Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgbMshGkiVeNkmSYx1gblUtlYtM.roa
File: SgbMshGkiVeNkmSYx1gblUtlYtM.roa (raw, json)
Hash identifier: O3fWT/Yp5ec/zr4hWphCSrAwd2xit/xKcf62WF5rzSk=
Subject key identifier: 4A:06:CC:B2:11:A4:89:57:8D:92:64:98:C7:58:1B:95:4B:65:62:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195284014385E6D50D173E88BC4E44E2971
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgbMshGkiVeNkmSYx1gblUtlYtM.roa
Signing time: Fri 21 Feb 2025 11:24:02 +0000
ROA not before: Fri 21 Feb 2025 11:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.175.132.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.250.0/24 maxlen: 24
5.230.5.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
5.231.23.0/24 maxlen: 24
5.231.32.0/24 maxlen: 24
5.231.36.0/24 maxlen: 24
5.231.41.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.60.0/24 maxlen: 24
5.231.63.0/24 maxlen: 24
5.231.69.0/24 maxlen: 24
5.231.76.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:40:14:38:5e:6d:50:d1:73:e8:8b:c4:e4:4e:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 21 11:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a06ccb211a489578d926498c7581b954b6562d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:f3:1a:c9:43:e4:45:f9:45:4c:32:b2:9d:
f7:86:21:9c:14:a0:dd:4e:2b:61:e1:ab:ad:22:2e:
97:c6:e7:93:a1:7c:49:db:00:31:53:6b:98:e0:04:
5f:d8:2e:03:a9:ef:56:10:c5:ee:8c:b0:95:6f:f2:
48:ce:9f:cd:ea:a1:4d:ce:ad:6b:c1:76:3e:cf:bd:
4c:98:0a:9e:47:15:4c:e1:4c:5b:3d:bb:d6:ee:3c:
90:ae:57:be:ee:d2:5e:00:f9:af:01:b9:59:62:80:
39:f0:36:df:04:70:31:94:9c:8e:c6:9d:b6:73:0a:
56:dc:e9:9d:a6:ed:37:84:4a:cb:ef:6c:18:60:3d:
75:4c:bc:5d:17:1c:a7:2a:67:ec:eb:2c:63:7d:e0:
d2:2b:64:8f:b9:65:92:87:3e:25:d7:17:2d:9f:95:
67:b7:5e:41:76:8d:b2:67:eb:81:43:70:1c:62:f6:
fe:72:88:37:42:b0:0e:67:3f:09:0d:9e:2d:d3:05:
6b:20:28:17:db:1c:8c:a7:40:b4:fa:aa:40:01:6f:
dd:de:d6:7e:40:57:ee:d6:04:a5:88:dc:1b:8a:3f:
76:99:13:4f:f2:92:43:80:1b:13:a4:4b:e3:08:22:
d6:fd:bc:53:70:e1:5e:87:66:c5:9b:d6:1d:7d:8b:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:CC:B2:11:A4:89:57:8D:92:64:98:C7:58:1B:95:4B:65:62:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgbMshGkiVeNkmSYx1gblUtlYtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.132.0/24
5.175.137.0/24
5.175.250.0/24
5.230.5.0/24
5.230.9.0/24
5.231.23.0/24
5.231.32.0/24
5.231.36.0/24
5.231.41.0/24
5.231.44.0/24
5.231.60.0/24
5.231.63.0/24
5.231.69.0/24
5.231.76.0/24
5.231.80.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:12:a3:d6:94:ca:85:a7:aa:15:d9:56:b0:b7:ab:3e:90:90:
c1:10:3e:07:14:60:8e:a0:da:04:86:3e:bb:8b:0f:1f:c5:32:
9b:18:4d:f8:c9:25:08:8d:82:af:27:b3:9e:7c:2d:93:9a:59:
38:6b:39:06:c8:fb:fd:45:fb:75:8e:3d:0c:f6:df:cc:7c:2d:
25:73:44:4d:72:a3:cd:2f:f9:22:8d:ff:89:6b:04:55:62:f7:
58:41:1c:9f:db:f4:b8:cc:b8:52:7d:09:f1:46:17:60:1e:6e:
9e:cc:3c:ed:1b:e5:3b:1f:06:43:44:50:99:3e:19:d1:c1:ae:
d7:7f:7f:b4:03:ad:bf:3a:d1:8a:e8:10:f4:8f:42:bd:bb:81:
53:ba:38:87:6a:af:dd:2d:99:6f:12:b7:75:ed:bb:ef:f3:3e:
fd:99:2c:7f:a6:a7:3b:7e:d2:77:e9:dd:04:cd:84:59:d7:c3:
59:ed:78:b2:2f:51:b4:03:e2:93:a6:17:39:2e:6d:a3:e6:c3:
7f:c7:f6:e5:2d:fa:e9:2b:b4:93:76:9f:1a:f4:bb:be:4a:cc:
4d:e5:5d:1b:c2:00:ad:20:d1:38:e3:5f:8a:80:d9:4b:24:e1:
8c:75:3a:d9:08:2e:26:fc:45:53:af:cc:85:12:a7:e7:c9:77:
79:fd:3e:1f
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZUoQBQ4Xm1Q0XPoi8TkTilxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjIxMTEyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTA2Y2NiMjExYTQ4OTU3OGQ5MjY0OThjNzU4MWI5NTRiNjU2MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie/zGslD5EX5RUwysp33hiGcFKDd
Tith4autIi6XxueToXxJ2wAxU2uY4ARf2C4Dqe9WEMXujLCVb/JIzp/N6qFNzq1r
wXY+z71MmAqeRxVM4UxbPbvW7jyQrle+7tJeAPmvAblZYoA58DbfBHAxlJyOxp22
cwpW3Omdpu03hErL72wYYD11TLxdFxynKmfs6yxjfeDSK2SPuWWShz4l1xctn5Vn
t15Bdo2yZ+uBQ3AcYvb+cog3QrAOZz8JDZ4t0wVrICgX2xyMp0C0+qpAAW/d3tZ+
QFfu1gSliNwbij92mRNP8pJDgBsTpEvjCCLW/bxTcOFeh2bFm9YdfYtuVQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFEoGzLIRpIlXjZJkmMdYG5VLZWLTMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU2diTXNoR2tpVmVOa21TWXgxZ2JsVXRsWXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQABa+EAwQA
Ba+JAwQABa/6AwQABeYFAwQABeYJAwQABecXAwQABecgAwQABeckAwQABecpAwQA
BecsAwQABec8AwQABec/AwQABedFAwQABedMAwQABedQAwQAshKSMA0GCSqGSIb3
DQEBCwUAA4IBAQAaEqPWlMqFp6oV2Vawt6s+kJDBED4HFGCOoNoEhj67iw8fxTKb
GE34ySUIjYKvJ7OefC2Tmlk4azkGyPv9Rft1jj0M9t/MfC0lc0RNcqPNL/kijf+J
awRVYvdYQRyf2/S4zLhSfQnxRhdgHm6ezDztG+U7HwZDRFCZPhnRwa7Xf3+0A62/
OtGK6BD0j0K9u4FTujiHaq/dLZlvErd17bvv8z79mSx/pqc7ftJ36d0EzYRZ18NZ
7XiyL1G0A+KTphc5Lm2j5sN/x/blLfrpK7STdp8a9Lu+SsxN5V0bwgCtINE441+K
gNlLJOGMdTrZCC4m/EVTr8yFEqfnyXd5/T4f
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:17 2025 by rpki-client