Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/SV9kNq2IEFMcsiU27EYmGZik5t0.roa
File: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (raw, json)
Hash identifier: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=
Subject key identifier: 49:5F:64:36:AD:88:10:53:1C:B2:25:36:EC:46:26:19:98:A4:E6:DD
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0194266C08D013E29F4215DC4350439F7F0A
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/SV9kNq2IEFMcsiU27EYmGZik5t0.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25424
IP address blocks: 37.9.192.0/21 maxlen: 21
77.92.192.0/19 maxlen: 19
85.92.32.0/19 maxlen: 19
91.109.32.0/21 maxlen: 21
185.157.196.0/22 maxlen: 22
188.244.48.0/20 maxlen: 20
212.111.0.0/19 maxlen: 19
2a00:e580::/29 maxlen: 29
2a0a:3340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:08:d0:13:e2:9f:42:15:dc:43:50:43:9f:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=495f6436ad8810531cb22536ec46261998a4e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:39:34:85:86:07:4e:59:59:46:09:0d:d8:
af:99:55:e5:34:9a:ad:1b:27:ec:3d:79:cc:68:7d:
0e:4c:de:e2:ad:7a:32:04:a1:21:0c:39:e4:8d:cf:
5b:4d:24:55:ad:68:cc:30:31:42:10:99:a9:a0:96:
95:ec:23:94:c5:df:0a:22:8e:2f:db:1f:bb:fd:56:
d0:e5:29:2c:b5:f7:e0:3a:3f:f8:ed:b5:42:cd:37:
ca:ae:f7:6e:07:a9:81:07:ab:03:3b:09:b8:c4:30:
de:cc:0a:54:ef:77:a8:94:52:3f:bc:b8:f8:43:6e:
10:8f:05:ad:c4:13:d1:f8:54:1e:49:7f:33:50:c0:
0c:e8:7b:88:f2:37:32:8b:66:6d:66:a9:01:72:d1:
44:12:76:c1:fd:e5:da:5b:c1:03:fa:53:97:64:1f:
fd:d7:32:64:2c:88:ae:d7:3f:47:c3:7f:94:43:cb:
e3:ac:1a:e5:fe:8f:a0:ff:ae:70:a2:1c:61:ac:97:
e7:cd:bc:e7:02:67:87:bb:1d:81:7f:24:e3:98:31:
25:7e:d4:fc:bb:b9:0b:f7:8f:45:9f:73:86:ff:2b:
78:78:b2:a1:94:86:ea:10:71:ce:8f:8e:60:7d:60:
8f:3e:b9:5e:4a:3a:fa:9f:a6:c2:6f:cc:2a:a5:2f:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:64:36:AD:88:10:53:1C:B2:25:36:EC:46:26:19:98:A4:E6:DD
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/SV9kNq2IEFMcsiU27EYmGZik5t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.192.0/21
77.92.192.0/19
85.92.32.0/19
91.109.32.0/21
185.157.196.0/22
188.244.48.0/20
212.111.0.0/19
IPv6:
2a00:e580::/29
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
95:60:e9:e9:37:26:69:96:e8:ec:39:fa:a3:5f:b5:0b:46:f7:
fc:80:37:87:20:06:69:cd:a0:20:5c:eb:8f:1f:d7:d8:3a:27:
67:ce:a7:81:cb:c6:b2:53:c1:3a:9e:34:de:ab:47:e4:26:0b:
0f:d1:42:02:ba:3e:c8:13:df:62:82:d4:ba:3f:c5:e5:b2:d6:
f7:31:33:84:78:d3:af:ac:db:cd:49:7d:14:fb:c5:d2:b4:49:
15:63:54:29:ad:0f:9c:4d:60:33:73:b6:7b:66:59:e8:5c:54:
9d:b7:9e:11:48:15:ca:62:21:0d:1f:24:bb:4e:e6:ae:b8:7a:
12:99:a3:1a:1b:ec:47:3f:c1:66:8f:76:53:cb:4a:d7:d2:2c:
ff:15:94:d2:c0:83:02:aa:35:34:27:a1:da:8a:b0:55:8f:20:
cd:f8:f7:9e:95:12:3d:1c:dd:f2:7b:70:05:b6:3f:05:ba:9e:
bb:e7:bb:b2:68:56:72:de:d9:1d:ef:8d:24:a4:ff:df:84:8c:
c7:74:6e:f1:20:0d:34:4f:23:47:da:b6:bf:cb:66:51:d2:34:
19:ff:ae:d7:2b:6b:e2:8c:34:49:81:c5:f9:03:15:b6:47:3c:
d5:dd:b2:f3:cf:b5:af:1c:78:4c:f3:aa:f1:cb:4d:bd:69:36:
a5:e9:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:13 2025 by rpki-client