Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SFYQtUf8h78RR3sYV-5vV65d0GI.roa
File: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (raw, json)
Hash identifier: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=
Subject key identifier: 48:56:10:B5:47:FC:87:BF:11:47:7B:18:57:EE:6F:57:AE:5D:D0:62
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0194266B69EF7E0C1AE459A5BDA01E497A9E
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SFYQtUf8h78RR3sYV-5vV65d0GI.roa
Signing time: Thu 02 Jan 2025 09:49:21 +0000
ROA not before: Thu 02 Jan 2025 09:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35590
IP address blocks: 178.239.37.0/24 maxlen: 24
178.239.38.0/24 maxlen: 24
178.239.39.0/24 maxlen: 24
2a09:3fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:69:ef:7e:0c:1a:e4:59:a5:bd:a0:1e:49:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485610b547fc87bf11477b1857ee6f57ae5dd062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:8e:9b:19:85:de:e8:50:00:c8:3c:0a:58:
15:df:92:31:c0:54:f5:44:2c:57:5a:c9:30:d2:64:
81:99:19:c6:f2:91:4c:20:75:1c:07:0f:f2:b4:e7:
37:de:f7:1a:9f:4c:90:2b:21:6a:3c:63:2d:5e:20:
97:6f:35:99:95:be:28:c4:50:08:9d:61:a3:cb:ce:
e9:90:be:46:b3:e5:4d:54:63:f7:8c:71:89:c6:d9:
99:e5:51:4d:0f:fc:29:f4:2c:15:15:5c:ee:e8:0e:
e4:49:b0:d6:5a:b3:ce:ea:6e:6b:75:f2:19:69:d7:
e7:19:5f:59:9d:54:7a:cf:bd:5b:a4:70:19:49:a4:
c3:d3:ed:11:22:b6:1b:3c:80:c3:17:6f:4b:d0:04:
42:c6:5b:6f:5a:4b:1f:3e:e8:6b:3f:9b:84:61:73:
32:b0:69:96:8d:a4:87:f7:2d:46:3b:c6:71:53:b0:
cb:bb:4e:f0:8c:63:d1:16:98:a0:c9:00:24:6c:18:
08:9a:b5:4f:13:c1:a5:2d:7e:61:34:30:55:ed:c4:
96:18:18:84:28:94:40:79:3b:2c:be:5f:d4:f6:90:
e8:48:be:50:91:7c:3b:35:6d:30:8d:f9:6e:cb:a4:
de:88:3f:07:62:46:9d:ed:ed:1f:35:23:3e:6d:86:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:10:B5:47:FC:87:BF:11:47:7B:18:57:EE:6F:57:AE:5D:D0:62
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SFYQtUf8h78RR3sYV-5vV65d0GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.37.0-178.239.39.255
IPv6:
2a09:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
93:51:71:e6:86:19:84:a4:92:c4:a1:d6:9e:4b:46:69:b4:b7:
f8:88:d9:41:fe:e7:b0:1b:63:b4:79:86:f4:8e:ed:3a:71:cf:
26:7d:cc:5c:bf:b1:02:21:4b:75:17:3e:07:b9:21:e4:e1:f0:
dc:30:29:0f:b6:a0:7d:68:03:7d:68:41:a4:0d:d0:ee:5e:25:
05:05:5d:60:80:8c:40:e1:44:85:d8:2d:a2:27:6d:2a:36:6d:
52:0f:c4:f5:94:74:09:1a:68:19:3c:98:f8:3c:f7:1f:3a:7d:
76:84:83:83:fe:9a:82:bc:dd:1c:9a:8a:8f:c2:39:6a:a9:8a:
22:c9:3c:ef:33:c9:ab:83:c0:2f:c1:ca:f9:6f:81:6c:4d:7d:
d7:9c:78:a8:2b:40:9b:b7:24:34:87:df:4f:34:08:8e:0f:3c:
52:fe:57:0f:45:11:fb:6b:77:24:74:54:b0:8d:54:65:37:cd:
98:2d:db:5d:15:09:23:cb:0d:7c:8d:3e:b0:d8:76:05:70:39:
82:c7:75:b2:a2:0b:63:fa:f0:a7:ab:92:59:29:62:1a:87:2f:
f2:d0:74:11:4e:82:7c:26:82:28:51:16:06:9c:e1:6e:d4:cc:
5c:57:2f:ee:2a:e2:e2:2c:40:4a:3a:fc:36:f5:65:e2:34:b7:
a8:32:cd:c9
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQma2nvfgwa5FmlvaAeSXqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjUwMTAyMDk0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODU2MTBiNTQ3ZmM4N2JmMTE0NzdiMTg1N2VlNmY1N2FlNWRkMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TiOmxmF3uhQAMg8ClgV35IxwFT1
RCxXWskw0mSBmRnG8pFMIHUcBw/ytOc33vcan0yQKyFqPGMtXiCXbzWZlb4oxFAI
nWGjy87pkL5Gs+VNVGP3jHGJxtmZ5VFND/wp9CwVFVzu6A7kSbDWWrPO6m5rdfIZ
adfnGV9ZnVR6z71bpHAZSaTD0+0RIrYbPIDDF29L0ARCxltvWksfPuhrP5uEYXMy
sGmWjaSH9y1GO8ZxU7DLu07wjGPRFpigyQAkbBgImrVPE8GlLX5hNDBV7cSWGBiE
KJRAeTssvl/U9pDoSL5QkXw7NW0wjfluy6TeiD8HYkad7e0fNSM+bYZ7twIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEhWELVH/Ie/EUd7GFfub1euXdBiMB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvU0ZZUXRVZjhoNzhSUjNzWVYtNXZWNjVkMEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBACy7yUD
BAOy7yAwDQQCAAIwBwMFAyoJP8AwDQYJKoZIhvcNAQELBQADggEBAJNRceaGGYSk
ksSh1p5LRmm0t/iI2UH+57AbY7R5hvSO7TpxzyZ9zFy/sQIhS3UXPge5IeTh8Nww
KQ+2oH1oA31oQaQN0O5eJQUFXWCAjEDhRIXYLaInbSo2bVIPxPWUdAkaaBk8mPg8
9x86fXaEg4P+moK83Ryaio/COWqpiiLJPO8zyauDwC/ByvlvgWxNfdeceKgrQJu3
JDSH3080CI4PPFL+Vw9FEftrdyR0VLCNVGU3zZgt210VCSPLDXyNPrDYdgVwOYLH
dbKiC2P68KerklkpYhqHL/LQdBFOgnwmgihRFgac4W7UzFxXL+4q4uIsQEo6/Db1
ZeI0t6gyzck=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:43 2025 by rpki-client