Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/SFK2b_vmIkLWDU_i-BkLji71FEk.roa
File: SFK2b_vmIkLWDU_i-BkLji71FEk.roa (raw, json)
Hash identifier: P/e3nZJRHwq7a4VZvWLqRGgl5JZQml0sLv8iElODBF0=
Subject key identifier: 48:52:B6:6F:FB:E6:22:42:D6:0D:4F:E2:F8:19:0B:8E:2E:F5:14:49
Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b
Certificate serial: 0194258E1938F5035BDADF5A17B1293279EB
Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/SFK2b_vmIkLWDU_i-BkLji71FEk.roa
Signing time: Thu 02 Jan 2025 05:47:37 +0000
ROA not before: Thu 02 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43885
IP address blocks: 185.112.79.0/24 maxlen: 24
185.247.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:19:38:f5:03:5b:da:df:5a:17:b1:29:32:79:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b
Validity
Not Before: Jan 2 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4852b66ffbe62242d60d4fe2f8190b8e2ef51449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:28:85:0c:32:af:b4:42:ac:4b:2e:0e:62:
9e:2a:b6:0d:9c:cc:bd:98:37:db:36:29:61:74:95:
8c:d4:8f:9e:cf:06:5f:b5:9a:79:3a:79:60:b7:34:
d3:76:d6:16:f5:af:59:3c:34:16:9a:98:90:93:98:
21:a6:c0:c0:39:66:d8:e6:5b:77:50:65:ff:c9:3c:
8c:d5:71:8b:8c:5e:a4:14:75:be:56:80:47:28:05:
d1:e5:9a:fa:fe:68:d4:d9:7a:00:4e:a0:ee:8f:f1:
96:10:e6:7c:d4:2c:17:76:20:0f:72:95:32:b5:44:
d6:3f:fd:c4:50:cd:de:af:a4:6c:0a:7b:bb:ad:8e:
5a:78:89:96:c6:d1:51:41:4f:9e:2a:60:e3:0b:96:
54:45:88:ed:9d:80:eb:a3:76:c9:ff:eb:e1:c2:0e:
57:25:05:28:2c:b7:08:0e:10:4c:0a:17:8d:ab:eb:
d5:aa:83:8e:6b:e4:b3:26:e6:b6:ac:40:b4:dc:41:
2b:dd:a2:00:91:e7:f5:63:df:b1:a3:bf:b4:20:76:
6f:66:48:8a:31:0b:de:ae:37:67:b5:a2:ac:59:cc:
24:ed:08:49:72:8b:33:55:63:5a:1a:bb:01:cc:77:
6a:ad:0a:e3:7a:37:4c:fe:3e:3b:46:34:eb:00:1e:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:B6:6F:FB:E6:22:42:D6:0D:4F:E2:F8:19:0B:8E:2E:F5:14:49
X509v3 Authority Key Identifier:
keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/SFK2b_vmIkLWDU_i-BkLji71FEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.79.0/24
185.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a2:8d:36:ef:dc:9a:65:fe:01:3b:cf:9f:98:01:ba:5f:d8:
d5:75:b2:2a:8c:2c:ad:44:e7:aa:20:77:02:21:6e:b8:48:3a:
df:ba:44:f5:bd:26:3b:59:5d:89:3d:85:67:47:99:7b:fc:e5:
b4:a0:92:c1:24:e9:c6:bb:0e:8f:40:25:12:69:b1:50:46:a7:
9a:40:c0:57:a9:37:c8:92:6f:c1:82:b3:b2:72:e8:2b:ac:2c:
4f:ab:53:33:1e:4d:ca:8b:f1:b4:c6:ab:77:4f:de:be:a6:18:
88:cb:4f:06:4a:f9:5d:9f:16:18:a4:3f:12:41:20:bb:ae:a8:
cf:3b:80:39:88:4a:35:e7:d1:d6:a8:c7:49:ee:94:24:52:9e:
73:e5:d4:7d:ab:08:44:37:69:c8:2f:76:ba:41:6e:22:e8:e6:
c9:3a:39:d2:91:3d:6b:6c:88:5b:ea:1e:a3:94:1d:71:73:23:
9a:11:0a:b1:5a:de:b9:c5:1d:dc:18:32:72:8f:57:a2:26:3f:
8f:59:4f:f2:73:b6:0f:0a:2f:e5:85:18:e3:16:28:d9:4d:c2:
2f:23:04:e1:a9:75:7c:d3:bd:f4:a6:f1:6d:a5:01:5b:ff:15:
4a:6e:8a:7f:bf:d3:4c:73:17:87:ed:ec:c6:58:0d:92:07:4e:
15:a5:8f:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQljhk49QNb2t9aF7EpMnnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZmRmYTcxNDAwY2UzNzBiNzVmNzM3NzgwNDg1NzRlNDYy
NzQzMWIwHhcNMjUwMTAyMDU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODUyYjY2ZmZiZTYyMjQyZDYwZDRmZTJmODE5MGI4ZTJlZjUxNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgohQwyr7RCrEsuDmKeKrYNnMy9
mDfbNilhdJWM1I+ezwZftZp5OnlgtzTTdtYW9a9ZPDQWmpiQk5ghpsDAOWbY5lt3
UGX/yTyM1XGLjF6kFHW+VoBHKAXR5Zr6/mjU2XoATqDuj/GWEOZ81CwXdiAPcpUy
tUTWP/3EUM3er6RsCnu7rY5aeImWxtFRQU+eKmDjC5ZURYjtnYDro3bJ/+vhwg5X
JQUoLLcIDhBMCheNq+vVqoOOa+SzJua2rEC03EEr3aIAkef1Y9+xo7+0IHZvZkiK
MQverjdntaKsWcwk7QhJcoszVWNaGrsBzHdqrQrjejdM/j47RjTrAB6sWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEhStm/75iJC1g1P4vgZC44u9RRJMB8GA1UdIwQY
MBaAFOj9+nFADONwt19zd4BIV05GJ0MbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2Mt
Mzc4YTNlN2JjMDgzLzEvU0ZLMmJfdm1Ja0xXRFVfaS1Ca0xqaTcxRkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2MtMzc4YTNlN2JjMDgz
LzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXBPAwQA
ufd8MA0GCSqGSIb3DQEBCwUAA4IBAQDHoo0279yaZf4BO8+fmAG6X9jVdbIqjCyt
ROeqIHcCIW64SDrfukT1vSY7WV2JPYVnR5l7/OW0oJLBJOnGuw6PQCUSabFQRqea
QMBXqTfIkm/BgrOycugrrCxPq1MzHk3Ki/G0xqt3T96+phiIy08GSvldnxYYpD8S
QSC7rqjPO4A5iEo159HWqMdJ7pQkUp5z5dR9qwhEN2nIL3a6QW4i6ObJOjnSkT1r
bIhb6h6jlB1xcyOaEQqxWt65xR3cGDJyj1eiJj+PWU/yc7YPCi/lhRjjFijZTcIv
IwThqXV80730pvFtpQFb/xVKbop/v9NMcxeH7ezGWA2SB04VpY9C
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:45 2025 by rpki-client