Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SFx-xf0zllGHLkGXQJGCkEqUpk4.roa
File: SFx-xf0zllGHLkGXQJGCkEqUpk4.roa (raw, json)
Hash identifier: jj40vupvKgZZJ3P7LGSy5A7NHDiGjj6EXifWsDMFRn8=
Subject key identifier: 48:5C:7E:C5:FD:33:96:51:87:2E:41:97:40:91:82:90:4A:94:A6:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195DBD8C0E8CD06BDE288F0F37D7ECA46CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SFx-xf0zllGHLkGXQJGCkEqUpk4.roa
Signing time: Fri 28 Mar 2025 08:22:50 +0000
ROA not before: Fri 28 Mar 2025 08:22:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.13.211.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:d8:c0:e8:cd:06:bd:e2:88:f0:f3:7d:7e:ca:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 08:22:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485c7ec5fd339651872e4197409182904a94a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:3d:60:39:a3:e6:94:cb:8a:d4:b3:70:1d:
3f:52:ec:8a:de:4c:24:80:ae:2c:3f:9d:ff:ad:f8:
f1:c7:d9:aa:c1:19:56:8b:a2:b1:94:2b:ab:dc:eb:
b0:35:e7:17:98:cb:42:71:98:ca:d7:95:60:7b:97:
ab:f5:fc:1f:ac:ad:86:b3:bc:b3:90:2f:5f:ca:3c:
9c:50:28:1c:37:9e:74:82:a5:03:55:ec:d4:3e:64:
f7:02:60:eb:4e:e6:f2:39:13:55:08:ab:7e:54:f0:
ff:b5:96:b5:a6:14:d0:b4:6c:47:27:89:aa:90:7e:
e2:19:34:4a:ae:54:2a:71:46:6b:97:a3:32:35:03:
8b:67:2b:2e:6e:cd:44:bc:a3:42:f6:c4:41:ce:62:
ae:c8:a4:ec:8e:3d:b3:58:e1:32:5f:52:e0:4a:07:
a7:52:cb:27:e3:c4:43:fc:b6:bf:4d:aa:c4:05:c4:
c1:8e:9c:39:64:76:a1:41:58:d9:f4:60:55:30:cd:
37:dd:41:bf:a3:e1:17:ce:a4:ae:7b:3f:05:01:35:
88:51:54:f0:86:f6:53:35:2a:39:34:45:5f:36:29:
a2:35:48:06:3b:4a:67:53:d4:60:d6:09:28:c0:d5:
a2:04:52:97:a2:e8:c7:21:05:06:f9:7e:3b:95:c4:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:7E:C5:FD:33:96:51:87:2E:41:97:40:91:82:90:4A:94:A6:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SFx-xf0zllGHLkGXQJGCkEqUpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.12.253.0/24
45.81.39.0/24
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
93.123.119.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:c4:f4:5b:62:3c:f1:c5:73:53:57:9e:90:ae:16:4b:75:c4:
1c:db:50:d2:aa:7d:81:43:3d:7f:98:74:ab:af:ab:1b:d2:ab:
9c:ff:1c:36:46:7b:e1:48:76:58:e1:3f:f2:16:05:2a:54:47:
6d:f1:ff:90:86:86:3f:1d:25:d3:4b:1d:46:31:34:7d:9b:3b:
fc:e4:1f:77:6a:80:c0:46:57:d7:11:a4:07:cf:67:b2:f4:f6:
36:6a:5a:d7:14:c3:3f:49:cf:59:50:6f:51:c0:fe:40:28:c4:
aa:f5:33:c7:09:c7:ac:7b:df:f7:62:b0:dc:23:0e:b2:d2:7e:
06:98:a6:bd:89:14:f9:ed:89:24:61:5d:98:3e:a6:9b:22:fd:
7b:47:2a:fb:66:2f:40:56:23:9d:09:17:c9:30:a9:42:38:ef:
53:7b:80:3f:90:52:76:4a:a1:1d:2f:39:dd:b8:8d:0a:4e:e6:
97:e7:02:0d:94:83:2b:6a:a9:bc:92:b9:04:7e:5f:05:b2:55:
fe:16:35:c6:fe:fe:63:ae:ad:0d:bb:83:ff:71:45:70:cf:29:
ba:8f:d7:20:92:47:7c:43:99:53:94:53:02:ee:0f:8f:6d:0d:
6e:9b:b8:5b:f5:ce:a6:f5:d9:56:04:af:f3:0b:0b:25:0e:38:
e9:56:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:43 2025 by rpki-client