Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SvbWjBtA5USrFJEFyfsvP-SCofs.roa
File: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (raw, json)
Hash identifier: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=
Subject key identifier: 4A:F6:D6:8C:1B:40:E5:44:AB:14:91:05:C9:FB:2F:3F:E4:82:A1:FB
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019425FDB288ACFA2C86DDF7C9FC033EC591
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SvbWjBtA5USrFJEFyfsvP-SCofs.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43893
IP address blocks: 185.9.164.0/24 maxlen: 24
185.9.166.0/23 maxlen: 23
185.84.240.0/24 maxlen: 24
185.84.242.0/24 maxlen: 24
185.84.248.0/24 maxlen: 24
185.84.249.0/24 maxlen: 24
2001:67c:1000::/47 maxlen: 47
2001:67c:1000::/48 maxlen: 48
2001:67c:1001::/48 maxlen: 48
2a03:4bc0:1000::/48 maxlen: 48
2a03:4bc0:1001::/48 maxlen: 48
2a03:4bc0:2000::/48 maxlen: 48
2a03:4bc0:2100::/48 maxlen: 48
2a03:4bc0:2200::/48 maxlen: 48
2a03:4bc0:2900::/48 maxlen: 48
2a03:4bc0:3160::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b2:88:ac:fa:2c:86:dd:f7:c9:fc:03:3e:c5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af6d68c1b40e544ab149105c9fb2f3fe482a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:d0:6c:4f:02:41:a4:1f:fb:e9:ee:6f:4c:
1f:0a:ab:08:6f:0f:74:8f:2e:c6:e9:5b:62:2e:ea:
25:f6:44:b1:cc:85:04:e9:88:40:71:2b:13:f1:19:
60:eb:64:9e:1c:fd:a3:71:b9:fa:97:5b:b7:a7:e3:
18:ca:9a:e6:6f:59:19:89:45:c4:93:29:d2:03:c7:
16:9c:c5:b4:16:8d:92:17:7f:2c:75:4e:d7:f1:8c:
e6:01:c2:93:3a:b1:d3:45:ad:d3:79:c7:e5:6c:dd:
df:25:3b:c8:87:ea:10:69:44:94:83:56:7f:56:fb:
a0:90:ad:4c:b5:fe:60:94:45:a9:31:c9:97:c1:c3:
1a:29:3d:86:a5:1e:7a:68:39:ba:d9:3f:77:c1:c1:
e8:92:3a:14:16:53:c2:ed:5b:91:15:7f:f4:bf:f8:
9a:5c:3e:bc:77:81:40:e0:68:a8:50:f2:53:16:f7:
92:99:d5:72:ac:22:62:3a:31:d2:52:59:ba:60:20:
34:50:b1:ab:ee:57:de:e3:e8:59:97:80:00:c6:2b:
08:84:2d:68:a6:16:9d:59:88:39:07:26:8a:e1:5e:
54:60:64:10:75:01:bc:d3:b7:cb:11:67:02:4e:9e:
fd:90:e1:b2:52:22:b8:0c:ac:64:bd:fc:90:4c:82:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:D6:8C:1B:40:E5:44:AB:14:91:05:C9:FB:2F:3F:E4:82:A1:FB
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SvbWjBtA5USrFJEFyfsvP-SCofs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.164.0/24
185.9.166.0/23
185.84.240.0/24
185.84.242.0/24
185.84.248.0/23
IPv6:
2001:67c:1000::/47
2a03:4bc0:1000::/47
2a03:4bc0:2000::/48
2a03:4bc0:2100::/48
2a03:4bc0:2200::/48
