Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa
File: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (raw, json)
Hash identifier: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=
Subject key identifier: 49:51:4D:09:70:20:B3:E2:75:52:BD:0C:DB:0B:95:59:A4:C1:CD:02
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019423D6E339B41AEF2F419400A3E50C2A45
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 213.109.150.0/24 maxlen: 24
2001:3bc0:b1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e3:39:b4:1a:ef:2f:41:94:00:a3:e5:0c:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49514d097020b3e27552bd0cdb0b9559a4c1cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:28:a8:b0:23:f5:90:6c:7d:ac:6b:8a:df:
26:87:53:1a:34:fc:49:5b:19:26:3d:e3:0d:e1:27:
30:a2:24:13:3d:b5:53:2e:e0:90:f0:c0:18:b0:e2:
13:9c:f5:24:18:6a:22:0d:ca:95:d1:2a:13:90:c4:
5b:e3:96:96:0f:f1:04:43:ae:4a:f3:dc:f6:24:a8:
40:d5:17:df:89:a4:7f:fb:7d:1b:22:2a:eb:56:be:
5f:bb:12:18:8c:5b:d3:dc:cd:d8:0a:62:ea:45:5e:
cb:43:de:b4:3e:4c:50:0c:9c:16:1f:a2:42:13:17:
bf:4c:87:de:6e:68:fc:9f:5b:df:cf:d2:24:d0:d0:
5c:55:9c:22:11:a2:92:8b:95:48:6d:bb:27:17:9f:
05:61:e0:5f:b7:55:a5:cc:46:5d:de:00:e4:70:01:
87:87:91:0f:74:db:e2:d7:e7:44:97:e0:4a:23:58:
bc:72:e8:3d:12:f2:a8:8d:f7:97:21:9a:7b:2f:46:
f8:f2:8a:9f:55:b7:90:e7:cc:b0:65:70:b1:bc:73:
25:b3:18:0c:d2:d7:d3:30:3e:e7:bd:45:85:46:9f:
f9:f7:d5:8d:d5:d8:92:6d:70:e0:12:1d:29:9a:d3:
91:e4:3e:55:59:a4:f1:f7:bd:45:01:74:82:05:57:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:4D:09:70:20:B3:E2:75:52:BD:0C:DB:0B:95:59:A4:C1:CD:02
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.150.0/24
IPv6:
2001:3bc0:b1d::/48
Signature Algorithm: sha256WithRSAEncryption
12:56:4b:1e:cb:07:50:07:3c:10:8e:01:40:e4:f0:71:7e:cb:
65:c5:7a:8e:d6:a2:ca:81:35:52:0c:7e:4a:43:5d:4b:66:fe:
5e:f4:06:df:3b:9d:37:a9:94:8e:d4:0f:5e:2f:0d:e3:ba:d6:
cb:61:ca:be:02:f3:fa:8d:2e:9c:2f:f1:ec:30:bf:82:72:2b:
ad:d8:51:e5:f7:f8:3e:5e:f9:19:2e:3d:28:73:1a:7d:f7:e8:
f1:38:3e:e2:45:40:eb:cb:8e:5f:52:0d:f0:0b:0e:5f:f7:e4:
13:da:c9:ee:21:6e:be:b2:ad:4f:f3:7f:c8:34:de:13:ca:69:
89:03:60:5f:6e:17:84:4c:96:8e:d1:17:5b:8a:5e:af:35:3e:
5e:08:2b:2c:07:22:54:15:75:0d:96:ab:13:e1:89:0c:3c:4c:
3b:98:4d:61:5e:ea:99:3d:69:29:ec:98:a1:59:86:59:38:30:
98:3a:f3:9f:42:7b:eb:37:c0:6c:ca:85:4e:d0:7c:e7:c7:6c:
5b:25:26:71:68:ab:cb:3a:6c:c7:b1:5c:23:16:9c:b6:56:1a:
c8:f9:57:d3:76:30:04:64:ef:cf:7c:de:a8:4f:b3:60:8f:d0:
4c:09:d5:c9:7a:e9:79:a0:cc:6a:e3:fc:cf:3e:82:e1:f6:89:
12:25:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:07 2025 by rpki-client