Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SYLxhnpFlkLAsgfxaeTM6VruUHc.roa
File: SYLxhnpFlkLAsgfxaeTM6VruUHc.roa (raw, json)
Hash identifier: gMKXpXYjL7CKaM0C1H23WNNLQ4FzJ7DaEV4orA4ffI8=
Subject key identifier: 49:82:F1:86:7A:45:96:42:C0:B2:07:F1:69:E4:CC:E9:5A:EE:50:77
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E6110B83057CD96B8405AE35BAB8
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SYLxhnpFlkLAsgfxaeTM6VruUHc.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31250
IP address blocks: 93.152.128.0/18 maxlen: 24
93.152.151.0/24 maxlen: 24
93.152.162.0/23 maxlen: 23
93.152.172.0/24 maxlen: 24
93.152.173.0/24 maxlen: 24
93.152.175.0/24 maxlen: 24
93.152.180.0/24 maxlen: 24
93.152.181.0/24 maxlen: 24
93.152.192.0/21 maxlen: 21
93.152.200.0/22 maxlen: 22
93.152.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e6:11:0b:83:05:7c:d9:6b:84:05:ae:35:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4982f1867a459642c0b207f169e4cce95aee5077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:65:e8:05:8e:66:b8:cd:14:f1:e0:ec:0d:
10:07:6b:3c:2d:02:3f:02:97:7d:ee:7d:0e:0b:0d:
6a:76:67:8c:3b:e6:4f:13:bd:00:69:b1:01:07:41:
ad:94:89:12:6b:8a:d7:6b:ea:98:04:10:f4:61:c7:
d2:0e:6e:7f:df:47:6f:b3:85:ea:c9:5c:b6:f4:c1:
36:4f:62:af:37:5a:9f:fe:36:59:66:e2:3c:46:c2:
b5:a9:d7:4b:1e:3d:18:55:7d:ba:93:7f:3c:1c:ee:
1d:42:92:b4:14:3a:0f:da:c2:b4:f2:25:14:a8:fd:
a2:58:26:34:55:5e:61:59:24:55:6f:d9:c7:2d:66:
21:91:21:69:49:1c:ef:39:b9:5d:06:40:9d:ce:7f:
22:f3:c5:ce:22:a9:1c:e2:47:07:74:5c:e4:8e:99:
50:6d:89:ef:1a:bc:32:40:8f:b1:c6:27:16:26:a2:
cb:04:7d:6f:10:47:8f:3e:53:52:9a:dd:ef:62:fa:
d6:db:11:ea:f4:a0:1e:de:89:ee:c9:6a:66:55:3a:
a3:c7:03:6b:61:dd:37:d7:bc:43:12:28:f5:ec:c1:
71:96:b3:3d:e0:aa:e6:fc:ae:cd:cb:d7:0c:b4:ad:
3c:e4:25:ed:39:12:07:e4:77:10:d8:95:6f:e3:6b:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:F1:86:7A:45:96:42:C0:B2:07:F1:69:E4:CC:E9:5A:EE:50:77
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SYLxhnpFlkLAsgfxaeTM6VruUHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.128.0-93.152.204.255
Signature Algorithm: sha256WithRSAEncryption
9d:53:45:a9:1d:4e:05:bf:bc:4d:02:e1:1d:ea:c6:91:d5:b8:
e7:dc:9a:ae:65:a9:c6:9e:1e:c4:52:d7:11:6b:a0:3a:45:3b:
b9:d9:8f:37:1a:34:dc:d2:e0:7f:89:f0:3f:c7:c8:3c:a3:0e:
a2:93:ce:4d:61:8e:21:74:43:d5:79:2a:58:47:6d:b1:ab:3f:
44:21:4e:00:6c:92:12:25:9e:fe:54:0f:95:18:d6:c3:e9:ca:
a9:11:25:cf:ee:45:65:c8:21:e8:8d:49:ab:00:25:9d:de:4a:
f9:d8:ee:31:d2:48:82:32:45:89:48:94:c2:b1:f5:10:02:53:
8d:02:85:c8:ae:cb:1a:0c:a8:d7:02:a6:e9:0b:cc:24:b2:93:
31:e4:e4:24:b6:a6:33:2f:c4:67:f9:07:01:3f:b5:b7:5c:a4:
6a:25:08:c5:99:e0:24:71:ab:08:b6:b1:60:32:fe:90:74:7d:
2b:6d:5a:f0:75:c9:ba:9f:96:38:be:40:22:35:da:3a:6e:78:
44:12:92:40:78:da:7a:df:9d:b6:1c:5b:a8:44:24:05:8b:87:
38:3b:a7:26:a0:d6:a1:96:c6:b9:a1:f2:b6:03:a1:16:67:09:
0b:9d:82:81:92:af:5a:44:f1:af:9a:32:89:84:cc:a1:ea:16:
74:7c:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:48 2025 by rpki-client