Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa
File: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (raw, json)
Hash identifier: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=
Subject key identifier: B0:D4:BC:32:46:54:26:D6:B3:E7:EC:1B:2B:8A:F7:B8:86:D7:47:D6
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 019421B192EDE14F7EC8E9FBAB262FFABC3C
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa
Signing time: Wed 01 Jan 2025 11:47:53 +0000
ROA not before: Wed 01 Jan 2025 11:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41634
IP address blocks: 193.239.232.0/24 maxlen: 24
195.96.151.0/24 maxlen: 24
2001:678:b30::/48 maxlen: 48
2a12:1e01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:92:ed:e1:4f:7e:c8:e9:fb:ab:26:2f:fa:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d4bc32465426d6b3e7ec1b2b8af7b886d747d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:49:90:99:84:b1:a9:5f:3c:93:39:11:aa:
6e:6b:04:c6:e1:cf:7c:40:90:e6:26:20:dc:f2:6a:
4e:71:f8:cc:45:26:c6:30:00:c9:de:38:a6:b9:d0:
0c:38:f6:47:59:10:8f:21:ba:af:77:32:48:98:1c:
c1:47:3b:db:cd:a1:22:73:ed:19:d3:4d:2e:66:fc:
c1:57:e1:05:d7:bc:a9:dd:a3:48:cb:5c:f7:53:72:
76:9f:54:0c:dc:94:17:67:ea:eb:1d:f5:71:18:b1:
5a:14:3a:69:79:ac:58:a5:72:5e:8c:e1:ea:87:dc:
9b:db:24:1e:4d:4f:63:7b:34:04:d2:fa:d8:34:31:
5e:91:f3:81:1f:fd:d2:28:4a:66:ba:09:95:fc:fc:
c3:0d:d3:85:75:71:b9:d7:4e:65:e8:e7:e6:13:64:
b0:f2:19:94:18:61:89:95:80:ee:d0:22:7c:7c:d7:
98:64:4d:2a:39:11:7a:fc:f5:aa:25:d1:1e:16:b3:
84:21:f2:fd:34:69:c4:4b:f7:0f:4a:91:4c:af:16:
33:f3:3b:13:33:68:10:00:7f:56:3f:cf:e3:3a:a0:
21:31:12:4b:29:39:92:98:e9:75:5d:a0:ff:f1:6b:
54:92:88:a0:d3:87:f7:9c:94:79:2d:44:9e:9c:e1:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:BC:32:46:54:26:D6:B3:E7:EC:1B:2B:8A:F7:B8:86:D7:47:D6
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.232.0/24
195.96.151.0/24
IPv6:
2001:678:b30::/48
2a12:1e01::/32
Signature Algorithm: sha256WithRSAEncryption
21:b9:69:25:06:0e:9a:9e:b4:0e:eb:4e:7d:2d:1f:4f:a8:ac:
bf:f1:3c:d1:3b:e1:5e:e9:41:f3:ed:e8:ff:10:56:47:19:fd:
9b:38:93:3c:23:63:70:c0:dd:61:0e:1b:e8:66:23:06:70:d7:
43:56:d5:7b:4c:be:d2:19:0b:91:67:41:42:6d:39:41:9b:fa:
63:46:ca:18:95:1b:b2:50:96:30:44:f4:9c:1d:f0:80:f9:8f:
fd:8b:be:2b:4e:77:78:ee:8e:e9:69:29:90:79:4c:37:c9:e3:
55:76:40:86:d9:9e:7e:21:0c:65:8d:3a:3a:f1:42:d1:f5:c7:
84:27:95:58:81:94:34:2c:85:01:8d:ec:e3:22:ca:77:5e:1b:
77:00:85:e8:ed:0a:93:36:32:8b:5d:77:7e:01:ea:2b:95:48:
1b:1e:29:00:bb:08:0b:83:11:a9:9b:62:81:ef:67:07:e2:c0:
83:e1:3e:64:bb:50:8a:97:fe:23:66:26:d4:7b:bd:4a:e8:0d:
48:1c:90:9c:58:69:ec:f6:5c:15:63:83:0c:70:5e:e7:28:d7:
40:28:5a:f9:17:77:d2:f0:c7:4d:65:10:81:18:a1:7f:f5:d4:
21:39:91:b4:05:29:b0:68:95:92:61:0e:bd:f3:a6:57:8d:fd:
35:46:48:89
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQhsZLt4U9+yOn7qyYv+rw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWQxYjkzZDNiY2U2YjZhZmNkZTkwMjBiODAxNjdiODVj
NjhmNWIwHhcNMjUwMTAxMTE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGQ0YmMzMjQ2NTQyNmQ2YjNlN2VjMWIyYjhhZjdiODg2ZDc0N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YdJkJmEsalfPJM5EapuawTG4c98
QJDmJiDc8mpOcfjMRSbGMADJ3jimudAMOPZHWRCPIbqvdzJImBzBRzvbzaEic+0Z
000uZvzBV+EF17yp3aNIy1z3U3J2n1QM3JQXZ+rrHfVxGLFaFDppeaxYpXJejOHq
h9yb2yQeTU9jezQE0vrYNDFekfOBH/3SKEpmugmV/PzDDdOFdXG5105l6OfmE2Sw
8hmUGGGJlYDu0CJ8fNeYZE0qORF6/PWqJdEeFrOEIfL9NGnES/cPSpFMrxYz8zsT
M2gQAH9WP8/jOqAhMRJLKTmSmOl1XaD/8WtUkoig04f3nJR5LUSenOFFtQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLDUvDJGVCbWs+fsGyuK97iG10fWMB8GA1UdIwQY
MBaAFJXtG5PTvOa2r83pAguAFnuFxo9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWIt
NTc2Y2U0MTAxNDgzLzEvc05TOE1rWlVKdGF6NS13Yks0cjN1SWJYUjlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWItNTc2Y2U0MTAxNDgz
LzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAwe/oAwQA
w2CXMBYEAgACMBADBwAgAQZ4CzADBQAqEh4BMA0GCSqGSIb3DQEBCwUAA4IBAQAh
uWklBg6anrQO6059LR9PqKy/8TzRO+Fe6UHz7ej/EFZHGf2bOJM8I2NwwN1hDhvo
ZiMGcNdDVtV7TL7SGQuRZ0FCbTlBm/pjRsoYlRuyUJYwRPScHfCA+Y/9i74rTnd4
7o7paSmQeUw3yeNVdkCG2Z5+IQxljTo68ULR9ceEJ5VYgZQ0LIUBjezjIsp3Xht3
AIXo7QqTNjKLXXd+AeorlUgbHikAuwgLgxGpm2KB72cH4sCD4T5ku1CKl/4jZibU
e71K6A1IHJCcWGns9lwVY4MMcF7nKNdAKFr5F3fS8MdNZRCBGKF/9dQhOZG0BSmw
aJWSYQ6986ZXjf01RkiJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:29 2025 by rpki-client