Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/v6SZGiKR24BVvAjZdd8cz7dRNVo.roa
File: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (raw, json)
Hash identifier: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=
Subject key identifier: BF:A4:99:1A:22:91:DB:80:55:BC:08:D9:75:DF:1C:CF:B7:51:35:5A
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 019427B49ED3D1D026E10021EA088A36F2AA
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/v6SZGiKR24BVvAjZdd8cz7dRNVo.roa
Signing time: Thu 02 Jan 2025 15:48:56 +0000
ROA not before: Thu 02 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35524
IP address blocks: 193.84.77.0/24 maxlen: 24
195.200.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:9e:d3:d1:d0:26:e1:00:21:ea:08:8a:36:f2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jan 2 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa4991a2291db8055bc08d975df1ccfb751355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:af:f5:2f:7f:a8:bd:85:e2:46:79:17:08:
f3:89:a8:48:da:08:5c:6e:51:b8:15:48:a0:25:f9:
ee:eb:99:96:93:d9:4f:b3:64:30:c2:ef:40:88:bf:
2d:f5:19:3d:e3:e3:fa:6c:c3:e5:cd:5e:6a:26:a4:
23:cf:7b:c8:4c:58:10:5f:6d:e9:7e:3d:c3:18:c2:
80:83:53:bd:e6:cc:42:6d:f4:f9:2b:3b:97:b4:57:
a8:da:e4:be:29:d2:41:db:e3:b4:6f:41:27:2c:ff:
72:29:11:b6:1b:b4:20:1a:37:cc:03:8d:ba:fc:0e:
a1:d6:45:86:86:d2:b9:a3:dd:67:7e:6c:1d:ca:74:
c3:57:c5:86:b1:62:65:6d:6f:57:1e:dd:7c:e7:7d:
40:07:c7:60:92:0f:b8:4a:ee:0c:16:5f:75:2a:d0:
9f:fe:3d:01:bb:0f:e0:55:30:d7:36:a6:2d:4b:d5:
8b:b9:79:b1:28:bc:71:8d:b8:8e:4e:e9:70:e1:b9:
7f:74:fd:87:9b:63:ae:ea:63:05:17:50:8c:d0:f6:
6d:b8:b6:8d:4f:bc:f8:7c:fa:49:91:c7:3d:bc:39:
ea:56:8b:56:d9:74:bf:42:08:54:89:d8:ae:2a:5d:
5d:b4:22:3a:df:7c:54:79:95:a3:30:8b:c3:6d:ea:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A4:99:1A:22:91:DB:80:55:BC:08:D9:75:DF:1C:CF:B7:51:35:5A
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/v6SZGiKR24BVvAjZdd8cz7dRNVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.77.0/24
195.200.90.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:d4:2e:e6:07:c5:ff:1c:96:d1:a1:2a:a6:9d:f9:92:f2:bf:
fe:90:78:b5:d6:ed:8a:87:65:dd:ca:5b:64:84:ee:6c:60:23:
ab:e4:73:04:53:64:7d:11:04:e7:59:51:92:e3:ee:a2:38:43:
d9:d4:b3:6f:60:a5:b4:be:bb:df:af:77:93:07:12:03:ea:58:
ad:22:c0:c4:54:48:5e:d9:4f:c4:57:b1:c8:49:d7:3f:65:5b:
d4:6c:dc:ff:7b:8d:1f:f9:ad:89:1e:60:06:92:ab:ca:2f:a2:
72:e1:65:bc:48:f5:04:50:2e:5f:6d:6b:c9:16:6b:76:3a:69:
b4:38:3b:87:76:ee:37:14:f5:10:25:a2:9a:9c:fa:a0:9f:54:
73:1c:65:fb:78:9c:c8:92:3e:b8:1d:a6:63:8f:91:12:26:61:
20:6b:be:eb:a3:7b:1c:f0:7e:2a:cd:1c:30:32:76:c6:92:ce:
d5:41:11:fa:cd:a1:79:e1:bf:54:b5:c9:44:0a:c7:68:2a:e0:
8a:cf:00:43:22:d3:00:38:b7:87:5f:78:d6:34:72:8d:f7:85:
f7:4f:b8:c7:48:75:7e:26:b2:76:19:5c:3c:07:25:a1:4c:34:
3b:ab:a0:36:ff:f2:93:de:46:bd:4b:37:03:c5:d6:de:9d:51:
24:e4:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net