Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SFBYrZ7vA9OxfO2KkdQYB0YS0fw.roa
File: SFBYrZ7vA9OxfO2KkdQYB0YS0fw.roa (raw, json)
Hash identifier: B9fKn3XhZ75y54ZLO69O3Qeva/fzB5BWqhcjE4WD8cA=
Subject key identifier: 48:50:58:AD:9E:EF:03:D3:B1:7C:ED:8A:91:D4:18:07:46:12:D1:FC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5986FFA4E1EE8894ABC08571847FF
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SFBYrZ7vA9OxfO2KkdQYB0YS0fw.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2278
IP address blocks: 139.100.0.0/16 maxlen: 16
161.105.128.0/17 maxlen: 17
161.106.0.0/16 maxlen: 16
192.144.77.0/24 maxlen: 24
2a01:cf00::/42 maxlen: 48
2a01:cf00:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:6f:fa:4e:1e:e8:89:4a:bc:08:57:18:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485058ad9eef03d3b17ced8a91d418074612d1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:91:d8:7d:3b:b2:9b:3c:a3:e4:b7:90:cf:
5d:be:c4:de:7e:1e:40:e1:da:65:00:43:15:50:26:
9f:77:70:03:ef:69:8e:67:f5:92:95:af:45:1f:49:
d2:b2:d3:ed:9b:89:ff:fd:4d:48:57:e9:04:90:91:
aa:2f:0f:6f:3f:5b:71:60:87:fa:9e:58:f2:21:e2:
c3:21:6d:33:f5:49:0c:b5:85:b7:17:20:59:4f:40:
ab:7c:ea:0c:9a:78:bd:8a:7d:29:aa:7e:bf:dd:b7:
a4:9e:5f:bb:da:a9:76:a9:53:f1:4a:7b:1d:0d:f7:
21:7c:69:15:a8:a1:4b:cc:b1:46:ab:f0:e0:89:fa:
65:29:9b:54:45:9d:46:d4:8c:2e:63:02:65:b4:98:
05:af:54:ff:d3:80:a2:8f:dc:6a:01:63:5b:b2:20:
0e:b3:97:40:94:e4:38:5b:0b:da:11:90:3b:02:10:
41:14:3e:55:72:37:e0:b7:31:ec:de:46:5e:06:64:
ad:20:b4:f1:a1:cf:ba:08:3e:b1:4a:a5:82:e9:e0:
7d:03:d7:62:9c:2e:f3:c8:dd:ae:bb:40:c0:8e:9c:
87:51:4b:ca:5b:71:28:4f:70:c2:e6:f1:34:d2:81:
3d:f2:bd:4e:ae:23:71:28:7a:49:cd:87:cd:25:9f:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:58:AD:9E:EF:03:D3:B1:7C:ED:8A:91:D4:18:07:46:12:D1:FC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SFBYrZ7vA9OxfO2KkdQYB0YS0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.100.0.0/16
161.105.128.0-161.106.255.255
192.144.77.0/24
IPv6:
2a01:cf00::/42
Signature Algorithm: sha256WithRSAEncryption
49:aa:3f:09:d1:38:15:55:4e:99:61:63:19:b7:67:4c:86:a4:
6a:bc:61:65:12:02:8c:34:22:9e:c8:e8:c7:40:19:f5:c9:7e:
37:92:3f:cf:c1:2f:59:c5:eb:74:bf:20:b9:f4:c2:ad:49:2a:
44:9e:56:1a:c7:cb:69:39:a2:2e:0a:d2:4f:90:32:24:fc:de:
99:37:86:1a:48:81:5e:2d:19:4a:57:a5:9c:7f:f6:d2:67:75:
2d:71:f7:7a:1d:f3:07:d7:8c:26:26:58:10:19:18:d1:0f:54:
67:4d:be:d0:43:8a:2d:11:97:ae:6a:57:d4:8f:e8:0f:20:28:
19:07:b3:33:dd:9f:85:04:c2:5b:ee:82:9e:27:ea:a0:a9:ec:
6c:48:2f:d0:4a:22:75:68:5b:02:bb:5b:fa:c5:73:e2:53:21:
f2:29:d1:ad:7d:d6:da:7a:47:04:47:2b:93:b4:08:87:15:0b:
c4:cd:5d:b3:00:0b:88:35:57:d5:02:46:07:b0:e8:be:e8:c4:
36:65:f5:51:40:0e:f7:91:a8:7b:6b:45:d4:92:7e:60:2a:d3:
fb:20:a9:be:8f:22:dd:e6:ba:81:f9:2b:16:bc:52:0f:2e:3c:
00:13:7f:df:0e:03:5b:c8:98:bc:9b:1f:0f:50:1f:ff:5b:72:
fa:ab:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:15 2025 by rpki-client