Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SeVyC3Up3eapGFgVMyNwVWT064M.roa
File: SeVyC3Up3eapGFgVMyNwVWT064M.roa (raw, json)
Hash identifier: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=
Subject key identifier: 49:E5:72:0B:75:29:DD:E6:A9:18:58:15:33:23:70:55:64:F4:EB:83
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019423D79A82E448CBE28F38B92B8A50B8DB
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SeVyC3Up3eapGFgVMyNwVWT064M.roa
Signing time: Wed 01 Jan 2025 21:48:39 +0000
ROA not before: Wed 01 Jan 2025 21:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41544
IP address blocks: 195.78.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:9a:82:e4:48:cb:e2:8f:38:b9:2b:8a:50:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Jan 1 21:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e5720b7529dde6a91858153323705564f4eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:39:6d:e3:68:d7:5d:86:13:2d:a6:22:2c:
1b:b8:56:df:b5:a0:6c:5b:f9:95:b6:99:b2:73:2b:
99:5d:42:7b:c5:04:93:bb:2d:30:9e:5f:1f:20:dd:
e7:35:ff:11:70:84:c4:c3:25:0a:d5:a2:bc:f4:f2:
e3:cd:0e:2e:81:6c:4f:9c:b8:aa:3e:04:c2:e8:c4:
4a:c5:e2:a8:8c:6d:eb:23:13:b7:2f:65:eb:10:56:
c4:fd:ce:50:98:6e:aa:f1:62:d6:da:1a:c5:79:cb:
20:94:f4:2c:9a:88:31:68:11:81:33:1c:98:e0:ef:
61:bb:1c:a9:5d:5c:5d:6a:86:74:0d:13:84:03:fa:
d3:56:04:19:86:f7:8a:d1:b8:9a:ed:5f:98:a8:b2:
f8:86:0f:b3:26:4c:75:0c:61:2b:9c:74:c3:eb:3d:
16:3f:a7:f6:e7:70:38:ff:bd:32:97:a8:97:08:69:
f0:b7:b4:1b:71:0b:d2:58:e9:d7:9b:c9:fa:33:af:
91:62:db:a0:e8:22:fa:44:69:17:5a:2c:15:7c:14:
c5:77:ba:37:88:9a:8f:7f:c7:28:7a:b7:ea:12:ed:
eb:9c:c9:f4:fb:c4:3b:70:9d:11:0e:d7:d8:d2:74:
72:b1:f5:6f:95:2d:15:10:d2:e4:dd:a6:08:20:15:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:72:0B:75:29:DD:E6:A9:18:58:15:33:23:70:55:64:F4:EB:83
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SeVyC3Up3eapGFgVMyNwVWT064M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.92.0/23
Signature Algorithm: sha256WithRSAEncryption
86:b4:f9:4f:4c:89:1d:ef:0b:31:72:db:27:80:f7:35:04:1f:
cd:e1:a7:30:4a:42:65:fd:90:8f:44:7c:29:f1:a1:ed:1c:03:
1d:15:89:5c:e8:44:16:c9:ae:ff:26:89:75:92:6f:bc:09:f2:
9e:b1:a3:74:d5:b4:77:08:8a:37:c7:5d:80:6c:fe:40:19:75:
33:22:30:c6:0e:b3:d8:06:af:58:fb:d5:dd:8d:35:c7:97:d5:
b9:45:1e:fc:ef:9a:05:6c:17:b4:7f:7d:ab:ab:48:a2:2d:2d:
43:32:04:d0:d9:cb:8c:7b:ae:6a:1f:ac:da:c7:d6:19:b3:0d:
30:9f:79:58:8d:57:6d:87:51:bc:42:5d:c1:0c:fa:6f:3e:41:
81:1f:2c:74:d5:d9:92:2f:56:60:79:5b:c2:b1:a8:52:2e:77:
3f:d4:3a:23:f9:a3:10:36:90:1b:bc:23:78:98:88:62:e7:ce:
fd:c5:ee:65:b7:9c:c7:ab:50:51:56:75:c7:8c:7a:4e:e3:98:
89:f1:4a:db:f3:9b:3d:72:50:55:30:16:72:d7:71:73:20:3f:
cf:35:f0:14:e0:31:9c:70:d7:66:95:86:74:16:9e:3c:1c:0f:
9c:40:a1:8a:1d:ed:2d:a2:78:55:13:15:ff:bc:53:d3:f3:c0:
7e:8b:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:35 2025 by rpki-client