Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9VsjSCWNeEkc9BB7O0hb8sbQ2k.roa
File: t9VsjSCWNeEkc9BB7O0hb8sbQ2k.roa (raw, json)
Hash identifier: 3GGsbCZx7+vWXgr7JPaH8HbXqBbNkmz8k9Oj5yCrBQ0=
Subject key identifier: B7:D5:6C:8D:20:96:35:E1:24:73:D0:41:EC:ED:21:6F:CB:1B:43:69
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019583F0A19F871A14C7FCBB562E28AB225D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9VsjSCWNeEkc9BB7O0hb8sbQ2k.roa
Signing time: Tue 11 Mar 2025 06:42:20 +0000
ROA not before: Tue 11 Mar 2025 06:42:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.99.0/24 maxlen: 24
151.242.104.0/24 maxlen: 24
151.242.106.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.118.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.127.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:f0:a1:9f:87:1a:14:c7:fc:bb:56:2e:28:ab:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:42:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d56c8d209635e12473d041eced216fcb1b4369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:2e:33:82:f7:65:85:5f:92:87:63:8f:62:
e6:61:14:9d:08:fe:1a:ba:c1:d2:0f:7a:4a:9f:e9:
2c:9e:5c:54:36:d1:f1:db:ce:ed:3a:1d:d2:b7:2f:
f5:aa:f9:f0:16:26:0d:45:ea:1d:93:d2:01:fc:eb:
f0:d7:ec:c3:1d:d2:ff:14:e0:45:99:48:77:70:b4:
30:65:e5:ba:9c:22:30:49:9b:c1:c9:65:8d:86:a6:
87:d8:98:f1:07:4f:79:14:5e:0a:df:ed:5b:46:e1:
1d:4c:74:50:ed:a8:43:01:82:73:2e:6f:90:3e:b9:
5c:bd:a5:8b:6f:09:f9:44:84:1d:2e:e9:12:e7:40:
35:0d:b2:6b:50:97:8d:b3:73:f1:52:90:95:46:1e:
0b:d7:06:67:eb:99:f3:df:02:53:da:56:86:ea:ce:
b8:b1:04:84:c8:96:53:68:31:a9:27:e0:ce:68:5c:
6d:13:fe:2e:9a:15:cc:3c:6a:f5:d5:f2:6b:39:d8:
17:54:c1:ea:7b:93:37:59:68:3c:72:14:14:89:48:
c5:d6:9a:a8:ea:d3:d1:8e:01:76:c5:62:fe:b6:77:
50:26:29:43:8e:5b:aa:14:d2:b6:aa:f9:2b:6a:6b:
61:77:70:4b:c2:38:dc:eb:e8:fb:3e:78:0c:88:5a:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:6C:8D:20:96:35:E1:24:73:D0:41:EC:ED:21:6F:CB:1B:43:69
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9VsjSCWNeEkc9BB7O0hb8sbQ2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.99.0/24
151.242.104.0/24
151.242.106.0/24
151.242.108.0/24
151.242.111.0/24
151.242.118.0/24
151.242.121.0-151.242.122.255
151.242.127.0/24
151.243.93.0/24
151.243.96.0/24
151.243.99.0/24
Signature Algorithm: sha256WithRSAEncryption
35:15:01:db:b5:b1:e2:a3:32:93:3c:ca:05:ac:85:79:3e:45:
7e:70:44:04:da:8d:7e:c2:25:87:f2:e8:35:2b:32:75:25:fb:
db:0c:34:85:e9:0c:e2:03:81:24:c6:74:fb:52:23:10:a9:b0:
f9:c9:56:52:15:d1:3b:f2:45:83:97:1a:cd:e3:fa:82:72:26:
69:b1:d1:6a:d7:e1:87:74:1f:0c:5f:7a:25:09:28:10:8c:d3:
fa:6a:a0:62:79:29:1c:34:b1:65:8e:7e:5b:16:0c:16:fa:dd:
0a:be:30:83:8f:d6:e3:9d:05:fc:3c:4f:e6:6c:80:bb:a8:f7:
3f:1a:ef:30:5a:6e:13:78:20:3f:04:da:3f:2a:c7:f4:f0:b9:
db:31:8f:7f:f9:5b:2f:80:2a:b3:30:b7:72:b5:ce:87:6f:93:
78:64:29:d8:5e:68:97:e4:49:76:35:02:7f:04:10:81:1f:91:
3e:92:da:e1:43:a8:d2:41:2f:37:ac:35:50:e5:30:e8:9a:d4:
21:8a:38:51:7a:4e:b9:8d:69:4b:e9:f0:d9:85:70:76:13:32:
f2:b0:9f:eb:3c:3c:a3:ec:fd:bd:74:1f:a7:15:64:73:3b:5d:
50:87:78:aa:59:a8:ef:f7:26:1a:1e:20:99:ae:b1:23:1b:f6:
99:37:95:6a
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZWD8KGfhxoUx/y7Vi4oqyJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzExMDY0MjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2Q1NmM4ZDIwOTYzNWUxMjQ3M2QwNDFlY2VkMjE2ZmNiMWI0MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IwuM4L3ZYVfkodjj2LmYRSdCP4a
usHSD3pKn+ksnlxUNtHx287tOh3Sty/1qvnwFiYNReodk9IB/Ovw1+zDHdL/FOBF
mUh3cLQwZeW6nCIwSZvByWWNhqaH2JjxB095FF4K3+1bRuEdTHRQ7ahDAYJzLm+Q
PrlcvaWLbwn5RIQdLukS50A1DbJrUJeNs3PxUpCVRh4L1wZn65nz3wJT2laG6s64
sQSEyJZTaDGpJ+DOaFxtE/4umhXMPGr11fJrOdgXVMHqe5M3WWg8chQUiUjF1pqo
6tPRjgF2xWL+tndQJilDjluqFNK2qvkramthd3BLwjjc6+j7PngMiFraeQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFLfVbI0gljXhJHPQQeztIW/LG0NpMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdDlWc2pTQ1dOZUVrYzlCQjdPMGhiOHNiUTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAJcrBMAwD
BAAlysMDBAElysgDBACX8mMDBACX8mgDBACX8moDBACX8mwDBACX8m8DBACX8nYw
DAMEAJfyeQMEAJfyegMEAJfyfwMEAJfzXQMEAJfzYAMEAJfzYzANBgkqhkiG9w0B
AQsFAAOCAQEANRUB27Wx4qMykzzKBayFeT5FfnBEBNqNfsIlh/LoNSsydSX72ww0
hekM4gOBJMZ0+1IjEKmw+clWUhXRO/JFg5cazeP6gnImabHRatfhh3QfDF96JQko
EIzT+mqgYnkpHDSxZY5+WxYMFvrdCr4wg4/W450F/DxP5myAu6j3PxrvMFpuE3gg
PwTaPyrH9PC52zGPf/lbL4AqszC3crXOh2+TeGQp2F5ol+RJdjUCfwQQgR+RPpLa
4UOo0kEvN6w1UOUw6JrUIYo4UXpOuY1pS+nw2YVwdhMy8rCf6zw8o+z9vXQfpxVk
cztdUId4qlmo7/cmGh4gma6xIxv2mTeVag==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:31:30 2025 by rpki-client