Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/SXZm8wbMg3xM60shH7B8R-_NnKM.roa
File: SXZm8wbMg3xM60shH7B8R-_NnKM.roa (raw, json)
Hash identifier: L4R596s7KyX9eES8kDOckvjATz5MXeTWz01yNs2zMaw=
Subject key identifier: 49:76:66:F3:06:CC:83:7C:4C:EB:4B:21:1F:B0:7C:47:EF:CD:9C:A3
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0194266AEAF2607E50FC4F156CC77A90803D
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/SXZm8wbMg3xM60shH7B8R-_NnKM.roa
Signing time: Thu 02 Jan 2025 09:48:48 +0000
ROA not before: Thu 02 Jan 2025 09:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
195.26.198.0/24 maxlen: 24
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.0.0/16 maxlen: 24
212.236.0.0/18 maxlen: 18
212.236.0.0/24 maxlen: 24
212.236.1.0/24 maxlen: 24
212.236.2.0/24 maxlen: 24
212.236.11.0/24 maxlen: 24
212.236.12.0/24 maxlen: 24
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 32
2a02:2750:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ea:f2:60:7e:50:fc:4f:15:6c:c7:7a:90:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 2 09:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497666f306cc837c4ceb4b211fb07c47efcd9ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:46:30:8a:7d:62:1b:95:c4:18:60:57:38:
98:72:fc:0a:7d:e3:00:7b:05:1d:c9:39:e3:6a:da:
80:cc:b9:7f:35:83:a0:6f:7d:65:4c:95:f4:a1:f4:
d9:57:2e:8a:b1:2d:97:54:be:c0:5a:af:d3:9f:2e:
2a:4a:56:8a:54:44:03:2f:96:27:36:42:c0:0b:4c:
8e:d6:c7:7e:7f:05:7b:43:81:f8:db:13:c4:0e:65:
9b:5e:a2:4e:70:19:37:4e:53:b5:e6:64:d4:05:2b:
52:ce:7a:3b:6c:4b:21:fd:ea:85:bf:71:6f:42:9f:
65:b8:fd:ea:c8:64:9c:bb:e6:e7:6f:d2:57:c0:9c:
40:27:4c:61:d7:78:6c:f2:a6:77:69:fc:97:61:db:
e4:79:74:04:7c:2b:c0:6f:d8:1a:f4:47:e4:af:b2:
22:7d:31:fd:ec:74:14:1b:54:97:27:d2:49:6a:51:
0a:e8:d2:1f:06:dd:e6:63:4f:04:8b:a0:18:97:e0:
82:dc:da:be:cf:c3:58:26:f2:31:4a:4c:93:6b:a0:
84:82:62:a0:f2:1b:2d:9d:46:85:e2:81:5a:d2:d7:
e3:fc:23:c8:7b:48:25:45:d7:da:e4:5e:9f:d7:c4:
ea:62:42:32:e8:e0:c2:62:ca:9a:0d:51:b7:97:b8:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:66:F3:06:CC:83:7C:4C:EB:4B:21:1F:B0:7C:47:EF:CD:9C:A3
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/SXZm8wbMg3xM60shH7B8R-_NnKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
56:4c:32:b8:d4:90:64:4e:5a:6d:a3:4c:c5:70:80:e3:cf:dd:
84:0b:76:f4:a7:96:5c:3b:79:12:e2:5b:4a:2a:e8:d4:c1:ee:
41:0f:66:1a:95:1a:ff:9f:d0:58:b8:7f:52:90:7d:27:5c:f3:
1b:a7:bf:82:3f:69:12:c9:ac:a5:b0:d2:cd:4c:78:9e:7c:cd:
5e:7b:73:40:72:2b:b7:54:da:d0:62:84:5d:51:8e:02:04:0f:
6a:c4:fd:68:04:e4:84:7b:61:91:7c:5c:73:db:fc:11:ac:f6:
0b:d8:73:cc:6c:e0:e0:0a:dd:67:f1:16:f0:7a:34:13:10:e8:
19:1e:91:a9:da:83:9b:9f:c5:63:91:41:a4:7d:a2:f2:a0:94:
2b:16:25:c4:14:db:59:b3:a2:38:21:59:83:33:fb:28:3f:85:
17:84:11:ca:6d:63:e1:c3:be:08:a9:51:6f:4d:19:e9:c3:c3:
b0:d0:66:58:ed:5e:70:05:42:86:03:75:81:79:8d:b2:c5:b3:
ed:93:75:19:2b:8b:63:79:16:e2:ed:45:f2:61:d6:9f:bc:a8:
2c:44:ee:5d:3f:aa:97:05:0d:e1:e4:83:d3:d2:ee:e4:fd:4d:
52:96:79:27:fa:28:9b:42:a5:8c:fe:72:79:2b:4a:e6:c1:60:
8b:e4:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net