2a03:4bc0:2900::/48
2a03:4bc0:3160::/48
Signature Algorithm: sha256WithRSAEncryption
82:77:a3:54:b2:dd:25:b5:72:9b:1a:ed:51:7e:6c:bd:ad:f7:
e5:3b:fa:1d:8b:76:cc:38:90:52:f7:89:69:18:18:49:95:54:
68:be:9c:e4:62:96:e9:ae:3c:60:73:84:a9:82:7e:a9:10:5e:
de:3a:ec:23:e2:c0:22:10:f5:68:fb:52:36:65:c2:2f:ff:11:
6d:81:4e:9d:66:89:8a:6e:ec:68:11:22:52:fe:c3:96:24:3d:
b1:c2:67:c1:12:87:5e:4c:f7:9f:50:2f:56:f0:f4:95:83:8b:
df:08:f0:3d:5a:80:fc:97:27:f4:87:1d:df:d7:eb:b0:c1:bb:
ce:55:fd:3d:c7:56:c6:ca:40:5b:ad:04:8b:3e:cd:eb:01:34:
89:b1:69:4f:e7:e4:ab:a4:9d:c8:c2:8f:9c:af:5c:17:62:c0:
7e:a7:49:67:d7:0c:f5:63:d7:08:a5:90:25:30:98:0a:ef:3d:
7f:4d:b6:ca:26:fc:b1:f4:a1:81:fb:74:a6:ef:0b:1b:4f:c1:
ff:ab:bc:b6:60:28:14:c1:4e:2f:7d:a3:60:48:b7:50:66:77:
d8:20:f3:e6:7b:05:35:07:0f:d9:11:fb:df:3f:a9:89:f0:a2:
ac:4e:2c:6c:23:d3:dd:a3:bc:48:52:22:4f:e0:e0:07:d6:cf:
db:e0:66:e8
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZQl/bKIrPosht33yfwDPsWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz
MmY5ZmUwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY2ZDY4YzFiNDBlNTQ0YWIxNDkxMDVjOWZiMmYzZmU0ODJhMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKDQbE8CQaQf++nub0wfCqsIbw90
jy7G6VtiLuol9kSxzIUE6YhAcSsT8Rlg62SeHP2jcbn6l1u3p+MYyprmb1kZiUXE
kynSA8cWnMW0Fo2SF38sdU7X8YzmAcKTOrHTRa3TecflbN3fJTvIh+oQaUSUg1Z/
VvugkK1Mtf5glEWpMcmXwcMaKT2GpR56aDm62T93wcHokjoUFlPC7VuRFX/0v/ia
XD68d4FA4GioUPJTFveSmdVyrCJiOjHSUlm6YCA0ULGr7lfe4+hZl4AAxisIhC1o
phadWYg5ByaK4V5UYGQQdQG807fLEWcCTp79kOGyUiK4DKxkvfyQTIJi2QIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFEr21owbQOVEqxSRBcn7Lz/kgqH7MB8GA1UdIwQY
MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt
MzUxNzFhZWRkMzEzLzEvU3ZiV2pCdEE1VVNyRkpFRnlmc3ZQLVNDb2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz
LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTAkBAIAATAeAwQAuQmkAwQB
uQmmAwQAuVTwAwQAuVTyAwQBuVT4MEUEAgACMD8DBwEgAQZ8EAADBwEqA0vAEAAD
BwAqA0vAIAADBwAqA0vAIQADBwAqA0vAIgADBwAqA0vAKQADBwAqA0vAMWAwDQYJ
KoZIhvcNAQELBQADggEBAIJ3o1Sy3SW1cpsa7VF+bL2t9+U7+h2Ldsw4kFL3iWkY
GEmVVGi+nORilumuPGBzhKmCfqkQXt467CPiwCIQ9Wj7UjZlwi//EW2BTp1miYpu
7GgRIlL+w5YkPbHCZ8ESh15M959QL1bw9JWDi98I8D1agPyXJ/SHHd/X67DBu85V
/T3HVsbKQFutBIs+zesBNImxaU/n5KukncjCj5yvXBdiwH6nSWfXDPVj1wilkCUw
mArvPX9Ntsom/LH0oYH7dKbvCxtPwf+rvLZgKBTBTi99o2BIt1Bmd9gg8+Z7BTUH
D9kR+98/qYnwoqxOLGwj092jvEhSIk/g4AfWz9vgZug=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:16 2025 by rpki-client