Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/snNBqH-54jS2dGd9kUA2wImuV_A.roa
File: snNBqH-54jS2dGd9kUA2wImuV_A.roa (raw, json)
Hash identifier: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=
Subject key identifier: B2:73:41:A8:7F:B9:E2:34:B6:74:67:7D:91:40:36:C0:89:AE:57:F0
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019422FB016967E88D35DF3E0A11129FEEFB
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/snNBqH-54jS2dGd9kUA2wImuV_A.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39280
IP address blocks: 46.228.176.0/20 maxlen: 20
46.228.176.0/21 maxlen: 21
46.228.184.0/21 maxlen: 21
81.21.80.0/20 maxlen: 20
81.21.80.0/21 maxlen: 21
81.21.88.0/21 maxlen: 21
93.184.224.0/20 maxlen: 20
93.184.224.0/21 maxlen: 21
93.184.232.0/21 maxlen: 21
185.41.200.0/22 maxlen: 22
185.41.200.0/23 maxlen: 23
185.41.202.0/23 maxlen: 23
2a03:ba40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:01:69:67:e8:8d:35:df:3e:0a:11:12:9f:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b27341a87fb9e234b674677d914036c089ae57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:6c:67:b9:50:6f:c0:5d:6a:b7:3b:02:9c:
1e:d0:50:8c:78:02:b6:22:85:6e:d7:db:8f:fe:56:
06:39:07:16:5c:a2:d6:8c:17:58:87:66:2a:04:24:
37:17:63:f9:63:85:9b:f2:da:d3:a5:34:c0:89:c0:
33:90:19:6c:68:16:02:5f:8c:6a:cb:67:8a:70:ea:
c6:64:79:88:1d:64:56:3b:1b:91:8e:52:f2:6c:57:
8d:f9:57:93:80:3a:f3:6d:66:d9:d2:80:9b:57:8b:
cd:97:ae:23:32:62:41:d5:b3:aa:6c:24:72:a8:77:
4f:4c:b7:69:38:bc:f6:d8:bc:e8:93:98:25:33:95:
e7:82:36:a9:99:c5:84:df:65:d4:d9:a1:ed:2e:c5:
ed:c8:25:1f:77:14:cc:1d:e6:8a:7a:6c:17:71:6c:
f5:b8:01:7a:0d:55:1a:af:b6:7e:17:3b:82:3b:fe:
8b:b2:0c:3a:ed:24:88:9a:27:1c:04:de:12:4c:2a:
7c:d3:7a:95:7a:00:12:8e:28:85:3f:87:18:eb:61:
bf:ab:ba:ad:c6:ba:97:5f:04:c8:3e:c6:f0:9b:28:
d1:5e:33:97:7b:1a:86:8c:95:37:5d:fc:a4:11:3d:
b4:13:02:c8:b4:cb:ad:c9:26:f8:cd:96:ff:33:5f:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:41:A8:7F:B9:E2:34:B6:74:67:7D:91:40:36:C0:89:AE:57:F0
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/snNBqH-54jS2dGd9kUA2wImuV_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.176.0/20
81.21.80.0/20
93.184.224.0/20
185.41.200.0/22
IPv6:
2a03:ba40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b2:e9:19:ba:6d:08:72:dc:2b:a9:73:c6:e3:66:1a:45:92:
3d:33:9e:2d:9c:51:d8:58:d3:77:0e:e5:e2:e4:73:bc:77:f3:
ac:e1:39:45:a2:d9:16:c6:c3:80:7b:38:fd:89:be:44:c2:ab:
ba:76:8d:ef:3d:3c:eb:69:7c:8b:12:5f:9b:99:c9:b1:70:dd:
e0:ba:82:6e:6c:ca:76:93:0b:7a:e0:02:fe:2f:6f:af:33:d0:
19:ed:93:02:84:4d:49:2c:08:1d:84:d6:74:d2:7d:c5:43:0c:
f7:b9:18:09:02:0e:f1:3e:11:63:af:fd:93:29:a2:c5:84:26:
02:89:10:8a:32:c3:90:9f:93:b2:52:b1:a1:c7:4a:d0:0e:94:
56:81:c9:26:e0:1f:99:39:1f:db:14:7f:34:a4:84:49:fb:f2:
a8:fc:09:99:d1:ce:db:2d:0d:5c:8d:cf:49:fe:0a:96:eb:65:
04:e9:7c:52:4d:d6:29:6f:64:a3:6a:55:e6:c6:de:3c:ee:8a:
fe:3a:0a:ba:ca:2f:cf:81:51:2c:df:11:fa:b3:74:ba:3f:c4:
68:06:23:82:13:01:37:92:90:ce:fd:8a:f2:0e:a9:dd:8e:42:
aa:97:f3:87:0b:79:b8:f6:7a:07:59:20:5a:23:b3:35:e4:9b:
e1:88:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:14 2025 by rpki-client