Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa
File: SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa (raw, json)
Hash identifier: OAmumDrq2brGzOON0ZBpmY/Uom5WD7nl6vre292Hhmg=
Subject key identifier: 48:F4:84:E3:23:DC:8B:F4:6C:D2:E9:44:7A:CE:94:F4:66:B9:68:42
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 0194258F723BDA21C6BB19375A838EA1AB79
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 185.37.16.0/22 maxlen: 22
195.200.80.0/23 maxlen: 24
2a00:f520::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:72:3b:da:21:c6:bb:19:37:5a:83:8e:a1:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48f484e323dc8bf46cd2e9447ace94f466b96842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:fc:bf:3b:85:a1:00:61:6d:06:9a:00:6b:
94:bb:9f:62:9c:9d:f4:32:e9:1d:2f:4c:f1:a7:12:
a6:fd:6a:ea:17:38:fe:3f:d3:ba:e2:3a:2b:fd:0b:
9a:00:74:ff:dc:a2:03:09:ea:f2:6d:3d:ef:16:08:
9d:aa:32:60:d8:8a:64:e2:f1:2c:08:d2:2f:88:7d:
45:5f:c2:b2:65:a1:11:a8:ea:60:5c:2c:6d:61:eb:
d3:46:ed:22:e8:73:e0:f4:d7:31:7d:ae:57:b1:21:
48:db:f7:cc:68:29:ff:bd:ae:75:8b:68:ab:90:29:
bd:db:ff:fd:98:57:5f:5b:60:d2:9a:b5:15:c4:fe:
3e:02:fb:74:56:b7:d5:f0:c5:34:82:84:59:c3:af:
85:1c:02:62:05:37:d0:3a:5b:94:8d:bb:3d:dc:3c:
6b:55:a0:f0:a8:fa:4b:4a:9c:d6:ec:de:2c:bb:9b:
86:50:9a:b1:2d:7a:5a:f9:6e:99:16:7c:49:78:10:
ad:8a:1e:09:85:70:4d:a6:be:2b:a6:9a:5e:ac:1c:
50:9c:3b:49:89:ee:1b:e0:f7:66:36:54:9e:c7:d5:
d4:a0:bd:c8:a5:65:4d:cb:c2:e0:c5:29:8c:46:ff:
57:e0:9c:0b:2c:65:96:3f:70:56:fd:15:23:e6:68:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:84:E3:23:DC:8B:F4:6C:D2:E9:44:7A:CE:94:F4:66:B9:68:42
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.16.0/22
195.200.80.0/23
IPv6:
2a00:f520::/32
Signature Algorithm: sha256WithRSAEncryption
77:98:bd:b8:54:6c:f5:3b:30:74:00:ca:ce:4d:c0:39:fb:ea:
a3:4f:5d:5a:d4:82:fa:db:70:2d:65:21:df:29:b6:77:d8:ea:
9e:aa:4b:5b:3f:cd:3c:c8:8e:d9:86:14:49:b3:5c:6c:fc:99:
98:36:03:ed:b0:57:ed:b2:03:17:0a:fa:c7:76:1f:62:8b:56:
a0:78:29:7d:6c:97:2e:b7:8e:71:83:23:f2:5d:04:16:70:c1:
37:f5:7b:31:7c:ba:d3:d5:1c:27:0d:40:0c:b0:76:41:05:f7:
1e:cc:bd:1b:6a:c6:b4:6e:e0:c2:33:41:08:89:4d:c7:93:03:
28:f4:0e:a6:50:6c:6c:20:12:fe:a0:be:57:b4:b1:17:59:b7:
06:e4:d8:a9:aa:c3:d3:1e:cb:46:7d:b2:49:62:f0:15:f8:1d:
04:01:a9:60:5d:56:23:56:6a:99:3b:13:ba:ef:d5:77:31:2b:
df:00:16:f4:a0:8a:97:1c:cb:a5:e6:9f:eb:dd:3a:b6:46:e3:
f9:75:5a:1c:94:a3:ca:49:99:9e:a5:a0:cd:9f:d0:25:78:e3:
e0:df:20:ce:3d:c0:14:bc:f8:ff:20:8e:62:fb:8b:c0:6e:8c:
1b:40:df:23:b7:03:f7:ea:13:6a:31:75:6a:21:ba:e4:9d:0e:
a8:e7:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:15 2025 by rpki-client