Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sgWOuS580F3ik2qbZoDfyyTVqq8.roa
File: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (raw, json)
Hash identifier: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=
Subject key identifier: B2:05:8E:B9:2E:7C:D0:5D:E2:93:6A:9B:66:80:DF:CB:24:D5:AA:AF
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4E18322E3DD28B5FBB0E4DC294A1
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sgWOuS580F3ik2qbZoDfyyTVqq8.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60799
IP address blocks: 82.98.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:18:32:2e:3d:d2:8b:5f:bb:0e:4d:c2:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2058eb92e7cd05de2936a9b6680dfcb24d5aaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:64:27:57:e6:d8:e7:e2:8d:47:88:cc:8e:
38:5a:fd:51:bb:85:ab:14:1e:d2:d6:7b:35:01:0c:
c9:f0:8a:ba:eb:0d:a8:3f:ab:d8:51:1a:51:9b:e4:
14:cb:d8:a9:b7:a2:34:13:78:b7:2f:df:50:b8:ca:
b4:5e:57:f6:ab:65:86:57:6d:7d:b1:48:5a:3b:00:
fa:3e:b3:38:81:df:92:e4:8c:7b:e1:88:fe:ca:1f:
e2:cf:e9:93:45:f5:0c:22:cf:16:39:80:b7:57:5a:
1e:7d:98:7f:51:5d:a8:ed:af:d6:77:e6:36:56:5b:
c6:37:bd:03:c9:04:e9:cc:3d:17:a1:fb:4d:1c:c5:
5f:69:fc:73:5d:15:e5:24:58:fa:b7:3b:db:9c:4d:
77:62:c1:13:93:fb:f2:a4:70:00:78:6b:b7:13:c0:
86:df:43:c4:86:7d:a0:34:8e:f2:ed:44:32:a3:72:
09:2e:7b:4a:e1:11:d9:b5:fb:e4:da:53:4a:d1:4d:
35:c3:3b:50:12:75:29:e9:c8:a4:4a:74:22:40:a0:
34:c2:a6:60:63:c1:14:75:0b:cf:bb:42:a0:1a:e8:
a6:50:92:76:66:e7:27:9f:2a:f6:3d:d6:8f:d7:e7:
8a:97:ea:45:11:04:98:8b:e4:b0:02:fd:64:56:2d:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:8E:B9:2E:7C:D0:5D:E2:93:6A:9B:66:80:DF:CB:24:D5:AA:AF
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sgWOuS580F3ik2qbZoDfyyTVqq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:82:67:af:93:18:87:94:56:15:0c:19:29:c3:3a:d7:23:5e:
ae:a1:58:fd:59:8a:28:6c:87:3d:43:79:26:9c:1b:31:a9:4e:
34:87:f1:14:8c:27:c2:0f:52:f7:17:20:6a:4c:9b:70:1d:b6:
b9:d1:9c:76:df:ce:b5:b1:81:0c:69:f5:a0:c3:35:c7:11:c2:
b4:58:f0:b7:76:00:3b:c3:65:f5:2f:45:5f:19:c4:fa:74:b5:
f3:5f:ba:b9:10:e0:cf:19:8c:8e:c0:4b:aa:7f:a6:5f:c4:a3:
d9:05:49:3e:37:14:dc:6f:8b:3a:7a:0f:45:25:0a:c5:37:65:
27:7d:a5:c9:b3:91:72:34:84:e9:04:04:11:07:22:0d:a0:94:
7f:13:7f:b8:f0:34:af:a3:2d:5e:d4:ea:06:1a:bf:26:06:ef:
81:57:e4:c9:73:39:ab:63:de:7d:ae:ec:b0:32:d2:d1:e1:d1:
8c:47:03:8d:bb:28:90:0f:c6:f9:20:28:78:c3:a8:2a:e5:25:
eb:a5:52:cf:d9:96:0a:c4:55:b6:f0:80:c7:d8:e6:71:e4:b4:
04:0c:9c:2b:0b:66:f8:c5:65:f8:c0:03:af:4c:27:ad:db:92:
03:a7:9d:87:f3:2f:a3:96:1e:1a:b4:67:f9:de:d4:31:98:90:
60:c6:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:06:22 2025 by rpki-client