Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/SVlWKeohMOcF6xHSXiNd5lUafpA.roa
File: SVlWKeohMOcF6xHSXiNd5lUafpA.roa (raw, json)
Hash identifier: Wp/8ATJDwVCyjXkp7lyAOypOK4W4n7X119jgESzzerk=
Subject key identifier: 49:59:56:29:EA:21:30:E7:05:EB:11:D2:5E:23:5D:E6:55:1A:7E:90
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 018CC56E0749A198D27C344C831EF262EE6E
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/SVlWKeohMOcF6xHSXiNd5lUafpA.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47617
IP address blocks: 195.162.128.0/19 maxlen: 19
195.162.128.0/20 maxlen: 20
93.187.208.0/24 maxlen: 24
93.187.209.0/24 maxlen: 24
93.187.210.0/24 maxlen: 24
93.187.208.0/21 maxlen: 21
195.162.144.0/20 maxlen: 20
93.187.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:49:a1:98:d2:7c:34:4c:83:1e:f2:62:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49595629ea2130e705eb11d25e235de6551a7e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:c9:f0:fd:25:58:19:29:1b:7e:80:9e:64:
0b:02:5c:1d:34:79:a1:58:ea:8f:62:1a:3b:ed:7a:
aa:35:02:d3:28:a3:5d:72:98:00:0a:95:89:65:3e:
1b:9f:cb:71:1c:0a:a1:90:b5:b0:91:ec:0d:d7:75:
d4:a4:77:4b:1c:7b:10:fe:5c:0a:90:23:d5:4a:b4:
1c:7e:79:88:44:0d:c7:fe:ae:6d:b4:fe:16:4f:25:
87:d7:02:b0:61:f5:8e:ea:58:6d:7f:88:05:63:be:
2c:af:82:47:0d:44:30:1e:4c:c2:12:da:19:0f:22:
32:ef:3d:96:2b:e3:da:ef:c2:48:66:58:27:d5:5a:
37:b8:ea:7a:d9:5d:3f:fd:b2:81:f8:bb:bb:32:0b:
8e:1b:a3:47:48:4d:38:9a:93:36:df:88:95:d3:e7:
b4:c0:0d:6d:87:6a:dc:ab:e5:09:f5:5d:b9:39:57:
f0:fc:48:7c:68:b3:9b:9e:0e:00:df:eb:0f:84:4b:
bb:9a:2c:70:d5:3c:5b:0e:79:42:28:97:1e:9c:05:
2b:b3:b4:68:75:c2:89:39:8a:e1:7b:1b:67:2d:a0:
43:b1:07:d2:da:2f:15:4f:94:95:b6:21:d9:60:23:
fb:bb:2b:aa:4f:d9:a8:23:d4:82:8c:8f:3c:e7:26:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:56:29:EA:21:30:E7:05:EB:11:D2:5E:23:5D:E6:55:1A:7E:90
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/SVlWKeohMOcF6xHSXiNd5lUafpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.208.0/21
195.162.128.0/19
Signature Algorithm: sha256WithRSAEncryption
94:8e:73:70:19:d5:fd:ca:15:44:b9:5b:b5:4e:20:04:ef:d7:
3b:f5:08:98:ed:8a:79:84:e3:0f:6f:3f:73:02:eb:95:29:09:
92:3f:e3:35:2a:cb:f4:48:43:65:c1:b9:7f:3c:fe:48:e9:7d:
17:d1:54:c4:42:4c:00:ef:04:1f:b0:d4:95:ea:5d:cc:95:0a:
77:9b:b8:67:10:94:66:df:d9:45:6d:3d:9f:b1:65:00:ea:7a:
f6:61:6b:2d:da:eb:54:b0:f2:99:ba:c1:7c:e6:6f:dd:29:d5:
6d:ce:54:3c:9d:58:55:62:9c:7e:22:d7:0e:da:d2:f8:01:f3:
5d:53:22:1f:15:37:fd:64:16:ad:0d:00:29:2c:01:a6:2d:c6:
15:1b:bd:db:c0:fc:40:9f:02:f8:ca:e9:06:f2:0d:d0:64:0c:
b6:41:ab:b4:42:fb:1b:31:fc:e0:4b:b0:0d:6a:01:f8:d1:f0:
98:92:91:70:cd:ce:48:4b:26:91:40:3e:80:17:4c:17:27:7f:
79:41:1d:f4:38:f5:e9:55:0d:ed:0a:e4:11:cf:3d:8e:b5:6e:
65:53:65:86:48:97:e3:c6:13:25:00:e3:d2:f4:bb:33:0b:0d:
5a:22:8b:c2:a3:39:e0:a0:3f:91:37:18:a8:ba:99:d3:c6:c6:
99:da:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:17:26 2025 by rpki-client