Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/svsHgTKbSt-q2-rESrjX7HwSyco.roa
File: svsHgTKbSt-q2-rESrjX7HwSyco.roa (raw, json)
Hash identifier: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=
Subject key identifier: B2:FB:07:81:32:9B:4A:DF:AA:DB:EA:C4:4A:B8:D7:EC:7C:12:C9:CA
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 01942067C88677285E6CD78ABB41A2B8B336
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/svsHgTKbSt-q2-rESrjX7HwSyco.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 89.31.192.0/21 maxlen: 21
89.31.192.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c8:86:77:28:5e:6c:d7:8a:bb:41:a2:b8:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fb0781329b4adfaadbeac44ab8d7ec7c12c9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:c3:dd:51:b7:e2:a0:bd:72:e3:03:56:f7:
f0:29:8d:c2:fc:ae:4e:c2:4d:7f:df:60:02:6e:6e:
67:2d:71:72:5d:3d:90:26:34:03:14:24:38:1d:2d:
0c:5e:b4:d0:d2:09:40:32:c6:a0:5d:d8:70:aa:72:
81:10:1e:b9:cd:91:8a:ec:79:d6:e1:c1:17:39:0a:
20:19:6b:3d:5a:a5:a3:5a:89:f8:f6:3c:82:c3:38:
e0:ba:4b:84:7f:56:85:ab:cd:eb:f0:e7:b0:5c:5b:
d8:a6:90:20:bd:2e:27:9a:9b:84:f6:3f:f1:66:2f:
18:f1:b0:4e:e1:a6:fd:a3:75:c2:90:26:63:e5:14:
3f:5f:57:24:a6:94:80:5e:0d:6e:35:83:21:c3:fb:
7d:89:6c:4b:da:aa:f8:5a:df:bd:4c:55:84:c7:b2:
57:45:ab:2d:6e:3b:47:54:4b:de:e6:54:02:fe:df:
42:2b:17:fd:4f:08:51:c7:bf:88:7c:4a:44:bf:92:
33:46:28:5c:a5:ff:85:3d:f5:0a:fb:10:d6:ec:51:
66:37:49:7b:7c:f3:27:2c:ac:c9:71:20:cd:fd:d8:
21:dc:35:af:e0:18:60:47:8a:c8:10:a2:76:1d:99:
ce:19:d8:73:af:fd:89:65:df:22:04:ef:cc:38:ad:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:07:81:32:9B:4A:DF:AA:DB:EA:C4:4A:B8:D7:EC:7C:12:C9:CA
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/svsHgTKbSt-q2-rESrjX7HwSyco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:e6:2b:46:19:50:97:c3:bc:c9:72:1b:66:f5:1d:2f:ad:2b:
e8:4f:bb:38:0b:92:5b:a4:df:9d:60:94:b3:b9:b3:e9:fd:3e:
64:e6:83:c6:34:46:f6:28:cc:63:83:b9:2a:39:61:6c:80:58:
a6:c8:cd:61:de:36:57:45:f7:89:a2:89:27:8a:c7:f5:ee:8e:
7a:99:12:d9:19:66:73:4b:cd:16:2e:be:e7:8e:07:49:a5:2b:
a7:a2:99:49:a1:75:f6:70:ae:dd:70:05:75:98:57:fd:80:37:
cb:bf:7a:5b:3c:5d:e5:ff:c7:41:02:90:99:7b:0b:25:7e:5a:
bd:3d:4e:fc:72:0d:4e:a6:98:65:84:0e:63:75:f0:d3:2a:1d:
62:3f:38:d8:15:11:22:98:1a:62:e2:5a:8e:36:84:d7:29:1f:
25:cf:c7:a6:5f:bb:29:13:21:01:5f:2e:d1:97:2c:77:13:9b:
d2:eb:83:99:01:b7:79:3d:c6:7a:ee:92:90:4e:6e:44:bc:32:
69:e9:46:13:b7:fe:bb:f3:15:48:ba:dd:fa:f2:9e:17:51:97:
b0:fe:b5:93:b9:cc:5a:5d:ec:ab:b8:09:a1:40:60:76:37:f3:
74:39:8b:f3:47:b1:00:dc:07:47:a7:5b:98:2d:52:51:e7:a0:
0b:bd:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:52 2025 by rpki-client