Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa
File: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (raw, json)
Hash identifier: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=
Subject key identifier: 48:63:1D:0D:E8:94:14:07:E4:DB:1C:08:75:75:5E:29:AF:CB:2C:79
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 019420D5CA234A97079165203220DDE77CC7
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202081
IP address blocks: 91.222.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:23:4a:97:07:91:65:20:32:20:dd:e7:7c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48631d0de8941407e4db1c0875755e29afcb2c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:0f:84:45:49:52:26:47:50:48:f1:26:97:
dd:4a:2e:1d:ce:58:aa:7c:19:98:0c:55:f8:31:68:
35:6d:72:55:b5:4c:51:7d:68:b1:02:2b:fc:bc:25:
fd:62:28:06:d3:a1:ab:62:de:dc:7a:c2:95:c5:c3:
17:20:6e:3a:bb:9d:a3:dc:72:8f:21:78:4b:7d:73:
b7:c3:79:b3:d2:5c:36:0a:50:f0:db:82:ea:d4:2a:
1d:98:07:ee:56:be:53:00:a7:c3:a9:2c:0b:66:b2:
2c:ac:d6:91:27:9b:82:4f:6c:e4:6e:01:86:98:a9:
4c:c3:e8:56:92:fe:61:55:c2:81:d3:b9:dc:61:64:
8a:9b:56:fc:57:cf:34:e8:ea:be:ab:f4:94:6f:7b:
ea:bf:4d:65:ef:df:45:12:82:7d:0e:95:b9:61:75:
8c:f6:9a:5e:df:c4:64:24:07:0b:22:de:0a:f1:da:
b9:57:1e:3c:ad:d1:89:10:f6:d1:e3:aa:49:de:0b:
9c:82:35:79:27:f6:54:95:51:73:be:5c:d9:09:73:
27:3c:71:7e:a5:04:09:bc:30:50:23:e1:56:79:5e:
77:72:1a:d7:2b:64:58:dd:ac:1d:f2:4e:6e:6d:2c:
26:17:48:e3:ba:da:43:22:fe:ff:2b:32:b3:2d:13:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:1D:0D:E8:94:14:07:E4:DB:1C:08:75:75:5E:29:AF:CB:2C:79
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cf:d7:ba:57:9d:27:2e:42:0d:e9:ac:30:44:b4:05:3d:07:
ae:03:c0:fa:e2:5b:07:79:8e:72:ad:7c:5f:7a:e3:83:c2:55:
e1:64:f8:c8:2c:24:08:42:94:0f:f2:dd:d9:b2:17:99:e8:92:
72:9a:9a:a9:5b:c4:af:6d:be:4a:79:98:cf:13:87:e0:17:e0:
80:b1:bb:74:7e:d5:b1:4d:7c:28:c7:21:80:1b:16:f7:47:e1:
b4:c2:a8:22:82:17:47:77:17:7b:b6:4f:6c:34:d9:d8:1c:b7:
96:a5:f3:2c:08:38:82:4f:35:d2:08:bc:72:a2:d5:14:2b:82:
ff:b7:67:fe:a4:34:26:f4:6d:61:16:c0:4d:72:66:0a:2f:4c:
32:e9:b4:ab:90:ab:c5:77:7a:d8:d6:f2:a3:25:91:4f:bc:b3:
f1:83:b2:29:f8:d5:ad:89:47:7e:98:92:9c:01:54:ee:aa:6d:
61:c1:7a:84:0b:8d:58:16:31:fa:ca:06:96:d1:e8:35:3a:91:
ab:1a:b9:61:63:4c:77:f0:fa:83:53:d0:ba:dc:dd:87:bb:f0:
7e:a8:19:23:68:39:8b:6f:ec:6e:2d:fe:ba:90:af:2d:07:b3:
e7:91:d7:91:00:ca:12:0f:13:de:06:07:64:40:69:43:43:2d:
bc:27:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:18 2025 by rpki-client