Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/SNbaGUSKCyyqtDaj7btdtZSwhTU.roa
File: SNbaGUSKCyyqtDaj7btdtZSwhTU.roa (raw, json)
Hash identifier: VVX87HM7oDWgI0/NYe2BQt7V8X7puYmbr8bC7y9q1F8=
Subject key identifier: 48:D6:DA:19:44:8A:0B:2C:AA:B4:36:A3:ED:BB:5D:B5:94:B0:85:35
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0194252192AAE912E30EC2449268648A986C
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/SNbaGUSKCyyqtDaj7btdtZSwhTU.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209788
IP address blocks: 95.183.44.0/23 maxlen: 24
95.183.46.0/24 maxlen: 24
188.68.80.0/24 maxlen: 24
188.68.90.0/24 maxlen: 24
188.68.91.0/24 maxlen: 24
188.68.92.0/24 maxlen: 24
188.68.93.0/24 maxlen: 24
192.54.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:aa:e9:12:e3:0e:c2:44:92:68:64:8a:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48d6da19448a0b2caab436a3edbb5db594b08535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:2f:e5:a1:71:ff:69:9a:ed:d3:3b:7b:25:
5c:14:6d:c3:d8:94:53:1f:47:62:4b:1c:c9:ea:86:
6c:04:53:02:5a:4d:af:a9:07:d4:63:9d:f8:51:a5:
c6:d1:e7:c1:56:c6:c0:63:73:37:be:61:47:69:78:
aa:7d:86:9c:20:cb:50:78:b5:dc:99:6f:7b:82:f8:
87:0a:02:08:9f:62:81:c3:bc:70:59:b0:d9:f1:88:
21:71:61:79:a2:a3:d8:a4:03:93:73:72:28:79:fc:
f1:d7:f2:0d:c2:47:f5:15:6c:ff:5a:bc:1b:6d:72:
e9:14:6c:31:00:65:38:89:09:c8:62:ee:0b:45:5d:
36:10:23:42:c9:88:1a:9e:d3:36:31:d0:29:4d:c0:
fb:ab:16:3d:df:4a:4a:f2:20:8c:3a:09:7d:a8:87:
b0:28:e0:e5:85:a9:0d:1d:f1:f4:d1:86:36:da:0e:
bd:d1:1b:4e:9f:a3:4c:4d:6e:2c:91:b7:c3:67:5a:
46:70:e7:71:05:01:a1:68:01:b4:6d:40:7e:b0:6a:
64:07:ab:29:c3:ad:31:e8:6d:13:7f:df:e9:9b:04:
9e:88:bc:3e:d9:97:21:3d:ba:ae:37:27:ae:b8:74:
c2:0c:dd:6e:11:62:cc:c6:aa:2a:4a:e8:c0:33:2d:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D6:DA:19:44:8A:0B:2C:AA:B4:36:A3:ED:BB:5D:B5:94:B0:85:35
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/SNbaGUSKCyyqtDaj7btdtZSwhTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.44.0-95.183.46.255
188.68.80.0/24
188.68.90.0-188.68.93.255
192.54.76.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9b:99:00:09:dc:81:de:2e:84:62:35:3a:c6:ab:d8:36:59:
71:2b:e0:4e:d4:68:ea:49:9a:5b:9e:df:be:81:81:6b:15:c8:
45:cc:ea:4b:8a:e6:8d:7f:12:30:e9:a6:f2:13:a3:17:61:c4:
94:e6:df:79:5d:b9:cb:e5:e3:47:96:08:91:15:92:a1:30:dc:
21:0f:a2:aa:6f:b4:f9:95:17:57:2f:0d:e9:43:2d:ac:fa:e3:
3e:c5:d7:1f:8b:d2:18:56:90:09:59:a8:e6:d5:0b:57:b2:de:
91:a0:dc:a2:a4:5c:76:f6:ca:1c:9e:5b:9a:83:7e:66:31:28:
c7:5b:09:45:b7:ec:dd:71:b9:47:82:17:85:f0:1a:cf:5e:ec:
e5:31:5d:db:b8:7d:da:0f:01:84:81:c3:c2:5f:73:d7:1f:8a:
42:87:3e:e4:77:f2:9b:94:8d:89:c3:fb:54:40:fa:0f:fc:24:
fe:b9:a8:2e:1e:44:1f:54:86:a2:8c:d2:a0:34:c4:49:62:2c:
40:ec:26:f9:2a:36:70:6e:a0:73:84:86:1b:15:84:97:34:f0:
ad:f3:36:40:69:ff:1f:5b:a9:f3:f1:2e:70:8d:1a:39:e9:ee:
aa:b0:8e:7b:a3:81:cd:3c:ee:4d:83:8a:a1:a4:51:3d:9e:b7:
a8:95:28:3b
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQlIZKq6RLjDsJEkmhkiphsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1
NDg4OTQwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGQ2ZGExOTQ0OGEwYjJjYWFiNDM2YTNlZGJiNWRiNTk0YjA4NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpEv5aFx/2ma7dM7eyVcFG3D2JRT
H0diSxzJ6oZsBFMCWk2vqQfUY534UaXG0efBVsbAY3M3vmFHaXiqfYacIMtQeLXc
mW97gviHCgIIn2KBw7xwWbDZ8YghcWF5oqPYpAOTc3Ioefzx1/INwkf1FWz/Wrwb
bXLpFGwxAGU4iQnIYu4LRV02ECNCyYgantM2MdApTcD7qxY930pK8iCMOgl9qIew
KODlhakNHfH00YY22g690RtOn6NMTW4skbfDZ1pGcOdxBQGhaAG0bUB+sGpkB6sp
w60x6G0Tf9/pmwSeiLw+2ZchPbquNyeuuHTCDN1uEWLMxqoqSujAMy1z/wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFEjW2hlEigssqrQ2o+27XbWUsIU1MB8GA1UdIwQY
MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt
MWVmN2VmMTdmYTQzLzEvU05iYUdVU0tDeXlxdERhajdidGR0WlN3aFRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz
LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAJftywD
BABfty4DBAC8RFAwDAMEAbxEWgMEAbxEXAMEAMA2TDANBgkqhkiG9w0BAQsFAAOC
AQEAAJuZAAncgd4uhGI1Osar2DZZcSvgTtRo6kmaW57fvoGBaxXIRczqS4rmjX8S
MOmm8hOjF2HElObfeV25y+XjR5YIkRWSoTDcIQ+iqm+0+ZUXVy8N6UMtrPrjPsXX
H4vSGFaQCVmo5tULV7LekaDcoqRcdvbKHJ5bmoN+ZjEox1sJRbfs3XG5R4IXhfAa
z17s5TFd27h92g8BhIHDwl9z1x+KQoc+5Hfym5SNicP7VED6D/wk/rmoLh5EH1SG
oozSoDTESWIsQOwm+So2cG6gc4SGGxWElzTwrfM2QGn/H1up8/EucI0aOenuqrCO
e6OBzTzuTYOKoaRRPZ63qJUoOw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:30 2025 by rpki-client