Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzqB6_uRof34rRVXiXSKAmJX_gA.roa
File: FzqB6_uRof34rRVXiXSKAmJX_gA.roa (raw, json)
Hash identifier: Ftskmmo071J3coXgnvofcyxl/qsDxPtF4VIWUiP76BQ=
Subject key identifier: 17:3A:81:EB:FB:91:A1:FD:F8:AD:15:57:89:74:8A:02:62:57:FE:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194BD860D60A7C7C16454575DE1060C791A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzqB6_uRof34rRVXiXSKAmJX_gA.roa
Signing time: Fri 31 Jan 2025 18:01:06 +0000
ROA not before: Fri 31 Jan 2025 18:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:86:0d:60:a7:c7:c1:64:54:57:5d:e1:06:0c:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 31 18:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173a81ebfb91a1fdf8ad155789748a026257fe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:40:95:32:ff:9d:90:07:17:ce:bc:a0:80:
88:4e:86:92:0c:a1:2c:b1:63:70:bc:d1:1d:f8:f8:
28:10:c2:ef:c3:a8:1d:a6:e7:5d:9c:a5:46:60:30:
60:1a:c2:c5:a4:86:5a:0c:c1:e0:d8:c2:da:cb:97:
b9:71:e9:c6:84:55:0a:65:6a:43:fa:01:13:97:b9:
ca:70:ee:1f:53:06:32:0a:1b:f3:f8:02:0e:7e:35:
ca:d9:7b:0a:7f:9e:23:61:73:d9:0c:4e:6a:32:34:
59:85:b0:07:24:c8:79:01:33:79:89:02:64:71:8a:
c8:31:3b:2a:7f:f9:2d:20:08:79:e6:9e:41:92:16:
97:08:8b:d7:da:81:e0:72:4f:86:f1:f9:7e:6f:c0:
c9:e8:1e:2e:80:6a:8b:91:42:74:ce:fa:9f:5d:d1:
95:78:22:84:74:4f:5c:92:15:e2:16:98:59:92:cd:
17:cd:cf:70:09:af:7f:8e:ef:5d:da:74:ca:3f:c9:
ce:a8:12:33:fb:c3:7c:2f:04:ef:67:58:76:b5:ce:
e0:8f:7b:76:0f:26:5e:7d:76:cd:f8:eb:b4:1e:2e:
fb:ee:0c:ac:79:3d:2b:e2:d1:41:1b:b0:11:30:62:
d1:47:ce:28:1c:a7:98:94:d4:43:96:b2:52:c1:26:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:81:EB:FB:91:A1:FD:F8:AD:15:57:89:74:8A:02:62:57:FE:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FzqB6_uRof34rRVXiXSKAmJX_gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
151.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
64:76:ef:41:9c:85:80:65:3b:2c:5f:6a:c1:42:17:da:82:2f:
4e:35:7a:ad:4e:6c:d1:e9:64:a5:2e:c8:eb:a0:07:7c:2a:a4:
99:fb:12:e0:23:0a:ba:8d:2f:fb:4f:fb:d8:69:9c:c8:f9:0b:
36:ee:3b:91:27:53:59:eb:3d:91:f2:f8:94:d3:28:72:34:ea:
67:5a:df:4a:1b:c0:7b:37:e3:80:78:ae:bd:5c:b8:20:90:41:
06:1d:3d:1f:8f:c8:7f:44:ec:df:17:6f:16:66:71:94:9e:ba:
97:9b:ae:e5:4a:df:c2:8f:00:3f:fa:12:12:68:bb:78:73:28:
d1:73:31:f6:2c:90:39:1a:53:f2:90:cc:3a:7b:a1:40:24:13:
17:67:7c:5f:35:3c:f4:cc:4e:36:ad:3b:36:01:b8:f7:bb:d6:
c1:6c:59:61:5f:95:44:9b:5f:89:1a:5b:07:f6:29:92:95:c2:
b8:a2:b7:78:e7:00:f2:7b:36:4a:1c:f7:28:6d:0c:86:8a:84:
88:70:eb:13:2a:aa:14:a9:d1:1f:ae:ee:5b:99:85:4f:b3:7e:
96:47:58:44:0d:b9:3c:5b:28:bb:70:fd:84:7c:22:bd:e3:1c:
40:54:26:ee:6a:d2:ed:57:99:89:ec:6b:17:60:e5:d5:41:1c:
af:6b:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:17 2025 by rpki-client