Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kNrj1LvxsynYOuvCoAhDIuQxUto.roa
File: kNrj1LvxsynYOuvCoAhDIuQxUto.roa (raw, json)
Hash identifier: XUBcUdCDieKZDVdsUhzgULrejwyumFAfBZuig24ArPw=
Subject key identifier: 90:DA:E3:D4:BB:F1:B3:29:D8:3A:EB:C2:A0:08:43:22:E4:31:52:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196151798CD652EDF7DC1AC13582376B7D1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kNrj1LvxsynYOuvCoAhDIuQxUto.roa
Signing time: Tue 08 Apr 2025 11:09:50 +0000
ROA not before: Tue 08 Apr 2025 11:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.242.9.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.166.0/23 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.80.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:17:98:cd:65:2e:df:7d:c1:ac:13:58:23:76:b7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 11:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90dae3d4bbf1b329d83aebc2a0084322e43152da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:64:2b:3f:e5:e9:41:2c:c0:5c:45:6b:49:
6f:06:b8:e4:48:d0:a7:27:d4:09:4e:a2:4a:65:88:
94:27:25:bc:ed:31:ed:b6:5e:0a:e0:ef:ac:76:03:
e8:4e:81:45:30:a9:63:0f:ad:b7:60:6c:ea:08:92:
41:c8:34:7f:ce:4f:48:f7:72:ee:93:7e:17:3f:02:
cf:94:36:63:d3:3b:97:5a:00:1c:11:71:ac:55:e6:
9c:8c:25:7f:ba:52:ec:21:f6:99:7a:5b:ee:11:57:
d5:4d:1e:07:98:c1:c1:4e:22:d9:b6:8c:15:2b:90:
8c:f9:e0:b0:70:46:28:92:1b:19:cc:59:25:09:22:
e2:b1:98:98:fa:21:9d:d0:f9:7c:50:a2:1b:15:fb:
5c:ca:fc:f1:23:fb:05:ee:10:76:79:4e:fd:3a:4e:
e7:99:0c:2d:90:41:e6:31:19:8e:ad:df:e2:24:c1:
2f:b8:b0:2e:c2:cd:f3:3f:bb:e9:33:ab:82:20:f2:
42:19:a7:5f:59:69:62:a2:71:af:c4:73:46:0f:a9:
b3:37:b4:60:43:81:23:47:e3:50:de:92:71:48:2a:
d9:da:69:90:37:ad:2a:2a:8c:9c:c1:59:24:4c:29:
1d:16:06:97:9d:25:9a:e6:9b:63:c0:9e:3a:85:ac:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:E3:D4:BB:F1:B3:29:D8:3A:EB:C2:A0:08:43:22:E4:31:52:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kNrj1LvxsynYOuvCoAhDIuQxUto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.242.9.0/24
151.242.13.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.64.0/24
151.242.121.0/24
151.242.166.0/23
151.243.57.0/24
151.243.80.0/24
151.243.140.0/24
151.243.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:12:6d:7f:c0:a5:2e:0b:3f:a4:40:6b:7e:e7:d8:21:d8:ac:
60:8a:bc:5c:5f:14:ce:64:69:f0:89:9f:3c:fa:ed:91:70:64:
77:4f:92:7b:68:31:83:0b:a4:1c:88:8f:92:6a:50:c0:c6:ad:
0d:48:63:f7:b4:28:e1:26:e5:ca:9e:3a:d0:4b:7d:9e:2e:26:
0f:29:0d:6c:0c:4a:f0:3b:dc:c6:0a:d4:b6:a4:9c:82:e9:30:
87:45:46:fc:64:6f:6f:2c:f2:87:30:86:87:92:f4:41:9b:cd:
a3:04:dc:06:28:75:2b:2b:08:4e:c0:1a:9d:69:73:bd:d3:39:
64:76:9a:c6:71:6e:6b:4c:be:24:6d:1a:f1:f5:96:55:03:e2:
47:52:80:60:d1:4f:68:be:73:c7:75:9d:20:a8:5b:d7:6d:b2:
64:4f:98:ca:32:e0:af:71:b9:75:c7:53:aa:a4:80:94:41:5f:
82:f1:64:18:0a:46:11:f8:d1:f3:e9:85:3f:ec:5c:c5:20:23:
ef:e8:ec:09:e8:ae:cb:5d:ab:4a:04:0c:b6:89:ab:bb:5d:4f:
02:5d:ea:03:cf:e0:90:0d:c7:5f:d6:b6:75:12:9f:37:1b:ca:
7c:6a:9f:fe:b4:7a:7e:db:a9:bc:37:fa:fa:f8:06:e4:81:1a:
d3:37:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net