Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/sGMmHuejSMxnvYle1EwKk7ibCFs.roa
File: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (raw, json)
Hash identifier: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=
Subject key identifier: B0:63:26:1E:E7:A3:48:CC:67:BD:89:5E:D4:4C:0A:93:B8:9B:08:5B
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01941FFAA37F3B080010A301611D8BCE45B2
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/sGMmHuejSMxnvYle1EwKk7ibCFs.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.12.0/24 maxlen: 24
141.93.16.0/22 maxlen: 24
141.93.16.0/24 maxlen: 24
141.93.17.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.25.0/24 maxlen: 24
141.93.28.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:7f:3b:08:00:10:a3:01:61:1d:8b:ce:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b063261ee7a348cc67bd895ed44c0a93b89b085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:9b:a2:b1:5c:d2:ad:3a:38:25:dd:f5:a6:
e6:cd:17:5f:11:aa:52:3c:26:a1:fb:4f:24:d4:93:
61:1d:a9:5c:e3:3a:ff:c0:f8:d4:f6:b8:c7:08:de:
2d:17:5b:27:ab:57:52:b5:7f:a4:2f:1f:df:fb:db:
f9:34:21:9d:7f:8d:99:fc:a5:6c:0b:08:11:33:b7:
64:a6:61:4c:1b:dd:0f:4b:ce:d5:16:be:5f:77:1e:
ca:6d:d7:39:9d:d4:42:35:4d:62:c8:09:0a:93:19:
a8:41:d9:fc:ca:28:79:bb:a7:61:db:5f:d4:b5:7d:
71:87:ae:10:24:d2:d7:f6:dd:3c:ec:4e:1a:7f:d1:
98:dd:70:a5:0c:71:ec:4d:6d:ab:0d:07:36:3a:19:
d6:70:26:cd:58:c5:66:31:ba:ce:a2:02:f3:d2:dc:
f4:27:86:3e:81:6f:69:2d:bd:86:5c:ac:9d:60:7e:
a7:d8:42:43:2a:9f:06:cc:5e:93:70:f1:bd:0b:ba:
31:d9:af:0d:bb:94:dd:3d:59:18:56:0a:9a:63:21:
72:9a:1f:e5:1d:d8:19:65:8e:ba:12:96:26:42:62:
b7:84:c6:bc:38:c9:a6:ec:aa:8b:ce:06:be:e5:1d:
22:3e:33:fe:db:6e:e9:15:22:ab:a3:24:b2:b6:16:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:26:1E:E7:A3:48:CC:67:BD:89:5E:D4:4C:0A:93:B8:9B:08:5B
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/sGMmHuejSMxnvYle1EwKk7ibCFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.12.0/24
141.93.16.0/22
141.93.25.0/24
141.93.28.0/24
141.93.32.0/24
141.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:16:cf:14:21:c2:f8:85:a4:ab:93:e8:50:06:db:1c:8e:e9:
01:41:1a:74:df:68:8e:44:00:dc:16:97:f2:76:3e:93:a3:ba:
c5:6f:0e:67:d0:18:79:fc:2e:67:b8:9f:f1:c5:bf:17:ed:89:
0c:91:c4:31:8b:fe:d3:a5:f2:67:7d:23:d0:3c:47:3b:c9:39:
3b:e1:71:f7:9e:3e:da:b7:15:8f:c8:c4:c6:06:0c:07:f5:3d:
19:03:3b:48:04:ed:29:62:ed:18:d0:08:c6:17:61:5b:fa:ee:
b7:e8:8c:89:51:8e:f5:92:dd:6a:15:10:07:f9:69:85:e2:24:
d6:f9:bc:cc:fa:e3:d8:d2:ef:48:5b:ca:d3:6e:13:bf:99:7e:
e7:37:cd:e8:08:de:ae:46:01:34:55:01:63:03:53:c7:95:06:
84:1d:35:76:b7:ca:e3:a6:69:19:ef:cd:25:f1:7a:d3:a8:cb:
bb:22:5d:81:60:31:54:19:07:05:6d:f8:82:e9:25:1f:7a:45:
62:2c:14:55:95:f3:2e:90:61:f2:74:e8:27:88:eb:26:a4:21:
d2:fd:4f:e6:54:10:5e:ce:d1:2b:80:f4:92:92:21:ac:ec:da:
32:d0:3a:eb:d9:af:b4:7a:6b:a4:13:0f:54:6a:58:e5:60:0e:
4c:b3:63:fd
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQf+qN/OwgAEKMBYR2LzkWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDYzMjYxZWU3YTM0OGNjNjdiZDg5NWVkNDRjMGE5M2I4OWIwODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLmborFc0q06OCXd9abmzRdfEapS
PCah+08k1JNhHalc4zr/wPjU9rjHCN4tF1snq1dStX+kLx/f+9v5NCGdf42Z/KVs
CwgRM7dkpmFMG90PS87VFr5fdx7Kbdc5ndRCNU1iyAkKkxmoQdn8yih5u6dh21/U
tX1xh64QJNLX9t087E4af9GY3XClDHHsTW2rDQc2OhnWcCbNWMVmMbrOogLz0tz0
J4Y+gW9pLb2GXKydYH6n2EJDKp8GzF6TcPG9C7ox2a8Nu5TdPVkYVgqaYyFymh/l
HdgZZY66EpYmQmK3hMa8OMmm7KqLzga+5R0iPjP+227pFSKroySythYJQwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLBjJh7no0jMZ72JXtRMCpO4mwhbMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvc0dNbUh1ZWpTTXhudllsZTFFd0trN2liQ0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjV0MAwQC
jV0QAwQAjV0ZAwQAjV0cAwQAjV0gAwQAjV0jMA0GCSqGSIb3DQEBCwUAA4IBAQB+
Fs8UIcL4haSrk+hQBtscjukBQRp032iORADcFpfydj6To7rFbw5n0Bh5/C5nuJ/x
xb8X7YkMkcQxi/7TpfJnfSPQPEc7yTk74XH3nj7atxWPyMTGBgwH9T0ZAztIBO0p
Yu0Y0AjGF2Fb+u636IyJUY71kt1qFRAH+WmF4iTW+bzM+uPY0u9IW8rTbhO/mX7n
N83oCN6uRgE0VQFjA1PHlQaEHTV2t8rjpmkZ780l8XrTqMu7Il2BYDFUGQcFbfiC
6SUfekViLBRVlfMukGHydOgniOsmpCHS/U/mVBBeztErgPSSkiGs7Noy0Drr2a+0
emukEw9UaljlYA5Ms2P9
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:10:01 2025 by rpki-client