Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/SM900vRB7gei6pS6Q178I2UX-lU.roa
File: SM900vRB7gei6pS6Q178I2UX-lU.roa (raw, json)
Hash identifier: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=
Subject key identifier: 48:CF:74:D2:F4:41:EE:07:A2:EA:94:BA:43:5E:FC:23:65:17:FA:55
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019427479AEF59F11A665E6C60089571BA40
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/SM900vRB7gei6pS6Q178I2UX-lU.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50563
IP address blocks: 5.83.54.0/24 maxlen: 24
5.83.64.0/21 maxlen: 21
5.83.64.0/22 maxlen: 22
5.83.64.0/23 maxlen: 23
5.83.64.0/24 maxlen: 24
5.83.65.0/24 maxlen: 24
5.83.66.0/23 maxlen: 23
5.83.68.0/22 maxlen: 22
5.83.68.0/23 maxlen: 23
5.83.70.0/23 maxlen: 23
5.83.88.0/24 maxlen: 24
5.83.95.0/24 maxlen: 24
185.3.116.0/22 maxlen: 22
185.3.116.0/23 maxlen: 23
185.3.116.0/24 maxlen: 24
185.3.117.0/24 maxlen: 24
185.3.118.0/23 maxlen: 23
185.3.118.0/24 maxlen: 24
185.3.119.0/24 maxlen: 24
185.67.106.0/24 maxlen: 24
185.67.107.0/24 maxlen: 24
212.85.240.0/23 maxlen: 23
212.85.240.0/24 maxlen: 24
212.85.241.0/24 maxlen: 24
212.85.242.0/23 maxlen: 23
212.85.244.0/23 maxlen: 23
212.85.244.0/24 maxlen: 24
212.85.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9a:ef:59:f1:1a:66:5e:6c:60:08:95:71:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48cf74d2f441ee07a2ea94ba435efc236517fa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:4a:9b:29:81:99:c2:46:38:69:7e:b3:12:
03:5b:47:be:68:df:cb:2d:3e:0a:9b:94:a6:1f:1e:
2e:04:7c:b3:19:53:27:5a:9a:cc:05:3f:a2:69:09:
4e:52:2f:eb:0a:76:a6:ea:d9:33:7e:09:07:da:70:
c4:a4:5f:59:9a:2d:85:93:bb:04:8a:65:71:83:3a:
c6:0f:fa:41:7f:b0:de:20:0e:de:b4:34:59:8a:fd:
2c:ff:3f:72:c5:9a:ef:2d:db:c4:c1:98:ac:af:0a:
fd:79:e6:f8:1b:d3:42:e5:22:70:8b:ed:09:38:61:
14:8f:22:e0:f2:e1:04:f9:40:ea:24:d1:fe:fe:22:
7f:0f:5e:0d:f0:86:1b:02:12:af:6c:24:ab:4c:bd:
bf:51:3b:c9:94:10:a9:70:21:88:7e:b9:00:df:71:
fb:5a:21:6a:08:80:58:28:be:df:fb:b8:04:e3:af:
19:39:c1:a4:8d:4f:d6:9d:f0:bb:ab:d4:b4:09:2e:
a4:f0:2e:c8:94:51:31:b8:ae:3d:94:2b:78:92:67:
02:2f:ed:bf:e8:6e:d6:20:79:6b:7e:c1:f4:32:a2:
6b:78:ca:ca:a0:ea:dc:b9:eb:75:59:63:96:4b:eb:
c1:4a:72:fe:9e:23:bc:8c:03:c1:3c:8a:87:f9:db:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:74:D2:F4:41:EE:07:A2:EA:94:BA:43:5E:FC:23:65:17:FA:55
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/SM900vRB7gei6pS6Q178I2UX-lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.54.0/24
5.83.64.0/21
5.83.88.0/24
5.83.95.0/24
185.3.116.0/22
185.67.106.0/23
212.85.240.0-212.85.245.255
Signature Algorithm: sha256WithRSAEncryption
65:7c:86:ce:99:15:fe:2d:0c:dc:d0:e8:50:95:90:5a:b9:8a:
6b:9d:36:e1:95:e1:eb:81:aa:71:87:e5:12:06:f2:87:44:fd:
91:22:7a:64:60:73:7d:8c:51:f8:d8:ae:e2:31:70:1e:19:78:
41:d3:62:96:15:d6:4d:41:57:8e:46:1d:1c:da:75:e7:3f:d0:
f4:d5:5c:c3:98:a6:0c:38:b8:30:b1:f2:7b:3e:8a:50:83:01:
16:f5:8e:63:a6:a6:e3:f7:70:16:58:16:e1:19:cf:11:64:54:
76:17:69:64:da:89:12:b9:08:0f:61:88:f1:58:75:52:88:65:
e7:fe:aa:34:23:f9:02:78:c1:c4:49:68:3a:44:f0:21:c3:db:
db:a5:ab:f7:66:48:b3:8b:32:e9:f8:f7:2b:2a:cd:41:9a:98:
41:54:9d:1e:16:9e:a5:eb:4a:e8:12:ba:5d:e6:5d:e2:5c:9c:
f5:e4:80:c0:d0:a3:cc:e0:9a:ed:0f:6b:af:fd:57:c1:f1:fc:
e8:4b:b0:25:88:3e:f3:bf:2b:7c:2e:f7:f8:eb:8e:cd:12:7d:
bc:d9:82:cc:98:18:bd:90:29:80:f6:c1:da:fb:61:c4:21:69:
73:6b:46:6f:32:1f:11:13:76:0a:70:96:bd:60:c7:10:43:d0:
e4:09:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:12 2025 by rpki-client