Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhzk9lyUaG4oGAVULWTWUSH9eOw.roa
File: uhzk9lyUaG4oGAVULWTWUSH9eOw.roa (raw, json)
Hash identifier: l+a2OTytKBohiSfvSzjduY6aQXiQBW/9SRBrDaGXsoo=
Subject key identifier: BA:1C:E4:F6:5C:94:68:6E:28:18:05:54:2D:64:D6:51:21:FD:78:EC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019504A81083FB2BD5F35018EAE9B02A222B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhzk9lyUaG4oGAVULWTWUSH9eOw.roa
Signing time: Fri 14 Feb 2025 13:31:17 +0000
ROA not before: Fri 14 Feb 2025 13:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.72.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:a8:10:83:fb:2b:d5:f3:50:18:ea:e9:b0:2a:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 14 13:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba1ce4f65c94686e281805542d64d65121fd78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:04:f1:a1:8d:be:70:0d:2c:fa:7e:fe:fd:
4e:ae:2d:80:84:d0:8a:69:7d:4e:af:d1:0b:29:a2:
a0:13:f3:49:d3:ac:76:13:dd:7d:d2:e0:a5:9e:11:
f6:67:74:11:e8:ac:31:4a:0e:08:e2:73:be:86:3a:
b0:08:19:33:d9:5a:9d:34:aa:dd:3d:de:2d:c8:06:
87:1a:c6:3a:08:7d:78:b7:77:a8:3b:06:33:6b:ff:
21:bb:37:cc:d9:3e:b4:e3:ce:ed:6f:4e:1c:25:8f:
5b:af:d0:49:09:74:8a:cf:1b:65:ab:b1:5f:4e:1c:
de:61:e9:f5:dd:86:1b:cf:58:27:83:fd:21:dd:3b:
57:c4:07:d0:d7:aa:11:57:31:a2:50:1b:d7:1d:dc:
9c:b1:72:e1:c3:d2:b9:29:91:ab:8e:1a:17:fa:85:
fe:29:d0:79:b6:35:f4:52:bd:df:57:0e:22:3e:de:
d4:8f:fd:c6:a9:23:43:dd:9a:90:70:44:00:d2:69:
37:50:67:3d:15:9a:67:14:94:81:85:eb:bd:9b:9c:
16:c4:e6:79:06:18:a8:cd:af:3f:02:ed:48:31:b0:
53:b2:4f:a0:c3:d6:a4:20:3b:21:e3:68:90:7f:fb:
41:16:6c:4e:97:30:d0:50:8a:3b:cf:6a:ed:fb:7f:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:E4:F6:5C:94:68:6E:28:18:05:54:2D:64:D6:51:21:FD:78:EC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhzk9lyUaG4oGAVULWTWUSH9eOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0-151.242.72.255
151.243.107.0-151.243.110.255
151.243.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6d:b3:db:ac:52:d7:b5:3a:34:04:9d:63:60:5f:1c:70:6e:
20:21:e6:c8:0f:fe:df:a9:86:c9:a7:79:a2:70:8b:dd:89:f7:
0d:05:61:9f:d8:e2:dd:16:84:f7:fe:d3:4a:f5:d9:e0:78:1c:
63:93:ee:1c:28:f9:1a:a4:65:fc:32:f6:b3:7b:30:b3:08:99:
a7:d3:d7:7c:03:c9:e8:c4:6f:f1:5e:16:06:b6:f1:df:95:cb:
12:b4:97:ce:de:0e:73:d3:53:1a:36:cd:10:dd:56:f8:05:4e:
38:8d:e5:27:19:5e:04:b4:7e:91:11:1c:42:ea:f6:12:96:7c:
95:58:73:c4:2a:2d:f4:c8:f0:5e:fc:65:ef:3d:17:28:09:1b:
71:0e:23:60:5a:a1:c4:6b:82:72:40:6a:8d:c9:54:0d:2f:a6:
6e:e5:9d:2c:a4:d0:98:30:59:31:97:ca:ea:cf:01:fa:dc:62:
80:c4:34:c9:bd:27:91:ad:c0:44:48:42:43:5e:25:f1:5b:e0:
5c:32:0f:c4:8f:07:f6:61:c7:ef:3d:74:a4:fa:c6:31:46:8e:
02:03:90:c7:01:a1:da:71:e4:09:9f:5c:d5:ce:68:4e:c9:31:
cb:00:6e:7b:79:16:e7:d7:ee:b2:55:8b:20:9d:23:11:45:1d:
27:b3:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:11 2025 by rpki-client