Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/SvCn28QlY3H7uObVMGkQTVr8wro.roa
File: SvCn28QlY3H7uObVMGkQTVr8wro.roa (raw, json)
Hash identifier: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=
Subject key identifier: 4A:F0:A7:DB:C4:25:63:71:FB:B8:E6:D5:30:69:10:4D:5A:FC:C2:BA
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019426D8DE90AC3074F50C9847271F056C12
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/SvCn28QlY3H7uObVMGkQTVr8wro.roa
Signing time: Thu 02 Jan 2025 11:48:54 +0000
ROA not before: Thu 02 Jan 2025 11:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.228.0/24 maxlen: 24
195.69.229.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
195.69.231.0/24 maxlen: 24
2a09:2880::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2883::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:de:90:ac:30:74:f5:0c:98:47:27:1f:05:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 2 11:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af0a7dbc4256371fbb8e6d53069104d5afcc2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:cd:6f:78:e4:86:d8:d6:70:07:dd:6d:5d:
6e:38:91:5f:47:fa:0f:72:80:90:de:e3:10:d7:46:
93:09:57:0d:81:e8:70:9d:d5:06:4a:61:6e:fe:38:
a3:37:e3:37:67:8d:e3:f9:8e:a2:df:6c:1f:dd:91:
9e:6c:48:a9:38:e3:22:0a:85:06:b0:8a:c0:13:9a:
6b:3e:bc:bf:32:a1:99:54:78:66:a3:97:21:c8:35:
77:68:82:05:fe:cb:dc:e4:06:d8:41:4b:41:4c:ff:
90:d7:99:02:4b:cf:04:ba:fd:db:59:22:33:6a:68:
32:96:8a:3f:88:d8:a2:e7:c8:e3:ae:b0:43:69:dd:
4f:03:50:c4:b0:13:d0:95:22:39:40:0f:c5:26:5b:
6c:2d:14:73:ee:bf:24:12:69:e0:d3:30:53:53:58:
6b:85:bc:03:2a:af:1c:dd:7e:ed:28:32:87:cf:57:
24:c8:aa:a7:2d:bb:e9:4f:79:46:83:6f:bd:66:19:
74:37:4d:5c:33:66:21:82:8b:2b:b7:4b:c4:b4:0b:
13:40:9f:64:0e:d4:07:62:8e:c3:62:b1:dc:1e:39:
9f:af:7a:75:37:fe:ad:24:a0:9e:38:91:ad:0a:8c:
cf:cd:7c:79:00:05:ff:57:85:cd:5d:88:ac:38:8c:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:A7:DB:C4:25:63:71:FB:B8:E6:D5:30:69:10:4D:5A:FC:C2:BA
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/SvCn28QlY3H7uObVMGkQTVr8wro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.228.0/22
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
35:81:f8:be:0b:21:c4:74:75:0c:e0:eb:c3:47:d5:1f:c6:4b:
80:e6:78:44:8f:94:f1:43:7b:64:88:1e:4f:a7:50:6e:00:0e:
03:50:f3:23:15:29:cd:7b:40:19:3d:f8:df:61:28:96:de:34:
54:53:08:32:51:a0:73:5b:9a:ce:bf:33:6d:a2:83:4e:ac:54:
eb:2e:2a:9d:0d:31:b3:87:7d:f1:45:15:7d:74:99:f0:33:81:
ce:a4:1f:58:85:5b:ea:36:15:15:a7:5f:a5:d2:24:71:a7:de:
63:24:23:27:d4:1d:89:d2:66:ad:bd:bc:44:62:04:d9:58:df:
dd:43:62:58:2c:85:c9:3d:7f:6d:c5:98:f2:0c:39:ed:22:9b:
30:ef:7b:9d:0c:8b:6b:a8:20:d6:a4:64:f1:fa:d3:56:dd:dd:
ca:38:c7:9d:ea:7e:a3:33:24:91:80:e1:39:c5:8b:c1:28:14:
16:e5:07:8d:c2:ac:79:de:c9:29:5a:a5:1b:78:8a:74:1c:b2:
1b:0b:e9:03:e6:2b:8d:8f:b8:8a:12:f1:9e:1f:c1:f2:1d:24:
66:f4:64:50:67:a6:23:af:14:18:18:34:54:6a:98:e1:c5:78:
31:a8:85:7b:09:0a:c1:ba:7a:c7:5a:94:fb:75:f0:27:be:33:
d4:8f:2b:39
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZQm2N6QrDB09QyYRycfBWwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MGM5ZWM1ZDQwNTg2ZWQzMjU1ZjBmYzRmY2IzMTU3NzE0
ZGRhMTUwHhcNMjUwMTAyMTE0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWYwYTdkYmM0MjU2MzcxZmJiOGU2ZDUzMDY5MTA0ZDVhZmNjMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQLNb3jkhtjWcAfdbV1uOJFfR/oP
coCQ3uMQ10aTCVcNgehwndUGSmFu/jijN+M3Z43j+Y6i32wf3ZGebEipOOMiCoUG
sIrAE5prPry/MqGZVHhmo5chyDV3aIIF/svc5AbYQUtBTP+Q15kCS88Euv3bWSIz
amgyloo/iNii58jjrrBDad1PA1DEsBPQlSI5QA/FJltsLRRz7r8kEmng0zBTU1hr
hbwDKq8c3X7tKDKHz1ckyKqnLbvpT3lGg2+9Zhl0N01cM2Yhgosrt0vEtAsTQJ9k
DtQHYo7DYrHcHjmfr3p1N/6tJKCeOJGtCozPzXx5AAX/V4XNXYisOIy8IQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFErwp9vEJWNx+7jm1TBpEE1a/MK6MB8GA1UdIwQY
MBaAFAYMnsXUBYbtMlXw/E/LMVdxTdoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDct
OWUwYTUxM2RlZWYyLzEvU3ZDbjI4UWxZM0g3dU9iVk1Ha1FUVnI4d3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hZTNhM2UtMmMwYy00MDVlLWJjZDctOWUwYTUxM2RlZWYy
LzEvQmd5ZXhkUUZodTB5VmZEOFQ4c3hWM0ZOMmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAMBAIAATAGAwQCw0XkMDwE
AgACMDYDBwAqCSiAAAADBwAqCSiBAAADBwAqCSiCAAADBwAqCSiDAAADBwAqCSiE
AAADBwAqCSiFAAAwDQYJKoZIhvcNAQELBQADggEBADWB+L4LIcR0dQzg68NH1R/G
S4DmeESPlPFDe2SIHk+nUG4ADgNQ8yMVKc17QBk9+N9hKJbeNFRTCDJRoHNbms6/
M22ig06sVOsuKp0NMbOHffFFFX10mfAzgc6kH1iFW+o2FRWnX6XSJHGn3mMkIyfU
HYnSZq29vERiBNlY391DYlgshck9f23FmPIMOe0imzDve50Mi2uoINakZPH601bd
3co4x53qfqMzJJGA4TnFi8EoFBblB43CrHneySlapRt4inQcshsL6QPmK42PuIoS
8Z4fwfIdJGb0ZFBnpiOvFBgYNFRqmOHFeDGohXsJCsG6esdalPt18Ce+M9SPKzk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:03 2025 by rpki-client