Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sbZPW0SuFt239E2p2qDF-WN9-Kc.roa
File: sbZPW0SuFt239E2p2qDF-WN9-Kc.roa (raw, json)
Hash identifier: hScPrOhlM6+qDmnQrbDtLpe1c8WUlN7UEvXtiIL4sRU=
Subject key identifier: B1:B6:4F:5B:44:AE:16:DD:B7:F4:4D:A9:DA:A0:C5:F9:63:7D:F8:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01958A67726E33F309BDDB37AEAFAA9DC24F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sbZPW0SuFt239E2p2qDF-WN9-Kc.roa
Signing time: Wed 12 Mar 2025 12:49:50 +0000
ROA not before: Wed 12 Mar 2025 12:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48014
IP address blocks: 80.76.51.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:67:72:6e:33:f3:09:bd:db:37:ae:af:aa:9d:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 12 12:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b64f5b44ae16ddb7f44da9daa0c5f9637df8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:d4:0f:7f:b4:44:c4:0d:e1:d0:b4:89:8b:
2e:ea:5b:c5:42:ad:e9:d4:bb:e4:bf:ce:cf:39:3a:
07:39:f9:b1:38:86:eb:d7:3c:30:cd:bf:77:a5:f0:
41:8a:b8:29:96:52:cc:ea:95:9e:0c:c7:2a:1a:cd:
cb:78:d6:6d:ea:8f:e4:54:cc:95:2c:eb:2d:fc:b1:
4b:01:41:5a:42:14:e3:ff:30:bc:51:6f:c8:88:c3:
4f:3d:ac:60:fc:8f:f2:dc:7f:16:fd:d4:e0:e8:6b:
94:c1:bd:5d:ce:56:58:00:5e:ec:01:c0:45:ad:ae:
4c:23:aa:5b:e9:80:f7:e2:f7:e1:8c:f5:72:9b:af:
66:bb:8d:1a:41:9e:67:51:41:48:d3:27:e1:1a:c4:
65:33:d9:f4:a4:1e:31:a1:eb:d5:66:f2:86:5f:77:
76:44:91:1d:f6:6e:1a:a9:95:7d:1f:8d:6b:11:68:
1d:23:b3:c2:ec:b4:c5:bc:a6:dd:37:f2:ed:a8:98:
34:ce:08:7b:28:fb:62:90:a7:24:21:83:28:b0:30:
5f:c0:20:68:cb:e1:7c:ac:0e:de:64:91:9e:e6:85:
46:6b:f4:58:cd:98:ed:4d:c5:c0:d5:df:bd:27:48:
6d:4f:19:ef:2b:cc:09:d6:06:c0:ca:d5:b2:2d:89:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:4F:5B:44:AE:16:DD:B7:F4:4D:A9:DA:A0:C5:F9:63:7D:F8:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sbZPW0SuFt239E2p2qDF-WN9-Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
93.123.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:3e:e1:53:a6:ab:3c:08:59:4a:b8:17:cb:c2:d2:da:90:f4:
d9:63:86:37:42:56:eb:83:df:01:d5:8c:80:33:fd:c1:eb:4c:
77:31:fa:92:93:5d:ae:8d:d8:5e:71:94:ba:28:c4:1d:0b:84:
ef:68:13:68:30:1e:b6:e5:14:f3:ae:0b:c9:bb:71:7e:f2:c1:
24:82:c7:c8:b9:6f:06:2f:94:a4:56:8c:0f:8f:2c:f5:9e:a7:
02:d9:52:d8:bf:68:04:8d:fd:bf:10:63:4b:c1:5a:ca:88:fd:
3e:3c:1d:c6:04:7f:6f:6d:54:23:0a:69:75:f5:74:19:75:71:
61:c7:28:b6:0d:70:ed:1f:39:d2:db:d5:0c:5c:90:b6:97:d0:
46:0c:99:75:6c:c6:0e:60:f1:28:fe:cb:51:04:d8:5a:b2:ed:
68:a1:67:d2:82:95:64:6b:ca:b6:de:2d:30:e8:33:76:6d:09:
62:ba:c9:41:06:56:40:2c:23:e6:8f:94:91:16:d2:b9:e6:84:
c8:5f:78:2b:a7:f4:63:e5:f5:94:7c:79:83:01:c8:03:94:92:
57:46:c0:77:61:98:2d:9e:1e:24:e8:58:8f:24:ae:81:28:c1:
86:8f:ca:7b:94:90:f1:a6:a5:89:05:19:f5:58:d8:08:c3:27:
21:46:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:36 2025 by rpki-client