Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/SllXdUUCPVChZ4jvhpor-ghAAj4.roa
File: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (raw, json)
Hash identifier: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=
Subject key identifier: 4A:59:57:75:45:02:3D:50:A1:67:88:EF:86:9A:2B:FA:08:40:02:3E
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0195A366FAA9B6699AB129653C322E204EAF
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/SllXdUUCPVChZ4jvhpor-ghAAj4.roa
Signing time: Mon 17 Mar 2025 09:19:49 +0000
ROA not before: Mon 17 Mar 2025 09:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 62.179.0.0/17 maxlen: 17
78.103.0.0/16 maxlen: 16
80.111.0.0/16 maxlen: 16
80.111.0.0/17 maxlen: 17
80.111.128.0/17 maxlen: 17
84.116.0.0/16 maxlen: 16
94.169.0.0/16 maxlen: 16
94.170.0.0/15 maxlen: 15
94.170.0.0/16 maxlen: 16
94.171.0.0/16 maxlen: 16
195.34.130.0/24 maxlen: 24
195.34.132.0/22 maxlen: 22
213.47.220.0/22 maxlen: 22
2001:730::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:66:fa:a9:b6:69:9a:b1:29:65:3c:32:2e:20:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 17 09:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a59577545023d50a16788ef869a2bfa0840023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:08:61:6a:be:d1:41:bc:91:61:71:f1:ca:
91:45:36:fc:62:8a:40:81:37:9d:4f:3a:ad:89:6a:
01:a7:16:9a:7a:78:c9:a2:7a:31:27:a6:2d:25:03:
79:98:76:f2:9a:93:5a:e9:8b:64:2f:d5:13:90:48:
39:1d:65:bf:c5:77:f5:97:75:47:c2:f5:fa:e3:5e:
f6:1a:12:71:a4:bc:96:55:4a:c7:d8:12:6d:65:73:
ae:92:2e:2c:82:03:92:8f:d4:d9:cb:c6:77:27:63:
fa:fd:7a:cc:8c:5f:e0:56:e8:c5:6e:a3:f4:08:b6:
69:ba:41:cb:7e:37:83:c2:e5:5c:68:2a:3d:00:46:
79:72:23:62:5e:22:a2:e0:f7:f1:2a:66:09:b5:2a:
5d:b5:8a:75:ee:36:3a:cf:d8:30:c2:9a:f0:37:07:
76:aa:7f:00:9d:26:63:5c:2d:2e:d6:5b:26:29:d2:
d9:b7:c1:a3:2c:9c:49:64:e7:b3:f6:cf:f7:1a:ea:
25:a7:72:49:a4:57:3c:c1:96:28:5d:d9:bd:22:3b:
51:dd:1b:4d:00:fc:65:b6:fa:d8:d6:b5:3a:ab:36:
b0:c4:e6:53:4f:56:92:7b:39:66:32:6c:e9:d4:20:
de:bf:46:66:36:c5:4f:30:fc:f7:08:05:be:6d:08:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:57:75:45:02:3D:50:A1:67:88:EF:86:9A:2B:FA:08:40:02:3E
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/SllXdUUCPVChZ4jvhpor-ghAAj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.0.0/17
78.103.0.0/16
80.111.0.0/16
84.116.0.0/16
94.169.0.0-94.171.255.255
195.34.130.0/24
195.34.132.0/22
213.47.220.0/22
IPv6:
2001:730::/29
Signature Algorithm: sha256WithRSAEncryption
5d:88:26:75:36:74:e0:92:0e:27:6a:d1:6d:b2:ab:91:85:ef:
f3:15:29:00:00:a8:ba:4b:fc:a5:a0:0b:82:ae:25:24:67:05:
93:14:ff:ca:1e:9b:63:cd:81:b6:7b:2b:67:0c:a1:93:07:9b:
cd:8c:80:28:ca:52:34:42:b1:c5:a4:ed:fa:30:50:6a:45:4a:
13:69:0b:1b:e0:06:a5:4d:ad:17:52:c8:c4:40:27:5a:58:28:
4a:f7:6b:0a:4c:20:a6:6b:a4:37:f2:94:35:ac:cd:57:13:31:
73:5e:c4:0e:0b:1b:7e:7f:97:05:41:f3:37:f7:18:78:06:95:
df:5a:c5:e5:cb:b5:09:08:e3:27:ff:6b:97:76:88:62:2c:78:
2d:56:63:b5:ee:61:2e:9a:95:29:a9:34:af:c7:a7:01:bc:bd:
ff:9c:c1:a6:3b:80:85:9f:29:66:42:f3:96:ff:6b:0b:14:2e:
b4:3a:25:c5:45:a3:eb:1c:0d:c2:f1:8c:5f:91:be:11:e6:2e:
6e:82:eb:13:ff:50:32:b1:da:c8:b2:e1:af:19:dd:c1:80:c3:
12:22:45:a4:56:4b:2a:82:d4:06:a3:1d:ad:94:b1:f2:7f:4d:
4a:2f:97:57:33:74:a3:46:81:b6:2e:c1:5c:31:08:8e:4a:17:
97:1d:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:14 2025 by rpki-client