Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa
File: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (raw, json)
Hash identifier: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=
Subject key identifier: 49:5B:BF:46:19:5F:FB:B0:74:F8:BA:D9:05:66:7F:94:04:DE:8B:1A
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 019420D61E2FD8E1E9D6562F16AA83C461EF
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:2f:d8:e1:e9:d6:56:2f:16:aa:83:c4:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=495bbf46195ffbb074f8bad905667f9404de8b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:c6:75:2c:d3:ba:27:db:ad:8d:3c:bb:aa:
88:63:1c:0b:d5:73:00:39:45:17:cf:df:18:a9:3e:
51:8f:7d:4f:4f:6b:16:86:9f:3e:7e:aa:71:9b:47:
c8:c7:71:c3:29:f8:e2:56:07:6e:d9:20:36:0a:71:
dd:e1:a6:30:be:a0:39:0f:50:1d:55:38:67:85:e4:
cd:d9:98:8d:76:2d:31:03:05:71:b8:2b:e4:8f:a0:
fb:33:66:f3:25:cd:0b:c0:e3:4d:08:28:5e:18:de:
f5:01:bd:bc:20:3f:e7:f6:7d:9e:5f:df:ba:77:dc:
5b:60:f1:c6:6c:e9:85:9e:87:4f:3c:57:5c:e8:b5:
f5:12:22:1a:06:56:0b:82:ba:ed:8f:ef:6f:9e:4e:
2c:b5:5e:eb:a8:ae:9f:20:2d:73:0c:ec:fb:a6:59:
cf:45:5e:4c:56:9d:22:64:c9:59:26:3f:7c:35:ab:
80:1b:1e:12:ec:7f:cf:a8:e8:df:96:35:a3:46:b0:
8d:75:e2:b6:8b:12:9f:41:96:05:89:ba:e4:cc:af:
8d:90:23:6e:fe:74:e0:5c:be:d3:74:71:6f:21:65:
3b:d2:ba:91:64:d4:c9:b9:f2:bf:b9:5a:45:9e:d8:
a4:10:2e:57:ff:8f:ec:57:20:9d:4b:45:d8:3d:e3:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:BF:46:19:5F:FB:B0:74:F8:BA:D9:05:66:7F:94:04:DE:8B:1A
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/24
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a7:94:a5:ad:51:82:e5:5f:05:04:f9:61:9b:ab:fa:6b:1d:
6d:a1:37:8e:74:0a:65:88:62:95:b1:da:4d:3c:2e:92:d9:2c:
58:03:05:63:43:bb:b9:7e:0d:f3:28:2b:38:c1:3d:a5:97:a0:
8e:56:e9:81:5d:62:61:38:40:3b:d5:d3:c4:5c:92:a1:29:b4:
ad:3a:61:cb:ba:6d:d3:12:62:f6:33:db:44:15:83:57:68:3f:
56:ec:47:d9:a7:6b:de:59:8f:9f:a1:26:18:f4:e7:a3:11:f7:
9b:83:39:ea:b7:37:34:e8:e0:4c:f3:40:39:e3:26:02:46:5a:
6b:3a:e3:9f:5b:73:2e:e3:e7:3e:fc:68:be:b6:b3:56:a2:77:
ba:15:1c:e1:34:d4:c2:d3:c0:6f:cf:63:74:3d:a1:96:1a:f7:
f6:c6:b1:84:5b:81:24:2d:79:6a:7f:2f:a3:a6:96:c4:6b:2f:
ce:68:79:e3:90:de:00:85:2c:82:9d:93:70:22:14:9b:f6:23:
ed:dd:11:b9:cb:8e:b0:76:f4:97:f5:c4:ed:35:5a:93:18:ef:
eb:ce:2a:fe:ae:36:16:51:93:0c:42:80:8a:40:05:78:9f:81:
b5:6e:71:93:ef:9c:47:c4:6b:39:ab:37:0b:43:73:1f:aa:f0:
ae:ea:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:32:56 2025 by rpki-client