:e0:92:fb:0e:47:22:71:
f6:da:2c:24:a6:c1:0c:59:c9:ae:f6:95:ab:a3:28:20:89:0a:
fa:70:e3:d2:58:5d:71:f0:1e:c8:f9:3f:68:b5:d1:9e:1f:63:
9b:ac:fc:54:20:bc:6a:40:56:2f:ef:b8:25:85:1c:76:cf:08:
50:09:d7:30:64:9e:3c:af:66:4c:47:1e:85:3e:ca:cd:c7:f3:
70:fa:db:92:24:3b:08:29:d4:26:74:aa:fd:ac:aa:2b:93:73:
5b:80:e7:62:c3:6f:39:d0:65:ac:e7:a2:63:a1:d3:54:0b:2c:
68:a4:c5:28:e4:a3:a5:a0:c7:db:9b:d3:51:9e:34:10:75:c0:
1d:90:da:6d:76:81:40:58:a5:60:bd:40:3e:a8:82:99:b1:bf:
c7:a3:47:d9:2c:6d:8d:4a:92:e9:90:f2:11:8d:f6:6a:51:c3:
48:f4:46:dd:f7:90:7a:8f:e7:65:fd:34:54:f1:12:5e:7e:af:
cc:fc:bd:a9:d7:3a:d2:26:d5:93:7c:8f:97:7e:17:2f:4d:f2:
87:2a:e7:0e:5e:0a:eb:53:6f:92:f0:d8:84:2b:41:97:59:93:
1a:b4:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:31:59 2025 by rpki-client