Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SvYQ5sCmAP7iFMfAbK2d4Xeymww.roa
File: SvYQ5sCmAP7iFMfAbK2d4Xeymww.roa (raw, json)
Hash identifier: 6CQ8nfmpzKfv8CzE6lBzT9PDPbZGKV6UDDligyI3Rh8=
Subject key identifier: 4A:F6:10:E6:C0:A6:00:FE:E2:14:C7:C0:6C:AD:9D:E1:77:B2:9B:0C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019427A652F0B152306B6E04D5CF6A46241E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SvYQ5sCmAP7iFMfAbK2d4Xeymww.roa
Signing time: Thu 02 Jan 2025 15:33:19 +0000
ROA not before: Thu 02 Jan 2025 15:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.128.0/22 maxlen: 22
5.57.34.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
37.32.42.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:a6:52:f0:b1:52:30:6b:6e:04:d5:cf:6a:46:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 15:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af610e6c0a600fee214c7c06cad9de177b29b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:22:43:8d:fe:17:70:84:e1:ce:ad:9f:9d:
e6:b2:04:c5:42:57:26:9d:8e:27:06:25:db:5e:2c:
8a:fa:5e:c4:36:fb:c4:f0:63:c4:e6:18:3c:7d:58:
cf:9b:8b:9a:3d:fd:8c:93:fd:54:1a:18:02:65:e3:
5d:f8:db:4e:d8:64:a3:b9:d0:87:e2:c6:81:19:a1:
54:d3:de:6b:53:b2:97:3d:da:1d:3d:dd:7e:45:ef:
6f:54:3a:cb:4e:3c:2e:e0:93:57:17:e0:cb:48:b4:
e0:08:f5:55:a1:2b:04:71:0e:2e:37:35:36:19:fe:
27:f0:b7:5c:87:92:b9:7d:c8:a3:3f:02:68:ea:a7:
ef:b5:f4:2e:44:52:da:d7:9e:b3:f2:e1:38:2d:9e:
fb:5b:37:81:90:9d:a4:ee:7f:e2:e4:b8:2d:91:7c:
a5:83:d4:18:b9:4c:96:a0:80:95:85:5a:d7:93:16:
b2:b7:bf:53:d2:f7:85:2d:c3:02:55:18:4c:db:47:
de:4e:6e:7d:9b:e1:6a:7d:22:eb:3c:02:7e:19:e9:
9d:a1:f4:7b:30:d6:8a:b7:a8:ac:d6:28:6d:77:1d:
d8:29:5a:20:94:c6:6b:4d:f2:54:5c:1b:08:3b:81:
b9:34:00:ab:46:fd:7b:f5:9b:2b:23:6d:81:79:28:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:10:E6:C0:A6:00:FE:E2:14:C7:C0:6C:AD:9D:E1:77:B2:9B:0C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SvYQ5sCmAP7iFMfAbK2d4Xeymww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.34.0/24
37.32.40.0/22
185.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:26:c1:43:e2:f3:7a:33:b3:16:2e:94:12:f3:c0:8e:81:f4:
a0:f0:49:72:0c:66:27:af:31:62:d3:51:6a:e4:ff:d6:a2:ee:
8c:e3:c7:b2:44:62:62:88:31:30:07:39:7c:01:b0:ab:4b:21:
58:fb:b8:99:84:fd:aa:bf:cb:c2:e1:68:e4:70:a5:cf:74:70:
ef:57:6b:e4:ec:8f:bd:a5:9d:ed:95:39:7c:67:d5:ae:c4:60:
d2:81:35:62:ef:53:e7:2b:4a:a4:81:1f:c5:ad:a6:94:f5:43:
e9:3c:0f:16:7c:01:e5:ad:87:ec:c9:81:0a:fd:1b:52:ab:15:
b8:7e:84:31:c3:4b:0c:82:2c:2e:00:45:0d:f7:e3:d1:28:71:
9d:a5:c6:09:8c:d3:09:b0:88:70:40:ab:dc:f8:05:4c:31:26:
55:88:c1:5c:2b:c1:03:5b:cb:d3:a1:3a:bf:85:e6:a9:f7:94:
6c:c7:27:01:1c:2c:51:8b:c2:65:34:88:c7:92:40:2e:7b:e5:
b4:6d:b0:b4:60:3c:b6:83:2f:67:0d:2c:84:64:8e:97:c5:21:
54:31:82:b3:29:2c:32:c6:a2:e3:35:43:2f:e4:31:5a:54:3a:
c3:6d:1d:e1:43:f8:4d:52:8a:96:85:30:85:55:12:64:bf:e8:
2c:b3:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:41 2025 by rpki-client