Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uCPHAmRjgbG_EIztnDwwKpnulDo.roa
File: uCPHAmRjgbG_EIztnDwwKpnulDo.roa (raw, json)
Hash identifier: 1fC9X3ZFuTIT6SI6hc4lSLzxlwOBSt/sthdO1/cHYs0=
Subject key identifier: B8:23:C7:02:64:63:81:B1:BF:10:8C:ED:9C:3C:30:2A:99:EE:94:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946B6C4AEF9B4EF4146CBED98EC319CA8E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uCPHAmRjgbG_EIztnDwwKpnulDo.roa
Signing time: Wed 15 Jan 2025 19:24:06 +0000
ROA not before: Wed 15 Jan 2025 19:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199415
IP address blocks: 37.202.209.0/24 maxlen: 24
37.202.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:6c:4a:ef:9b:4e:f4:14:6c:be:d9:8e:c3:19:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 19:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b823c702646381b1bf108ced9c3c302a99ee943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:c4:f5:ef:fa:6e:fc:17:6c:99:9d:46:69:
a1:f2:51:43:25:96:f3:70:f5:fb:05:2f:41:ea:ad:
0d:63:6c:bd:e6:33:3f:dd:cf:d0:2c:a8:b4:ab:52:
cd:70:d1:53:b4:d0:cd:ea:05:44:cd:87:76:98:8f:
2e:8b:e2:16:fa:3c:3e:6a:5e:67:38:ef:46:22:48:
79:88:53:70:02:f3:58:73:38:71:33:31:a2:35:16:
a6:89:ef:dc:b7:0a:8e:3f:30:26:bf:60:bc:51:e6:
e5:ed:e4:3c:00:5b:57:bb:fa:55:5d:5a:48:1d:3a:
50:7c:f6:f2:31:8a:b1:a0:0c:3b:7b:3a:44:de:5c:
34:98:27:86:9c:15:c8:c1:a4:6a:f6:51:d2:a3:8f:
5e:33:5c:3f:1c:a8:df:93:3a:32:f3:ab:5a:ef:39:
bf:d4:7c:f8:17:f7:36:bc:5a:03:63:80:e3:d3:3a:
bf:94:74:16:6b:a6:ac:e0:53:11:52:71:ca:53:b6:
8c:71:82:75:79:a6:ff:d2:7d:b4:a4:d7:b0:2c:bc:
89:37:eb:40:ba:af:22:0a:54:ea:4e:49:1a:94:23:
89:0b:8c:a3:6b:e9:52:3a:fa:2a:82:f0:56:86:95:
66:d6:cb:0e:df:27:13:0c:0b:2c:66:1a:5e:e7:b2:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:C7:02:64:63:81:B1:BF:10:8C:ED:9C:3C:30:2A:99:EE:94:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uCPHAmRjgbG_EIztnDwwKpnulDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0/24
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:c7:46:cb:45:e2:d9:38:3b:0f:a2:ff:73:e6:78:7b:01:
fb:6d:34:d8:75:25:86:78:f1:f8:60:ec:ff:91:b1:c9:de:22:
fc:21:92:f1:1f:76:56:56:a2:4e:46:86:bd:1d:66:f9:53:fc:
02:ff:c2:9c:7b:73:85:b9:18:4e:e2:89:9f:d8:16:40:67:98:
66:93:52:f3:55:ca:ac:6c:f7:45:b9:7d:29:b5:42:0b:a7:0f:
ae:ef:d8:08:64:04:67:8b:c5:2c:4d:ab:65:e9:85:24:49:95:
4d:3c:31:b8:15:4b:a7:b9:aa:02:d8:e0:92:b5:6b:71:14:91:
ba:40:58:51:d0:f6:05:b0:9a:3e:14:7f:85:ee:93:90:6f:b3:
99:7c:25:bb:57:72:33:62:af:d5:ca:6f:68:42:0e:3d:5c:1f:
41:61:9f:be:57:23:ca:30:b2:93:1f:cf:fe:45:aa:19:e2:46:
a5:b2:37:3c:3f:24:3a:48:4f:ed:e8:1c:01:68:2e:b9:27:66:
18:a2:a6:9b:0a:f9:54:1c:11:00:1b:05:c3:5e:0c:70:5e:80:
ab:7b:01:60:67:b2:16:65:fc:7c:a1:78:10:61:ba:24:06:49:
84:80:91:d1:ff:9f:ca:36:d5:68:87:a2:ff:d8:42:75:37:ff:
f9:39:4b:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRrbErvm070FGy+2Y7DGcqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE1MTkyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODIzYzcwMjY0NjM4MWIxYmYxMDhjZWQ5YzNjMzAyYTk5ZWU5NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1nE9e/6bvwXbJmdRmmh8lFDJZbz
cPX7BS9B6q0NY2y95jM/3c/QLKi0q1LNcNFTtNDN6gVEzYd2mI8ui+IW+jw+al5n
OO9GIkh5iFNwAvNYczhxMzGiNRamie/ctwqOPzAmv2C8Uebl7eQ8AFtXu/pVXVpI
HTpQfPbyMYqxoAw7ezpE3lw0mCeGnBXIwaRq9lHSo49eM1w/HKjfkzoy86ta7zm/
1Hz4F/c2vFoDY4Dj0zq/lHQWa6as4FMRUnHKU7aMcYJ1eab/0n20pNewLLyJN+tA
uq8iClTqTkkalCOJC4yja+lSOvoqgvBWhpVm1ssO3ycTDAssZhpe57IcBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLgjxwJkY4GxvxCM7Zw8MCqZ7pQ6MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdUNQSEFtUmpnYkdfRUl6dG5Ed3dLcG51bERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrRAwQA
JcrZMA0GCSqGSIb3DQEBCwUAA4IBAQB9VsdGy0Xi2Tg7D6L/c+Z4ewH7bTTYdSWG
ePH4YOz/kbHJ3iL8IZLxH3ZWVqJORoa9HWb5U/wC/8Kce3OFuRhO4omf2BZAZ5hm
k1LzVcqsbPdFuX0ptUILpw+u79gIZARni8UsTatl6YUkSZVNPDG4FUunuaoC2OCS
tWtxFJG6QFhR0PYFsJo+FH+F7pOQb7OZfCW7V3IzYq/Vym9oQg49XB9BYZ++VyPK
MLKTH8/+RaoZ4kalsjc8PyQ6SE/t6BwBaC65J2YYoqabCvlUHBEAGwXDXgxwXoCr
ewFgZ7IWZfx8oXgQYbokBkmEgJHR/5/KNtVoh6L/2EJ1N//5OUuz
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:10 2025 by rpki-client