Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Svj0c1HQnwG5mt_JmJcCcfT8rxo.roa
File: Svj0c1HQnwG5mt_JmJcCcfT8rxo.roa (raw, json)
Hash identifier: o3/g9io2UJo6jZGYdYq5HGQcU9R01Vn7GoFyR900M1Q=
Subject key identifier: 4A:F8:F4:73:51:D0:9F:01:B9:9A:DF:C9:98:97:02:71:F4:FC:AF:1A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E9F68124FDA323F96C3A6B781520
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Svj0c1HQnwG5mt_JmJcCcfT8rxo.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39163
IP address blocks: 62.176.120.0/24 maxlen: 24
95.43.201.0/24 maxlen: 24
95.43.251.0/24 maxlen: 24
213.91.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e9:f6:81:24:fd:a3:23:f9:6c:3a:6b:78:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af8f47351d09f01b99adfc998970271f4fcaf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:ae:26:79:b9:9c:a2:64:15:af:41:a5:c3:
b1:eb:e7:15:b7:bf:15:c7:39:78:06:f7:05:c3:28:
ea:d5:03:37:1a:28:b8:a8:b4:6d:ae:59:e4:9a:8b:
f8:37:e9:82:4a:68:92:be:e5:2a:05:34:10:29:72:
d0:ae:9d:7d:63:59:7e:d1:58:d4:c4:43:ca:85:6c:
c7:86:83:3e:53:ad:25:74:86:b9:58:62:a6:99:09:
c2:a3:12:4c:e9:32:ad:12:04:ff:c3:0f:fc:ab:e8:
9f:be:c3:45:e1:6a:c8:a8:51:de:47:ac:cf:05:02:
31:fb:78:5c:42:68:28:72:4c:b4:d2:c1:a9:4f:78:
66:64:9c:95:16:38:d9:55:fb:61:61:0e:0e:ab:cb:
72:b3:2b:30:28:ad:af:3d:df:6f:2e:1f:7f:4b:98:
ed:ef:3a:97:35:2b:ad:06:70:eb:50:39:83:79:75:
bb:3c:4e:2b:da:5e:05:a5:ca:31:ec:0e:bc:24:06:
0d:4b:9e:7a:8b:b9:8f:54:3e:98:18:d7:cf:b9:66:
d8:11:ac:d7:84:2f:70:75:b3:3b:d1:9a:67:8d:c8:
aa:0e:d9:a3:1b:be:e7:4f:99:6d:58:22:c8:86:ac:
d8:94:89:b7:41:a6:84:e0:7d:8a:14:7d:4d:22:c0:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:F4:73:51:D0:9F:01:B9:9A:DF:C9:98:97:02:71:F4:FC:AF:1A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Svj0c1HQnwG5mt_JmJcCcfT8rxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.120.0/24
95.43.201.0/24
95.43.251.0/24
213.91.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2a:33:57:58:ba:fd:b9:58:34:bc:a0:e2:8b:0a:ce:14:2d:
3b:0a:b7:f5:41:00:03:d8:ca:9a:ef:55:03:64:e3:20:67:60:
73:97:9f:08:7a:58:6f:7e:7d:91:34:5a:80:cc:c3:79:3e:01:
d7:6e:c5:fb:ff:1c:b7:72:c4:8f:df:72:a1:78:5e:bc:25:03:
04:21:80:b9:fd:15:d5:d8:9c:44:59:36:e1:d2:8f:dd:2c:8d:
db:cb:9b:98:55:8b:a7:09:95:5c:b2:91:5e:64:df:d7:7e:69:
db:e1:ef:82:90:fd:79:b5:06:32:fd:6f:7d:9a:9d:58:a3:bf:
68:97:d7:46:01:8e:3e:fc:9e:17:31:98:7b:a4:d8:12:a6:ef:
d7:b7:00:12:46:97:a5:51:4c:f9:90:bc:72:33:95:14:b2:b0:
b7:06:3a:ee:f4:1b:f1:56:44:28:e1:11:23:55:6f:b9:11:ca:
cc:d7:e4:39:bf:19:63:fa:d8:f9:49:57:73:4c:76:3f:40:5f:
5e:25:3e:0c:eb:aa:7d:3f:b1:46:e1:8d:8f:13:1b:bd:a4:12:
05:82:1c:f8:ce:f6:c5:4c:84:fc:df:b2:b8:fd:5a:c9:0d:64:
ad:4a:42:52:43:eb:a1:02:69:a4:ed:55:aa:b7:0f:32:53:9e:
3f:6d:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:41 2025 by rpki-client