Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/svg34J6rFMVB3i_8SEjkmyJCwjg.roa
File: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (raw, json)
Hash identifier: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=
Subject key identifier: B2:F8:37:E0:9E:AB:14:C5:41:DE:2F:FC:48:48:E4:9B:22:42:C2:38
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 019423D6C92F9893268D5DE39050EC6589BA
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/svg34J6rFMVB3i_8SEjkmyJCwjg.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 45.80.108.0/24 maxlen: 24
45.80.110.0/24 maxlen: 24
185.159.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c9:2f:98:93:26:8d:5d:e3:90:50:ec:65:89:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2f837e09eab14c541de2ffc4848e49b2242c238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:02:a4:13:43:e5:93:fd:4e:cd:f4:94:00:
f4:8a:96:6c:4e:72:f3:75:74:78:9b:89:14:64:95:
d2:80:dc:f1:63:99:71:9a:f6:03:a0:5b:5b:24:1c:
21:63:ba:d7:1e:a9:a9:2a:b7:1b:4c:8e:54:b8:b5:
83:ba:18:54:04:bf:33:f6:b8:bf:c6:9a:d8:4b:b2:
c3:0d:54:45:5c:04:41:6f:67:77:aa:a5:b8:4c:db:
08:21:73:85:78:2e:da:1c:77:1f:21:a1:2d:21:0b:
8f:8b:91:7b:d9:33:d4:7f:99:20:a0:fa:11:e7:36:
8a:34:10:03:dd:69:f4:ac:ad:ea:e2:76:a8:9c:12:
52:fa:d5:8b:76:0f:3d:3b:84:8c:7e:30:d7:c2:e7:
f8:61:1d:2c:78:e2:4c:24:73:7e:2e:56:be:e7:85:
b6:e6:e0:2c:4b:42:d0:d2:cf:87:3c:c3:ac:7a:4f:
8b:11:4c:30:94:bc:32:0a:4d:88:43:ee:25:f4:89:
72:b9:73:fc:1d:3a:7e:c8:48:e7:e2:cf:d7:72:d8:
6f:05:8d:98:00:4d:5b:52:22:62:6d:86:e5:d0:9a:
0a:a0:ad:c7:78:6e:d5:68:40:78:59:d6:f2:0b:a2:
98:0f:a2:f4:73:98:96:76:d6:46:9a:78:2d:e1:e7:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:37:E0:9E:AB:14:C5:41:DE:2F:FC:48:48:E4:9B:22:42:C2:38
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/svg34J6rFMVB3i_8SEjkmyJCwjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.108.0/24
45.80.110.0/24
185.159.247.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cc:48:89:e5:b0:ad:2b:ee:3f:41:bd:82:29:79:9a:9c:ea:
d3:d2:5a:af:3a:f2:54:9c:ca:c2:49:03:bd:83:f0:10:de:1f:
30:d6:06:2c:64:e6:de:d3:85:8d:16:4e:3a:78:4d:6b:a4:97:
e2:04:19:14:da:ba:e8:90:3c:ff:0f:8c:c4:08:a0:64:2e:6a:
90:a7:05:43:1a:9d:2d:04:2f:a3:b0:26:ed:32:0e:cc:e7:69:
4f:fe:9e:53:8c:b5:dc:9c:35:91:19:88:d5:84:9c:3f:d6:40:
c2:d3:5a:d5:af:08:24:b1:56:1e:45:7d:18:d7:a1:9a:ab:15:
23:85:91:7f:4b:90:3e:32:e7:9f:d6:ca:84:15:e9:7d:68:86:
26:26:93:aa:e0:20:5b:01:f4:69:6b:ad:ae:5a:40:a9:aa:48:
f5:fe:1f:0e:f6:ed:fc:af:ac:56:cd:8e:ad:c0:01:a4:07:11:
3c:6c:61:f2:63:49:ae:7d:67:31:48:8c:f4:81:66:57:d4:b2:
69:4c:34:39:c3:c5:72:86:0e:12:30:45:a2:09:4f:8d:71:1c:
a7:60:34:07:f3:b6:f8:1e:de:2b:97:29:ad:22:e3:77:0a:75:
fa:5e:8d:d6:ac:62:73:fe:7f:f3:61:94:19:6d:40:07:76:fb:
58:4f:77:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQj1skvmJMmjV3jkFDsZYm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTMxNDU5MmVmNWVhOGJiZTg0ZDA2NGIyNTYxNzFmZTJh
ZmM4M2UwHhcNMjUwMTAxMjE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmY4MzdlMDllYWIxNGM1NDFkZTJmZmM0ODQ4ZTQ5YjIyNDJjMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01wCpBND5ZP9Ts30lAD0ipZsTnLz
dXR4m4kUZJXSgNzxY5lxmvYDoFtbJBwhY7rXHqmpKrcbTI5UuLWDuhhUBL8z9ri/
xprYS7LDDVRFXARBb2d3qqW4TNsIIXOFeC7aHHcfIaEtIQuPi5F72TPUf5kgoPoR
5zaKNBAD3Wn0rK3q4naonBJS+tWLdg89O4SMfjDXwuf4YR0seOJMJHN+Lla+54W2
5uAsS0LQ0s+HPMOsek+LEUwwlLwyCk2IQ+4l9IlyuXP8HTp+yEjn4s/XcthvBY2Y
AE1bUiJibYbl0JoKoK3HeG7VaEB4WdbyC6KYD6L0c5iWdtZGmngt4eeagQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLL4N+CeqxTFQd4v/EhI5JsiQsI4MB8GA1UdIwQY
MBaAFKqjFFku9eqLvoTQZLJWFx/ir8g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYt
ZjBkZjIzODk4ZjY0LzEvc3ZnMzRKNnJGTVZCM2lfOFNFamtteUpDd2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYtZjBkZjIzODk4ZjY0
LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVBsAwQA
LVBuAwQAuZ/3MA0GCSqGSIb3DQEBCwUAA4IBAQBjzEiJ5bCtK+4/Qb2CKXmanOrT
0lqvOvJUnMrCSQO9g/AQ3h8w1gYsZObe04WNFk46eE1rpJfiBBkU2rrokDz/D4zE
CKBkLmqQpwVDGp0tBC+jsCbtMg7M52lP/p5TjLXcnDWRGYjVhJw/1kDC01rVrwgk
sVYeRX0Y16GaqxUjhZF/S5A+Muef1sqEFel9aIYmJpOq4CBbAfRpa62uWkCpqkj1
/h8O9u38r6xWzY6twAGkBxE8bGHyY0mufWcxSIz0gWZX1LJpTDQ5w8Vyhg4SMEWi
CU+NcRynYDQH87b4Ht4rlymtIuN3CnX6Xo3WrGJz/n/zYZQZbUAHdvtYT3e6
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:04 2025 by rpki-client