Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SFhIdcON_M_nlCZOPTyHBxV36PE.roa
File: SFhIdcON_M_nlCZOPTyHBxV36PE.roa (raw, json)
Hash identifier: eibC4Pd8NHu6+d+EDd97CrTOgjKp+ZTm7DDzsAeETgc=
Subject key identifier: 48:58:48:75:C3:8D:FC:CF:E7:94:26:4E:3D:3C:87:07:15:77:E8:F1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C6CBF43474EF616F3C74B75EF528D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SFhIdcON_M_nlCZOPTyHBxV36PE.roa
Signing time: Thu 02 Jan 2025 09:50:27 +0000
ROA not before: Thu 02 Jan 2025 09:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34137
IP address blocks: 79.105.0.0/16 maxlen: 16
79.105.128.0/17 maxlen: 17
85.88.160.0/19 maxlen: 19
89.109.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:6c:bf:43:47:4e:f6:16:f3:c7:4b:75:ef:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48584875c38dfccfe794264e3d3c87071577e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:b3:07:b0:a1:b9:f7:e1:25:2b:f4:0f:f1:
96:e0:18:26:68:dd:a1:99:cc:b6:0d:50:78:4f:df:
ab:be:1b:29:d9:87:2c:d8:ac:be:f7:ad:98:75:db:
c5:a9:33:3e:22:b3:c0:00:f4:33:57:b6:41:57:51:
a8:33:47:28:59:da:1c:51:ea:59:9a:62:38:ee:f7:
ae:54:cd:6a:16:75:b8:cb:76:2c:a5:c8:0f:23:f2:
67:4b:24:4b:fb:d0:cd:4c:78:cb:b3:2e:44:40:1e:
f6:52:d4:9c:0b:a4:58:50:55:87:53:ec:bc:59:6d:
25:44:e5:eb:73:88:23:d3:cb:b2:20:db:2b:d5:70:
6c:c6:76:8a:3c:d0:5d:bc:ee:78:1d:95:8c:a2:dc:
a8:b1:7c:8d:c9:e8:35:5e:37:05:e0:b8:71:21:c5:
e8:6d:18:26:d0:67:61:b8:c7:83:b2:0c:c6:01:81:
d5:34:42:fd:4d:7f:15:af:16:75:09:ba:61:1a:14:
a8:97:85:10:ee:b5:b3:4c:11:db:6f:0b:a6:2a:c0:
dc:7a:44:25:a4:ed:25:fe:b4:d6:99:cb:2f:66:9b:
20:8b:e9:d7:6b:28:7a:ad:29:77:42:3d:33:d6:3e:
95:fc:b9:d7:a2:a6:5a:0a:5c:37:02:13:3a:9b:74:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:58:48:75:C3:8D:FC:CF:E7:94:26:4E:3D:3C:87:07:15:77:E8:F1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/SFhIdcON_M_nlCZOPTyHBxV36PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.105.0.0/16
85.88.160.0/19
89.109.128.0/18
Signature Algorithm: sha256WithRSAEncryption
03:f4:7a:a9:e3:6a:c9:0c:4f:2e:92:79:db:0d:2d:9b:7e:2c:
ec:c2:22:56:84:84:1d:78:57:74:de:bd:58:dd:8e:9d:8c:fa:
d0:a0:1f:4d:53:79:a3:bd:70:02:89:ef:83:7c:32:3a:c8:38:
fb:15:b2:b4:ee:f0:dd:77:04:20:e1:6e:81:fc:f8:aa:77:d9:
b3:9b:fe:b2:b4:80:31:e7:a8:bd:b8:f9:34:b1:7a:56:76:c1:
d1:a6:a2:92:2f:92:19:23:7f:10:d1:1b:76:d6:9f:8a:f4:2f:
52:88:a0:30:db:8d:f7:1f:9e:8e:76:0d:ad:18:24:09:00:da:
28:a4:12:f6:84:5a:c8:53:0c:3d:c3:2b:fc:dd:48:d1:b8:a5:
d6:f1:4f:db:2e:f0:93:c3:e5:39:01:c3:27:41:1e:4f:63:3f:
59:a9:63:27:31:60:77:16:9a:97:0b:55:16:45:a2:b7:ab:d2:
eb:15:40:8c:23:bb:15:a1:57:e3:80:af:b5:82:14:01:1d:6c:
25:db:00:1a:d1:ab:aa:ba:84:e6:34:b6:b7:e0:5e:7a:f4:b8:
1f:ac:32:1a:50:3b:99:92:61:c2:45:69:d6:4a:c1:1f:95:34:
4e:93:1d:49:a6:d6:93:71:eb:20:dd:cf:80:06:f8:20:bf:ad:
76:49:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:52 2025 by rpki-client