Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p3bekNrn03kOGEh29LdiiTAurB8.roa
File: p3bekNrn03kOGEh29LdiiTAurB8.roa (raw, json)
Hash identifier: klgyG53Q+e0+vvwSVBClyfi6hmHlUtQ/x7eFhphjsb4=
Subject key identifier: A7:76:DE:90:DA:E7:D3:79:0E:18:48:76:F4:B7:62:89:30:2E:AC:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019444BC4E6AF31AF8D7BD95CC38D6A3841F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p3bekNrn03kOGEh29LdiiTAurB8.roa
Signing time: Wed 08 Jan 2025 07:06:19 +0000
ROA not before: Wed 08 Jan 2025 07:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:bc:4e:6a:f3:1a:f8:d7:bd:95:cc:38:d6:a3:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 8 07:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a776de90dae7d3790e184876f4b76289302eac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:06:30:50:5a:2c:f7:3b:8a:b0:e4:35:50:
e3:80:bf:68:a8:d3:d6:a9:5d:8d:df:e5:96:1a:a0:
91:4c:d7:9e:46:c6:3f:39:78:5d:67:00:83:ea:d8:
7a:50:6e:bc:bb:63:6c:f6:c0:56:37:6e:85:53:96:
9a:a1:34:3a:36:55:61:c7:92:c3:26:55:6b:f1:96:
35:e7:ee:13:61:b0:ef:ae:eb:f1:b6:60:70:db:a0:
aa:e5:f0:12:2a:90:6f:b2:fc:7e:db:c3:f0:1b:88:
a5:5b:36:22:51:82:27:5f:79:81:d3:28:0f:f5:f5:
49:35:be:21:64:75:bc:bf:80:58:09:20:82:18:03:
49:d6:09:e6:7c:f9:90:e1:d0:7a:6b:c8:7f:0f:2f:
e3:cc:c6:e0:6b:62:76:fc:d0:18:26:37:de:86:c6:
56:b6:a5:a9:9d:71:57:c3:a3:f9:6f:48:d1:33:b1:
6a:ae:2a:e9:10:03:cc:ac:21:05:24:4b:aa:4d:b2:
00:14:1a:4f:cb:57:82:6f:70:02:f4:9e:f1:01:c0:
7d:09:fd:b9:58:74:71:ce:3d:2d:ed:a7:46:f0:ff:
fb:ae:9b:4d:72:79:50:87:9d:be:75:67:9e:be:45:
9d:ba:58:76:02:2f:d4:71:90:f0:fd:49:3c:02:2e:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:DE:90:DA:E7:D3:79:0E:18:48:76:F4:B7:62:89:30:2E:AC:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p3bekNrn03kOGEh29LdiiTAurB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.213.0/24
151.243.107.0-151.243.110.255
Signature Algorithm: sha256WithRSAEncryption
6d:a6:70:bf:c0:6f:95:8f:c0:9d:dc:8d:cb:fe:35:72:2e:f8:
af:0f:30:18:f3:5d:f8:44:03:16:1c:3b:5f:f5:e9:97:23:2c:
e6:92:45:8c:a5:69:c9:71:8a:2f:a9:60:0b:c6:a8:f3:cd:4f:
4e:b4:13:69:e8:2e:11:0b:b8:6f:85:14:69:82:46:7f:6f:1f:
4a:08:5d:49:9c:7d:3e:ef:6f:6c:ae:67:0e:4d:2a:39:05:79:
a2:fd:7d:f1:cd:0b:00:27:34:b6:fb:b6:12:c4:59:8f:bb:84:
c4:d7:3e:f1:bb:ca:55:1f:f8:79:c2:ad:21:7f:71:28:e5:22:
5d:5e:7a:0e:87:00:35:a5:55:23:92:b8:6e:89:d6:0c:6f:b6:
e7:dc:47:dc:09:57:02:c4:e0:5f:f4:78:5d:df:a0:48:e3:02:
41:1e:db:f3:87:1e:ca:be:f7:72:82:13:c9:30:e3:1c:4f:21:
88:2a:3d:06:a6:77:d4:37:75:e3:4f:d6:ae:c3:0f:b8:d9:38:
ca:4f:be:0e:db:06:0c:ad:a9:70:c5:d6:66:ea:9c:ce:dd:48:
c9:bd:d6:93:e2:fc:35:80:6f:40:2d:9d:4c:f7:c7:ec:12:f9:
ec:e4:c9:72:5a:61:47:73:94:de:df:5b:33:e1:9f:49:79:18:
7b:b9:6f:2f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZREvE5q8xr4172VzDjWo4QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTA4MDcwNjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzc2ZGU5MGRhZTdkMzc5MGUxODQ4NzZmNGI3NjI4OTMwMmVhYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hEGMFBaLPc7irDkNVDjgL9oqNPW
qV2N3+WWGqCRTNeeRsY/OXhdZwCD6th6UG68u2Ns9sBWN26FU5aaoTQ6NlVhx5LD
JlVr8ZY15+4TYbDvruvxtmBw26Cq5fASKpBvsvx+28PwG4ilWzYiUYInX3mB0ygP
9fVJNb4hZHW8v4BYCSCCGANJ1gnmfPmQ4dB6a8h/Dy/jzMbga2J2/NAYJjfehsZW
tqWpnXFXw6P5b0jRM7FqrirpEAPMrCEFJEuqTbIAFBpPy1eCb3AC9J7xAcB9Cf25
WHRxzj0t7adG8P/7rptNcnlQh52+dWeevkWdulh2Ai/UcZDw/Uk8Ai7J/QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKd23pDa59N5DhhIdvS3YokwLqwfMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcDNiZWtOcm4wM2tPR0VoMjlMZGlpVEF1ckI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAJcrNAwQA
JcrVMAwDBACX82sDBACX824wDQYJKoZIhvcNAQELBQADggEBAG2mcL/Ab5WPwJ3c
jcv+NXIu+K8PMBjzXfhEAxYcO1/16ZcjLOaSRYylaclxii+pYAvGqPPNT060E2no
LhELuG+FFGmCRn9vH0oIXUmcfT7vb2yuZw5NKjkFeaL9ffHNCwAnNLb7thLEWY+7
hMTXPvG7ylUf+HnCrSF/cSjlIl1eeg6HADWlVSOSuG6J1gxvtufcR9wJVwLE4F/0
eF3foEjjAkEe2/OHHsq+93KCE8kw4xxPIYgqPQamd9Q3deNP1q7DD7jZOMpPvg7b
BgytqXDF1mbqnM7dSMm91pPi/DWAb0AtnUz3x+wS+ezkyXJaYUdzlN7fWzPhn0l5
GHu5by8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:11 2025 by rpki-client