Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SNfpSksRdeq_X6alujKtqxhgfmI.roa
File: SNfpSksRdeq_X6alujKtqxhgfmI.roa (raw, json)
Hash identifier: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=
Subject key identifier: 48:D7:E9:4A:4B:11:75:EA:BF:5F:A6:A5:BA:32:AD:AB:18:60:7E:62
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4BCB2DFC86A156493BD694F6DE29
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SNfpSksRdeq_X6alujKtqxhgfmI.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 94.154.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4b:cb:2d:fc:86:a1:56:49:3b:d6:94:f6:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48d7e94a4b1175eabf5fa6a5ba32adab18607e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:bd:0b:e2:0b:ef:03:ca:5e:ba:4f:9b:00:
61:c2:50:90:dd:12:2f:3a:13:56:b5:6a:ec:77:27:
e3:b5:8e:6e:8c:3e:69:d6:e8:7d:8c:36:c3:e1:56:
ed:eb:c8:58:ad:be:26:66:05:10:56:4e:ae:69:a1:
b7:33:f4:a4:9c:a7:05:8f:79:c3:18:c4:ce:b7:cb:
ee:30:eb:03:98:5e:fa:1a:10:02:fd:1e:e9:51:86:
23:e7:7d:f2:f4:de:70:8f:3c:12:75:5e:90:6c:6c:
e5:d4:e8:f5:94:02:f7:19:3d:a5:59:72:1f:ba:fe:
d2:7f:98:18:a0:f3:b4:ef:ec:89:bb:a7:f2:ed:c5:
8e:9a:8c:fe:a5:50:cb:72:d5:67:99:9f:7a:2e:0d:
91:6e:f3:45:8a:fa:ae:8d:ec:0a:9d:10:a0:78:28:
c7:6c:8f:16:33:de:7c:9c:27:3f:04:f5:af:47:64:
cb:2f:8b:17:16:91:43:35:94:a9:4b:95:ed:10:4a:
4e:92:46:1a:ae:12:0a:72:12:68:cd:86:1a:b8:5a:
43:c5:58:40:f0:ff:13:67:0b:de:2a:e0:9d:c8:ee:
72:9f:ec:f3:6e:97:6a:35:9d:8c:ec:03:ad:ed:65:
0e:43:f1:26:96:ea:c9:37:86:78:2a:c5:14:d1:65:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:E9:4A:4B:11:75:EA:BF:5F:A6:A5:BA:32:AD:AB:18:60:7E:62
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SNfpSksRdeq_X6alujKtqxhgfmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
58:16:69:23:30:cb:94:1f:a7:a9:c1:37:a9:0e:dc:c9:97:d5:
b4:0a:09:21:f3:0d:a7:f9:3f:c8:f1:b6:b1:bd:13:9c:28:b4:
7e:7b:ce:3d:10:e5:33:a4:02:01:4f:f0:3c:ee:cb:c3:fb:63:
8f:a3:1f:b9:8b:2d:0d:2f:f9:3f:be:42:5c:6f:3b:1e:09:33:
4a:b0:12:c5:b7:4e:e9:6b:e5:ad:f8:99:57:0e:ff:67:57:a2:
18:2f:3e:17:a6:1c:13:d4:c5:b0:1e:a8:d9:50:b7:99:ad:78:
e0:a0:69:57:14:69:43:01:a3:46:47:ea:a9:c4:98:a1:ca:71:
ac:6b:92:80:6e:9d:27:b8:6d:45:2f:a8:c4:df:a3:9f:94:07:
80:0a:36:d0:00:b9:f9:2f:99:83:eb:e0:9a:13:76:68:5f:e8:
f6:f2:19:85:fc:4e:eb:7a:d8:34:05:df:7a:47:18:8c:42:d1:
ca:44:86:5f:17:e0:41:25:f1:49:25:2b:7e:28:72:7f:fc:44:
0d:f7:f3:19:77:04:bd:95:63:d4:3a:98:e5:be:d1:b1:f0:96:
c5:5f:a8:40:47:4a:0e:a5:a5:0c:01:07:fa:f5:8e:4f:7e:e0:
6c:d7:ca:59:3c:37:4a:c4:33:4a:1a:ce:cc:e8:02:29:69:74:
d5:5c:43:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma0vLLfyGoVZJO9aU9t4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwMTAyMDk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGQ3ZTk0YTRiMTE3NWVhYmY1ZmE2YTViYTMyYWRhYjE4NjA3ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4va9C+IL7wPKXrpPmwBhwlCQ3RIv
OhNWtWrsdyfjtY5ujD5p1uh9jDbD4Vbt68hYrb4mZgUQVk6uaaG3M/SknKcFj3nD
GMTOt8vuMOsDmF76GhAC/R7pUYYj533y9N5wjzwSdV6QbGzl1Oj1lAL3GT2lWXIf
uv7Sf5gYoPO07+yJu6fy7cWOmoz+pVDLctVnmZ96Lg2RbvNFivqujewKnRCgeCjH
bI8WM958nCc/BPWvR2TLL4sXFpFDNZSpS5XtEEpOkkYarhIKchJozYYauFpDxVhA
8P8TZwveKuCdyO5yn+zzbpdqNZ2M7AOt7WUOQ/EmlurJN4Z4KsUU0WXvawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjX6UpLEXXqv1+mpboyrasYYH5iMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvU05mcFNrc1JkZXFfWDZhbHVqS3RxeGhnZm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpomMA0G
CSqGSIb3DQEBCwUAA4IBAQBYFmkjMMuUH6epwTepDtzJl9W0Cgkh8w2n+T/I8bax
vROcKLR+e849EOUzpAIBT/A87svD+2OPox+5iy0NL/k/vkJcbzseCTNKsBLFt07p
a+Wt+JlXDv9nV6IYLz4XphwT1MWwHqjZULeZrXjgoGlXFGlDAaNGR+qpxJihynGs
a5KAbp0nuG1FL6jE36OflAeACjbQALn5L5mD6+CaE3ZoX+j28hmF/E7retg0Bd96
RxiMQtHKRIZfF+BBJfFJJSt+KHJ//EQN9/MZdwS9lWPUOpjlvtGx8JbFX6hAR0oO
paUMAQf69Y5PfuBs18pZPDdKxDNKGs7M6AIpaXTVXEPE
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:15 2025 by rpki-client