Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_ycsCb9Pwt3Y-c-xhsSaSkvZyI.roa
File: 4_ycsCb9Pwt3Y-c-xhsSaSkvZyI.roa (raw, json)
Hash identifier: x42WRlVowDtmIzhZh7tdMLeezEApEZ0rZCkkIUn41rQ=
Subject key identifier: E3:FC:9C:B0:26:FD:3F:0B:77:63:E7:3E:C6:1B:12:69:29:2F:67:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196210844C1381F14B61897636C6E1F89CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_ycsCb9Pwt3Y-c-xhsSaSkvZyI.roa
Signing time: Thu 10 Apr 2025 18:48:32 +0000
ROA not before: Thu 10 Apr 2025 18:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:08:44:c1:38:1f:14:b6:18:97:63:6c:6e:1f:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 18:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3fc9cb026fd3f0b7763e73ec61b1269292f6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:67:7b:6a:0e:82:9d:07:7f:a1:3c:0d:ec:
89:6c:6b:d5:d5:e8:62:a6:5f:74:45:19:93:50:d8:
25:2c:a9:3d:85:4b:60:24:c6:44:f0:0d:0a:93:15:
36:aa:bc:14:84:14:df:70:40:3e:36:b2:94:a2:2a:
9a:c8:38:c3:f2:c2:e9:3d:a5:e9:64:c2:e5:3e:fb:
a5:6b:17:f5:f9:55:3f:71:f8:bc:93:04:9d:cd:a3:
7f:0a:23:75:2d:1c:c1:bb:57:1b:bf:e7:74:00:ce:
0b:e5:47:00:60:47:a0:18:27:3b:80:45:2e:6a:75:
bf:1a:63:2b:00:fa:11:e8:39:a8:e5:48:ba:ad:7a:
3c:d0:be:35:6a:5b:61:f8:b4:dd:22:2f:5d:e2:36:
14:eb:51:08:ac:9d:69:96:68:63:ce:9b:f8:52:a4:
be:7e:33:5c:21:0d:9c:92:6a:e5:55:48:a3:60:06:
0c:50:31:a8:c3:4b:75:82:60:ae:36:af:94:c6:56:
4e:cd:18:66:32:b8:e5:d3:98:c9:64:a0:eb:af:15:
f6:71:dc:19:16:99:0b:93:43:b5:3e:f7:f3:1a:2c:
9b:85:15:fa:65:2f:db:59:89:48:9e:de:7d:32:db:
44:ac:ff:da:35:b7:93:5e:bc:58:e7:fe:48:c6:f7:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:9C:B0:26:FD:3F:0B:77:63:E7:3E:C6:1B:12:69:29:2F:67:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_ycsCb9Pwt3Y-c-xhsSaSkvZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.3.0/24
151.240.110.0/24
151.242.33.0/24
151.243.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:df:ba:78:b1:90:f8:3a:50:4b:52:36:15:ed:75:ec:4e:78:
44:c8:4b:3f:9a:60:53:99:08:82:f0:30:e1:20:be:00:96:5d:
3d:41:aa:2d:18:91:db:99:03:a6:5e:99:5d:e4:6a:41:e6:b0:
01:9b:0a:03:8c:53:75:10:91:6b:b1:d6:a2:41:6d:fe:be:a8:
78:a2:60:9e:09:34:ad:b2:bd:46:80:e1:be:bb:06:0c:01:fc:
e8:d5:8b:6d:5f:a9:2a:c3:b1:65:f6:30:ff:f1:49:92:a8:ea:
69:6b:af:2c:0b:24:49:2d:62:1a:7b:bd:a9:b1:26:35:23:91:
36:65:59:0f:48:9a:62:7f:59:aa:8e:e6:9a:fc:f5:63:1d:0d:
16:f2:c3:86:58:ff:4d:5f:15:0c:ce:99:78:0f:10:55:05:6c:
7f:c1:10:d9:ac:8f:a9:c1:bc:5d:4b:89:a5:03:93:94:40:d4:
06:a1:45:54:b4:51:56:33:0a:2b:b0:70:41:f4:82:6b:de:bf:
bd:a5:9e:a8:b9:75:a2:d3:91:0d:0b:05:fa:0f:78:ba:8e:f5:
16:73:f0:af:31:a1:44:37:88:16:b5:eb:73:fd:b2:18:f6:48:
22:d2:b0:22:3b:fc:71:a4:87:d8:fa:8d:5b:23:1d:5f:2a:be:
d8:a8:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net