Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v86ntp16toiGXqSDa9aV0TW-8F4.roa
File: v86ntp16toiGXqSDa9aV0TW-8F4.roa (raw, json)
Hash identifier: BNft1GtMD2US+6AQasTa8Hw75lW9Kw3fvVEIhgth+48=
Subject key identifier: BF:CE:A7:B6:9D:7A:B6:88:86:5E:A4:83:6B:D6:95:D1:35:BE:F0:5E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193BEC2DFACEA60D1154B313689C8BF406D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v86ntp16toiGXqSDa9aV0TW-8F4.roa
Signing time: Fri 13 Dec 2024 06:44:22 +0000
ROA not before: Fri 13 Dec 2024 06:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.204.0/24 maxlen: 24
37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:c2:df:ac:ea:60:d1:15:4b:31:36:89:c8:bf:40:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 13 06:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcea7b69d7ab688865ea4836bd695d135bef05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:6c:e0:e8:8b:3a:8e:8f:a9:46:05:01:a7:
81:f5:a3:d6:f1:1d:0a:6c:a9:36:1f:0d:25:4e:6d:
0b:63:8e:8f:f9:32:7f:38:52:62:ef:0f:25:c0:5e:
cd:83:9d:9e:18:be:a6:e6:68:d8:a9:12:02:3f:70:
bb:e4:38:65:bc:f7:19:c9:b5:e9:22:23:87:a9:fa:
89:8b:fc:3b:00:15:05:c8:8b:44:bf:6a:3d:6f:78:
5f:29:e4:1a:8a:38:06:e5:25:bb:7b:7a:16:75:1d:
8a:41:4a:d0:87:bb:bd:8e:a0:7b:90:bc:37:a7:6d:
a1:10:f8:d3:10:1a:31:04:11:b9:64:70:23:e5:ab:
2e:3f:c3:56:90:d6:1e:2b:51:be:a6:ca:45:86:00:
36:ec:e1:c6:cb:ed:98:14:69:02:52:d9:be:e9:1f:
7f:42:5b:ab:6b:95:a8:77:71:f6:b4:8e:98:9b:3c:
0e:9f:8c:b0:70:9d:64:50:7c:27:0b:64:9f:98:30:
e4:17:30:b1:20:7e:97:a1:66:55:4e:35:21:a4:81:
94:09:4b:f2:4e:03:b9:b6:b9:89:2d:02:aa:70:85:
61:48:27:8b:2f:be:b7:68:b8:92:d2:11:cd:20:0a:
90:38:a4:20:1e:64:94:c6:db:d5:05:85:14:47:d4:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:A7:B6:9D:7A:B6:88:86:5E:A4:83:6B:D6:95:D1:35:BE:F0:5E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v86ntp16toiGXqSDa9aV0TW-8F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.204.0/23
37.202.208.0-37.202.210.255
37.202.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:d1:1f:ef:d0:2e:1e:01:fe:4f:30:e6:e9:40:5f:c3:d6:f7:
e0:e5:21:29:ca:0e:3e:c4:f1:62:cb:85:91:44:1c:b9:a7:3a:
fc:7f:20:8f:9b:af:58:64:77:4f:63:0a:9e:e8:99:f5:3c:06:
cf:1d:bf:d9:ba:30:e9:4b:f4:30:95:74:d3:68:35:39:ec:09:
e8:f6:20:8a:ff:6a:94:bd:60:cd:7a:12:80:1d:69:e8:0e:20:
9c:81:93:7b:18:47:c2:30:52:d8:cf:79:d3:f2:b8:5f:d0:6f:
aa:66:a4:ed:64:a2:ab:0a:a9:b1:50:ba:16:df:66:d5:d6:21:
c2:ee:87:54:f3:eb:04:9b:b6:3d:12:f8:c5:db:60:f0:20:af:
c3:0a:d5:09:e6:91:01:12:69:f6:9e:ad:de:89:3f:72:32:7d:
76:f3:54:a5:18:1a:3a:d6:d9:f6:0b:5b:4e:36:fd:b0:4a:c6:
98:32:66:8b:52:5c:65:56:fc:78:68:e6:cc:42:03:27:51:9d:
5a:48:69:09:21:46:77:a2:66:c2:be:02:8f:e8:ec:0e:d7:31:
de:8a:9c:bf:be:f4:0f:9d:2d:d3:fa:43:a8:aa:aa:4a:94:b8:
75:1a:be:8e:10:49:97:2e:cf:2a:d0:1a:65:dd:5b:54:bf:80:
04:b3:19:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:52 2025 by rpki-client