Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/SNph92J-Xcf8IveNNNu0MkGJVWI.roa
File: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (raw, json)
Hash identifier: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=
Subject key identifier: 48:DA:61:F7:62:7E:5D:C7:FC:22:F7:8D:34:DB:B4:32:41:89:55:62
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019420D63A9065CDCE49846E87DA76BFCCAE
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/SNph92J-Xcf8IveNNNu0MkGJVWI.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 5.63.24.0/21 maxlen: 21
91.190.168.0/21 maxlen: 21
185.85.76.0/22 maxlen: 22
2a02:798::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:90:65:cd:ce:49:84:6e:87:da:76:bf:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48da61f7627e5dc7fc22f78d34dbb43241895562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:9c:92:c7:cb:43:3d:bc:1d:a3:ea:95:50:
93:fd:04:17:9e:f1:33:57:f1:16:21:1b:6f:7a:7f:
48:d3:35:da:1d:ea:a8:9d:6c:b6:e2:62:45:1a:6a:
3f:b6:7a:d4:1e:b9:cc:3b:34:59:3c:11:a4:ba:31:
2c:81:a8:49:8a:0f:62:83:37:f2:7d:06:7a:e7:2a:
49:2d:7c:10:ff:5b:76:35:b9:26:e8:72:34:37:78:
1d:c6:a5:ad:2d:67:ff:25:94:11:ea:8a:d5:a1:92:
6d:2f:8a:6a:eb:7d:3e:f0:c1:40:e8:47:49:52:9e:
33:4e:0a:f7:5a:c6:96:7c:a2:4e:26:94:00:b6:06:
01:6a:bf:c5:6e:9d:91:b2:58:f7:ae:06:7e:f4:e4:
5e:17:44:c4:37:18:c3:98:b2:b7:a4:3a:dc:5d:cf:
7b:ed:4f:7d:38:dd:86:73:c2:0c:b6:62:38:2d:f7:
d0:ab:5c:9f:a2:19:58:d3:de:68:b9:75:3c:8a:d3:
ea:58:49:8f:c9:1e:98:6d:f5:6b:00:f8:02:c5:17:
00:7b:17:e7:37:de:1b:b2:bf:1c:90:b4:20:a4:18:
33:ed:00:91:ae:9d:3f:83:c2:e6:7a:de:e2:e5:1a:
0a:45:36:8a:89:ad:a5:50:be:16:4d:51:b9:32:54:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:61:F7:62:7E:5D:C7:FC:22:F7:8D:34:DB:B4:32:41:89:55:62
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/SNph92J-Xcf8IveNNNu0MkGJVWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
67:3a:e4:43:6e:e8:67:3f:e2:45:0a:88:d1:59:f6:17:b7:34:
80:32:82:80:4d:54:c7:60:e1:8e:71:1f:14:17:3a:c5:e3:3b:
8a:1f:b6:d4:69:46:85:46:a8:55:2b:5f:bc:34:69:42:bf:55:
f0:7e:65:33:99:be:b0:4d:82:0b:21:56:f3:79:e6:fd:3c:ba:
04:45:3a:e9:91:07:43:88:26:d6:52:09:e0:c5:db:6e:a7:9b:
f1:cc:5c:b5:d3:76:9f:40:e3:ba:c3:fe:e1:21:1f:9d:3b:ab:
60:4b:e7:21:9e:31:09:f2:6e:3f:ea:c4:2f:75:28:e7:0c:a0:
cc:7b:c5:6e:20:74:6e:f4:83:3a:c0:6b:ba:a4:c3:d7:7d:11:
7f:0b:ec:46:80:45:11:93:5c:5b:b9:d7:49:68:76:d2:cb:b7:
6e:22:af:50:55:ac:c6:32:9d:4d:4b:d4:32:7d:f9:7b:0d:a4:
3b:6d:64:9b:e1:27:84:98:04:23:93:21:05:bb:67:b6:d1:38:
4e:c7:dd:4f:da:b0:95:7f:ae:7c:d0:a5:87:9a:8c:85:a7:04:
d6:78:6e:66:58:a5:cc:03:5b:32:19:0b:73:ff:09:28:90:6e:
22:13:2d:b7:50:4a:05:be:94:64:03:8b:2a:73:b8:6d:dd:f9:
f6:50:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:26 2025 by rpki-client