Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/SugmkuqYB-No88vHXwnEMgENZqE.roa
File: SugmkuqYB-No88vHXwnEMgENZqE.roa (raw, json)
Hash identifier: j53L16OPNAmmlhzf25NCnYJc3LqgICowGmX3vRrVSZM=
Subject key identifier: 4A:E8:26:92:EA:98:07:E3:68:F3:CB:C7:5F:09:C4:32:01:0D:66:A1
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0196202AB5D2CF8956388B0BACE95A6EE31C
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/SugmkuqYB-No88vHXwnEMgENZqE.roa
Signing time: Thu 10 Apr 2025 14:46:31 +0000
ROA not before: Thu 10 Apr 2025 14:46:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8468
IP address blocks: 46.254.0.0/21 maxlen: 21
62.249.192.0/18 maxlen: 18
78.32.0.0/15 maxlen: 15
79.143.144.0/20 maxlen: 20
81.31.96.0/19 maxlen: 19
84.45.128.0/17 maxlen: 17
87.127.0.0/16 maxlen: 16
109.224.160.0/19 maxlen: 19
156.67.240.0/20 maxlen: 24
185.81.192.0/22 maxlen: 24
185.101.148.0/22 maxlen: 24
185.129.72.0/22 maxlen: 24
185.220.12.0/22 maxlen: 22
188.39.0.0/16 maxlen: 16
195.74.96.0/19 maxlen: 19
2001:4d48::/29 maxlen: 29
2001:4d48::/32 maxlen: 32
2a05:8940::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:2a:b5:d2:cf:89:56:38:8b:0b:ac:e9:5a:6e:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Apr 10 14:46:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ae82692ea9807e368f3cbc75f09c432010d66a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:b9:80:4e:5e:e2:04:28:7f:b5:df:8d:cd:
f0:b1:24:07:c7:51:36:b7:69:cd:38:cd:70:ac:31:
af:6c:a6:4c:b1:61:bf:c3:57:e0:9c:3b:e1:6b:be:
38:57:1e:15:c3:db:fc:e1:f8:fe:fb:73:b8:49:33:
8f:1c:7a:e1:7f:1e:73:b3:3c:2f:a7:bb:da:f4:ac:
e7:a7:86:7b:b8:9c:56:bf:e6:8c:50:92:9f:69:74:
71:53:32:59:10:f3:26:59:8a:b8:07:94:12:fa:c6:
64:ef:a7:0a:88:c0:a8:d3:ee:0c:13:8c:cb:52:71:
e6:f2:9c:0f:68:38:97:03:11:92:e1:27:21:01:e7:
9a:11:27:04:47:fc:1d:e6:14:fb:cd:7b:3f:06:20:
e9:9d:c8:da:ff:d6:4b:97:72:e0:e7:3e:23:9d:53:
a8:b6:34:a9:62:5a:a3:64:ea:5e:1d:40:09:89:13:
1a:af:09:31:d4:e1:d5:c6:b6:43:5e:dc:cf:f2:37:
79:d6:a4:fd:11:a3:8f:e9:7e:8e:55:81:40:cd:d3:
59:c7:a3:07:58:ec:b2:40:9c:b3:30:61:00:0c:e5:
bd:09:d1:10:98:94:52:cc:a5:a5:d5:bd:99:a5:d7:
4b:55:47:c6:3d:40:2d:ee:b6:d7:a0:20:51:a6:16:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:26:92:EA:98:07:E3:68:F3:CB:C7:5F:09:C4:32:01:0D:66:A1
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/SugmkuqYB-No88vHXwnEMgENZqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.0.0/21
62.249.192.0/18
78.32.0.0/15
79.143.144.0/20
81.31.96.0/19
84.45.128.0/17
87.127.0.0/16
109.224.160.0/19
156.67.240.0/20
185.81.192.0/22
185.101.148.0/22
185.129.72.0/22
185.220.12.0/22
188.39.0.0/16
195.74.96.0/19
IPv6:
2001:4d48::/29
2a05:8940::/29
Signature Algorithm: sha256WithRSAEncryption
7b:63:71:94:72:58:66:bf:7c:f7:54:ca:8d:38:76:ae:03:4b:
3f:f0:85:10:0e:8e:56:4e:a6:83:d6:29:4a:21:a8:5c:4d:c7:
5c:97:8f:db:5a:56:1b:53:0d:0f:9c:5c:d1:b0:b0:e3:31:3b:
c2:07:76:2f:95:f2:c0:b8:94:d0:dd:20:43:08:22:67:8e:00:
10:68:fb:f3:93:f1:ea:03:d9:74:03:ff:91:be:bd:44:ed:f9:
13:9e:28:8e:ca:cd:cb:7e:9f:a4:5d:b5:b9:2f:06:0e:f6:fa:
e0:94:f3:8f:fd:cf:e6:92:19:f3:40:06:0d:de:a8:9e:0c:b1:
1c:20:e6:72:f8:6f:4e:0f:43:6d:66:47:95:08:05:ad:24:19:
0a:9a:5f:d0:d6:94:eb:a8:51:44:c9:1a:d1:a8:a1:14:b4:cd:
6d:c2:e7:fa:e5:03:f0:a1:8f:e1:15:88:60:f8:10:25:b6:1a:
dd:5e:f1:9a:61:86:f1:69:cd:4f:0f:a6:56:b1:c0:8d:fd:b2:
14:85:de:85:a3:11:b2:45:46:74:a7:88:f4:2a:55:b6:4e:f3:
e6:08:7f:cc:a6:10:2a:c5:4d:b3:95:c1:9e:7b:36:05:bf:0b:
ea:58:09:74:9c:82:57:ac:c6:3c:16:a9:0a:5e:fc:17:33:23:
06:28:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net