Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/SGwAA-fR3D3rc4SYK2_MACMqPag.roa
File: SGwAA-fR3D3rc4SYK2_MACMqPag.roa (raw, json)
Hash identifier: n833x52q5vzdsajpNe+4Svd7tOv/ERmWFk/p4sac9rU=
Subject key identifier: 48:6C:00:03:E7:D1:DC:3D:EB:73:84:98:2B:6F:CC:00:23:2A:3D:A8
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 019420D5F94D3D72773547003A8E1CBB37C8
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/SGwAA-fR3D3rc4SYK2_MACMqPag.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61163
IP address blocks: 94.158.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f9:4d:3d:72:77:35:47:00:3a:8e:1c:bb:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=486c0003e7d1dc3deb7384982b6fcc00232a3da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:eb:2c:ef:cd:f4:36:a9:50:2e:72:fe:74:
bb:46:eb:c6:5a:f4:89:66:e3:c9:e5:57:7c:5b:35:
7b:ac:1e:9f:dc:56:5c:02:45:a6:05:d4:ac:27:51:
d9:50:9c:57:c9:ba:ab:f9:e5:58:a7:81:5b:91:67:
00:fe:cf:f2:e1:9a:4a:00:0d:b3:9a:31:ee:0a:5e:
02:b6:d7:4e:de:ce:33:2e:a2:37:e6:14:44:5d:3c:
c8:38:bf:94:7b:bb:2a:95:25:cb:1e:8f:54:9c:fa:
e3:7d:65:f7:f3:a0:c4:00:9c:4d:6e:30:8d:29:1e:
2a:c6:31:f3:fa:dc:4e:3f:de:9a:12:75:58:fb:16:
b5:a3:b2:51:ee:c2:4d:39:2a:43:0f:90:6a:8e:96:
b8:d6:26:63:3f:ca:83:14:46:91:f1:29:95:e0:a7:
eb:0c:ae:30:b4:c7:56:55:f2:0e:d8:dd:37:c2:43:
d4:43:6c:43:6c:b9:53:57:e8:ee:1a:34:92:4b:6f:
3e:2c:13:e3:8e:76:69:57:0f:d2:1c:70:d3:3e:cc:
f4:7d:37:4d:d5:e8:ae:e7:7a:48:6a:8d:47:7c:e3:
1e:53:87:82:12:b1:c9:1e:6e:fe:1f:f8:b5:73:1e:
b7:44:8d:67:31:59:f2:a4:95:12:60:a8:d1:a2:f3:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6C:00:03:E7:D1:DC:3D:EB:73:84:98:2B:6F:CC:00:23:2A:3D:A8
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/SGwAA-fR3D3rc4SYK2_MACMqPag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:94:41:db:a8:14:51:19:59:5b:2e:31:0e:21:45:bd:29:cf:
eb:38:e5:27:83:41:f6:e5:84:07:a7:6f:97:25:8b:62:dc:5a:
9b:5a:85:66:02:5a:fb:4a:31:87:65:43:f0:18:87:1b:1c:2f:
7c:1c:ec:be:15:2d:b3:45:95:c4:75:20:ef:2a:40:87:ac:11:
8d:4e:58:79:b9:ad:d7:11:4d:e0:c0:49:12:4c:02:67:f8:98:
da:9d:da:52:e1:ef:94:55:58:1a:bb:23:50:cc:21:7f:5a:c3:
14:00:a2:35:f5:c3:d3:b4:a6:02:39:1e:be:bf:1e:3f:d9:4d:
91:81:91:f5:1c:3f:e6:f6:1d:90:ac:00:61:37:53:0a:a1:87:
8c:9d:87:77:57:f9:90:2e:57:a9:6b:ad:6b:85:53:51:dc:69:
aa:a5:a4:d3:ef:91:1d:55:80:a9:6f:95:98:fe:e0:3a:fd:bd:
94:30:e8:b8:f8:be:77:f4:64:4a:97:17:a3:79:a2:0f:d4:e2:
dc:2d:ac:fa:c7:b9:3a:6d:22:a9:e5:9d:0f:37:fa:05:56:c6:
1b:71:83:d5:33:2b:84:e1:78:42:6f:56:51:c4:26:f7:ae:d2:
75:76:cc:98:d8:53:bc:a8:72:92:b1:3c:e6:e4:3a:39:33:ba:
9e:c5:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:29 2025 by rpki-client