Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/SGkYily7UQPusAexDOf3Pto8qlU.roa
File: SGkYily7UQPusAexDOf3Pto8qlU.roa (raw, json)
Hash identifier: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=
Subject key identifier: 48:69:18:8A:5C:BB:51:03:EE:B0:07:B1:0C:E7:F7:3E:DA:3C:AA:55
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0194228D749FE17F9876F41EFF1593EDF243
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/SGkYily7UQPusAexDOf3Pto8qlU.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210635
IP address blocks: 193.33.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:74:9f:e1:7f:98:76:f4:1e:ff:15:93:ed:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4869188a5cbb5103eeb007b10ce7f73eda3caa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:ff:0e:99:34:f6:a2:93:3a:96:c4:f3:64:
6f:de:75:d2:82:b6:2d:3b:e9:1e:d3:a3:3e:a4:22:
c0:67:70:77:d3:61:c9:87:45:56:18:85:e8:21:57:
d7:05:53:b7:d8:01:6e:b1:37:dc:45:83:43:bc:1e:
f0:37:ad:7c:aa:c9:a6:12:4d:f0:4b:b6:2e:f6:6b:
ad:37:fe:34:fb:6d:26:42:a1:50:2f:4a:e9:a7:cd:
4d:6f:09:90:5d:ff:1f:18:8d:8d:6f:0a:95:52:83:
77:bd:60:14:d4:fc:82:42:96:da:e0:e6:5a:70:29:
d8:ff:0e:c5:32:44:f6:25:de:08:77:27:ff:99:64:
cc:82:c7:a8:6b:21:9e:08:52:f7:38:7b:3e:63:bb:
fc:e1:98:11:cb:70:28:c3:37:b6:f6:68:d2:6a:68:
76:61:1c:3d:a2:6d:32:35:8b:43:d0:c9:10:66:cf:
3d:cf:47:e5:0b:88:29:d2:18:09:6b:f9:6b:41:cd:
19:30:8b:57:9d:83:b6:5d:67:43:3d:e7:4b:95:20:
53:04:6b:56:8e:b9:62:64:d0:fd:59:55:3d:75:cb:
33:8e:bf:08:55:69:ca:fa:06:7e:9b:d7:f5:e4:db:
d2:5d:af:87:4a:66:2c:b7:0a:06:e2:f0:1b:35:1f:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:18:8A:5C:BB:51:03:EE:B0:07:B1:0C:E7:F7:3E:DA:3C:AA:55
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/SGkYily7UQPusAexDOf3Pto8qlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6e:25:84:de:a0:60:8d:da:49:89:64:b0:3c:a5:e2:85:28:
ee:39:d1:bb:7e:a1:6c:59:5f:17:55:97:8b:9e:c8:56:b5:26:
32:f4:1d:67:70:7c:c6:05:28:90:1d:f7:67:f7:26:2c:3e:4e:
6e:16:f4:9f:0e:fa:ed:d8:97:01:9a:4f:8b:3c:8c:fe:b4:34:
97:f8:f9:1e:e7:e4:c1:23:da:14:7a:3a:7a:ab:8e:4a:27:3f:
03:7a:20:8b:9a:d1:60:5d:d6:f6:df:83:cb:fb:34:2f:cb:6d:
36:24:08:e3:1f:b9:0a:88:4c:8d:f1:cb:79:33:70:7a:81:5d:
8c:2b:a9:a7:d2:43:e1:ab:10:2c:58:8e:03:e5:0a:f6:7d:42:
dd:e7:d6:e6:ef:ce:6b:7a:a6:63:ad:96:03:a2:1c:f4:ba:39:
1a:cc:38:79:f6:cd:fc:72:18:9e:98:35:d1:49:b2:10:65:9e:
37:73:f2:d9:3e:97:f6:46:17:c9:57:03:69:f3:fc:76:72:0c:
bf:59:bc:c1:4d:d8:6b:28:09:d6:62:e4:58:80:bc:d6:a6:45:
63:4c:b0:8f:2c:be:8b:37:84:c4:49:e9:73:07:95:cd:59:fd:
53:b2:2c:0a:7e:f5:a1:1a:32:c9:ed:18:a5:16:3f:63:63:d4:
16:89:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net