Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SCV855TvX2lQXQIxm_MPvEvsFHc.roa
File: SCV855TvX2lQXQIxm_MPvEvsFHc.roa (raw, json)
Hash identifier: sltUwSF6UfuRl0mR8/enzFSwacyThXe6Vq8GTGAkyqY=
Subject key identifier: 48:25:7C:E7:94:EF:5F:69:50:5D:02:31:9B:F3:0F:BC:4B:EC:14:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195B9394873AA33A046C9A86D150C997C02
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SCV855TvX2lQXQIxm_MPvEvsFHc.roa
Signing time: Fri 21 Mar 2025 15:01:33 +0000
ROA not before: Fri 21 Mar 2025 15:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:39:48:73:aa:33:a0:46:c9:a8:6d:15:0c:99:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 15:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48257ce794ef5f69505d02319bf30fbc4bec1477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:7b:06:82:80:af:ee:39:2e:b4:94:73:d8:
99:84:1a:63:f2:a9:7b:77:79:c4:aa:e8:fd:9a:94:
8b:ef:7a:1f:53:d2:03:88:2f:6e:b3:41:14:46:39:
e7:d0:fe:36:13:68:fd:68:b5:10:b8:75:65:10:91:
44:59:06:13:f4:d5:48:85:13:9b:bd:4c:0b:fe:50:
ff:d7:e3:5d:7f:85:cf:90:9e:68:25:d5:9a:51:72:
b9:5c:10:e8:9b:e2:17:c7:9c:74:c4:f7:44:8f:ee:
bc:ec:49:f4:82:92:4d:8d:71:3d:84:12:22:0f:1d:
8d:4e:73:ce:e5:be:0c:cb:24:3b:03:03:4e:c4:ec:
df:2d:e0:44:f7:92:6c:0d:6e:79:9a:46:ae:45:b5:
76:66:0e:70:8e:cb:3a:44:3e:ff:2c:40:44:e3:15:
d4:77:00:dd:41:fc:c7:12:58:9c:53:a4:a3:15:4a:
8e:3f:96:7c:2b:5d:4b:cc:17:38:82:b9:0f:b2:af:
0a:48:36:53:3e:67:41:1e:51:7b:71:ae:96:09:e4:
63:09:67:26:25:65:00:0e:a0:be:57:15:01:7b:66:
95:55:88:c4:47:5c:2c:fd:f5:a3:24:bf:9e:8a:f0:
59:95:0d:32:47:b7:4d:a1:71:10:5a:3d:c5:0f:e2:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:7C:E7:94:EF:5F:69:50:5D:02:31:9B:F3:0F:BC:4B:EC:14:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SCV855TvX2lQXQIxm_MPvEvsFHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
141.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:b4:03:91:92:dc:05:8c:b6:67:58:4a:64:1e:18:a5:19:
ac:d7:8c:93:7b:48:99:6e:b0:25:92:1c:92:3b:95:98:ce:36:
e2:1b:2c:a4:2e:b6:a2:fb:ac:b9:a3:d9:20:07:3c:40:8e:7d:
62:25:10:6d:9d:b6:a5:c4:39:96:7d:3c:47:45:0a:0c:0c:99:
85:42:18:c6:c9:9c:4c:41:28:08:41:76:9b:64:3b:a3:09:d1:
11:df:a2:2a:7a:1f:b8:c4:ec:98:3d:42:f5:8f:24:e3:aa:1f:
10:2e:64:21:c9:47:1d:69:a0:7e:e8:66:2d:4f:4e:e9:3f:79:
1b:09:2c:cb:f7:5a:21:42:ef:2c:0e:b5:a1:d4:11:fb:70:c2:
15:a6:8b:0f:48:1c:40:ee:b4:ed:1e:7c:c4:9c:20:be:d2:cf:
64:16:2f:fd:8c:a3:c0:c5:79:a5:08:20:c6:81:3a:93:c2:50:
ea:57:0d:3e:9f:5d:38:b0:b5:55:43:96:cd:21:69:b2:be:ee:
70:34:70:e0:a0:c7:09:22:81:84:be:a7:8f:75:83:28:f7:28:
98:0d:42:22:e9:f9:4d:be:74:77:2f:fc:3c:ac:b0:5a:93:15:
05:8a:2d:80:32:cb:f1:b2:9a:a0:99:84:5c:af:9e:11:9d:36:
c3:f6:73:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZW5OUhzqjOgRsmobRUMmXwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzIxMTUwMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODI1N2NlNzk0ZWY1ZjY5NTA1ZDAyMzE5YmYzMGZiYzRiZWMxNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso57BoKAr+45LrSUc9iZhBpj8ql7
d3nEquj9mpSL73ofU9IDiC9us0EURjnn0P42E2j9aLUQuHVlEJFEWQYT9NVIhROb
vUwL/lD/1+Ndf4XPkJ5oJdWaUXK5XBDom+IXx5x0xPdEj+687En0gpJNjXE9hBIi
Dx2NTnPO5b4MyyQ7AwNOxOzfLeBE95JsDW55mkauRbV2Zg5wjss6RD7/LEBE4xXU
dwDdQfzHElicU6SjFUqOP5Z8K11LzBc4grkPsq8KSDZTPmdBHlF7ca6WCeRjCWcm
JWUADqC+VxUBe2aVVYjER1ws/fWjJL+eivBZlQ0yR7dNoXEQWj3FD+LhXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEglfOeU719pUF0CMZvzD7xL7BR3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU0NWODU1VHZYMmxRWFFJeG1fTVB2RXZzRkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXsnAwQA
jWIGMA0GCSqGSIb3DQEBCwUAA4IBAQAF6LQDkZLcBYy2Z1hKZB4YpRms14yTe0iZ
brAlkhySO5WYzjbiGyykLrai+6y5o9kgBzxAjn1iJRBtnbalxDmWfTxHRQoMDJmF
QhjGyZxMQSgIQXabZDujCdER36Iqeh+4xOyYPUL1jyTjqh8QLmQhyUcdaaB+6GYt
T07pP3kbCSzL91ohQu8sDrWh1BH7cMIVposPSBxA7rTtHnzEnCC+0s9kFi/9jKPA
xXmlCCDGgTqTwlDqVw0+n104sLVVQ5bNIWmyvu5wNHDgoMcJIoGEvqePdYMo9yiY
DUIi6flNvnR3L/w8rLBakxUFii2AMsvxspqgmYRcr54RnTbD9nPu
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:00 2025 by rpki-client