Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vscSs7hcUOvRnN_3vEGBw6WGCgM.roa
File: vscSs7hcUOvRnN_3vEGBw6WGCgM.roa (raw, json)
Hash identifier: hVg+AmTXaJ8Ju8t8Rm13Rr8j/JRPFDSUmhMlq7UiBak=
Subject key identifier: BE:C7:12:B3:B8:5C:50:EB:D1:9C:DF:F7:BC:41:81:C3:A5:86:0A:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193E3A68028151D0FD3224CED362A8BD148
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vscSs7hcUOvRnN_3vEGBw6WGCgM.roa
Signing time: Fri 20 Dec 2024 10:39:20 +0000
ROA not before: Fri 20 Dec 2024 10:39:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.204.0/24 maxlen: 24
37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:a6:80:28:15:1d:0f:d3:22:4c:ed:36:2a:8b:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 20 10:39:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec712b3b85c50ebd19cdff7bc4181c3a5860a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:f9:59:6e:0b:12:c3:bd:67:14:41:b7:9f:
c1:7b:18:0d:50:0a:18:8f:4d:bb:8e:29:be:50:ee:
9f:e7:d6:7e:48:54:a4:1b:d4:75:10:4e:38:72:41:
a9:14:f3:10:5c:e9:3a:79:5b:bf:1d:e0:5c:41:4c:
c9:7c:f4:78:ed:a5:b5:cb:92:1f:28:c5:8f:41:b8:
33:45:68:63:f3:a4:53:f0:6e:40:b3:85:78:62:32:
26:84:b4:c5:13:88:0b:34:05:a0:3a:e4:38:de:6f:
15:21:73:0b:33:c7:e8:21:93:43:87:2e:13:a8:48:
bb:41:10:68:4b:66:f3:b6:7d:23:c0:da:97:2b:b5:
3b:32:e6:92:82:31:15:53:0c:a1:d4:4b:e0:4b:2c:
ca:3d:c9:e2:93:c7:87:96:c0:ab:66:b4:d5:cb:af:
73:e3:63:ed:3a:36:d8:17:3f:77:2c:f5:df:d1:bb:
e6:c5:6b:53:40:77:0b:af:a0:82:8b:67:fe:79:2e:
d8:55:02:0f:86:77:ac:65:ae:7a:83:ce:88:23:f3:
d7:8f:6c:af:60:a5:a4:04:af:cb:dd:f3:37:e2:50:
b9:0a:fb:ef:da:09:97:d5:30:bf:15:84:6e:d7:38:
c1:3f:c5:8b:ed:09:b8:60:bd:35:d4:01:7b:c8:19:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:12:B3:B8:5C:50:EB:D1:9C:DF:F7:BC:41:81:C3:A5:86:0A:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vscSs7hcUOvRnN_3vEGBw6WGCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.204.0/23
37.202.208.0-37.202.210.255
37.202.212.0/23
151.243.137.0/24
151.243.162.0/24
151.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7b:89:8b:d5:af:e9:95:56:33:80:65:3b:f8:54:56:3e:28:
4e:0e:fd:07:79:69:58:f6:40:96:ee:c7:09:58:5a:3b:85:0b:
24:bf:a0:02:fb:95:d5:7b:54:57:a1:76:4c:53:ec:fd:51:25:
16:5c:32:77:fa:7d:0c:f4:b1:2f:d6:93:38:8c:f3:f5:06:bd:
73:16:26:1b:f4:83:b5:21:16:52:da:40:48:d5:19:80:9e:82:
06:5f:25:e1:d0:9d:34:f9:87:ac:84:e0:ee:a8:8d:ba:42:ae:
d7:67:5b:fa:21:da:2a:46:c0:34:82:b8:2c:ed:5d:f5:ea:76:
b1:04:71:b0:95:ea:67:50:8d:06:71:87:03:e4:c4:cf:04:d7:
cb:71:b8:70:5d:7d:c2:37:17:56:21:c2:62:e5:c7:d6:c2:08:
1c:04:f1:72:f5:ac:f6:35:ba:d9:aa:4f:4b:a8:3b:d1:17:c0:
41:ef:7f:d2:fc:60:6a:42:72:74:7f:70:18:2d:00:74:2c:22:
a2:c5:56:cd:f7:7e:c7:43:fb:99:b8:02:b3:55:40:03:03:d7:
a5:ec:80:20:5c:98:75:cd:d9:88:d2:26:0e:b9:d7:75:7a:c3:
70:2f:ba:fb:9b:87:e8:4c:0e:13:d5:c1:b9:f0:3b:a6:dc:6b:
13:8f:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:54:58 2025 by rpki-client