Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/Svq76vgZN-JTLZycd-9qRuSxEbQ.roa
File: Svq76vgZN-JTLZycd-9qRuSxEbQ.roa (raw, json)
Hash identifier: u8ECcdAfO7QlygwR5kvYEXpkMoY8Hq3UqxTFyciqqTE=
Subject key identifier: 4A:FA:BB:EA:F8:19:37:E2:53:2D:9C:9C:77:EF:6A:46:E4:B1:11:B4
Certificate issuer: /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial: 13EA754F
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/Svq76vgZN-JTLZycd-9qRuSxEbQ.roa
Signing time: Sat 01 Jan 2022 12:59:16 +0000
ROA not before: Sat 01 Jan 2022 12:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44788
IP address blocks: 178.250.0.0/22 maxlen: 24
178.250.4.0/22 maxlen: 24
91.199.242.0/24 maxlen: 24
185.235.84.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334132559 (0x13ea754f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
Validity
Not Before: Jan 1 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4afabbeaf81937e2532d9c9c77ef6a46e4b111b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:24:23:ca:53:8c:83:2c:29:a8:33:cf:9a:
a3:8b:23:bf:59:95:4c:cf:11:89:02:65:7e:f8:94:
95:45:a6:94:1b:4a:4e:a1:f8:fe:08:1f:c7:9c:29:
55:75:5f:89:e2:60:55:f7:5d:08:3c:89:ad:e2:79:
29:29:d1:38:17:76:94:24:73:20:d1:c3:ac:7e:b1:
2f:66:96:41:7e:5a:dc:e1:f8:e4:c0:ab:7f:2d:20:
ee:87:5e:68:e4:71:48:15:e6:8c:f1:1a:4a:d7:f1:
3b:06:0a:d9:e1:b0:93:07:6b:fd:a5:16:af:4b:8d:
d4:4d:73:72:05:bc:3c:19:c1:0a:3f:78:92:8c:80:
1d:36:81:25:60:51:73:d6:5e:b0:05:09:c8:7c:1f:
23:63:58:cb:ee:fe:9f:2f:4e:d1:14:d7:55:e1:f0:
a1:e2:1d:61:ac:45:8a:ea:4d:c5:bc:7d:5c:3e:26:
a7:02:ea:62:a6:29:fb:89:d5:eb:cb:23:31:90:69:
47:6f:00:9e:46:ae:84:6a:56:ff:a5:84:82:88:07:
ed:a1:8b:bb:8b:54:62:23:1d:64:94:87:fb:0b:02:
ac:d5:95:2b:eb:25:18:8c:c8:a3:e9:7f:35:53:c8:
a9:f1:4f:e6:f2:05:f5:cb:52:b5:1c:00:06:20:2f:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:BB:EA:F8:19:37:E2:53:2D:9C:9C:77:EF:6A:46:E4:B1:11:B4
X509v3 Authority Key Identifier:
keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/Svq76vgZN-JTLZycd-9qRuSxEbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/24
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
80:7d:5f:ca:1c:32:61:5b:26:75:66:07:57:a4:46:c8:8a:2f:
fd:4c:5d:29:13:e2:a8:0b:b0:91:2f:9a:25:14:42:e7:f5:76:
15:b8:c1:08:b9:88:fd:e4:1b:3c:a3:d8:15:2f:57:50:7b:54:
b3:2a:4e:c1:88:b4:bd:f4:7d:c1:5f:8e:c3:9b:f7:70:29:28:
06:5c:be:0b:cb:8a:72:15:13:40:f4:df:77:6b:34:64:c6:1c:
7f:4a:a8:ee:86:c7:26:32:87:d1:98:e2:b9:b8:68:33:d1:1d:
e8:0c:70:84:5f:48:42:ae:4d:ad:73:b6:7f:25:58:0c:08:31:
6f:29:ad:4a:94:76:0d:2a:65:8d:41:e6:e4:ed:0e:7b:5b:a0:
e8:ae:1c:e4:a6:cc:91:de:20:fc:8f:2e:0b:70:9f:f3:88:44:
66:35:cf:33:f3:56:e0:ce:c0:aa:3a:da:7b:e0:a4:d6:c3:e0:
f6:9c:fd:ec:23:5a:c9:54:73:90:c6:cc:e4:63:26:f8:65:62:
12:25:21:4e:3f:fd:9e:4a:cb:2a:fc:c2:fd:d9:dc:40:d1:ec:
f8:76:45:c3:37:c7:66:4d:e8:6f:41:5d:34:fc:4e:0a:0e:f3:
61:c7:eb:11:7d:f4:6c:11:b6:18:46:ce:39:71:82:d1:65:39:
27:1d:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:02 2025 by rpki-client