Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sb5dg-sEpAqpEECmfyGkSS4kRgs.roa
File: sb5dg-sEpAqpEECmfyGkSS4kRgs.roa (raw, json)
Hash identifier: 8z8XRuXIUgrpWMcT47W2zwMDt5wFLD8bwOy4vd9kFlQ=
Subject key identifier: B1:BE:5D:83:EB:04:A4:0A:A9:10:40:A6:7F:21:A4:49:2E:24:46:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D52A7BCD4692AA3CA6A10AD3A650
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sb5dg-sEpAqpEECmfyGkSS4kRgs.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216285
IP address blocks: 84.54.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d5:2a:7b:cd:46:92:aa:3c:a6:a1:0a:d3:a6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1be5d83eb04a40aa91040a67f21a4492e24460b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:9d:ad:a2:30:a7:ab:50:e8:c4:57:7b:62:
2b:42:4b:eb:11:ee:26:b5:50:c7:2f:82:1f:66:b5:
70:d0:38:9a:c5:f3:94:86:23:09:6d:b5:7d:5b:7b:
da:ed:29:2e:16:c9:56:41:d6:13:7c:6a:c6:f8:52:
6b:3a:5b:6b:8c:3e:71:33:18:b2:b6:46:a6:5b:b8:
72:93:9c:b7:12:14:8e:9e:ae:da:89:1a:7e:f2:0f:
63:9c:09:49:6b:39:79:36:11:f8:0a:11:71:1e:d9:
2d:9e:ee:d4:3a:43:f5:0a:61:aa:22:2e:aa:46:9d:
69:99:e8:9b:dd:49:c8:21:d1:a6:2f:2c:ec:b7:5f:
fc:95:77:b8:91:a7:ef:50:70:0a:01:7a:03:cf:a9:
65:13:60:26:ef:a0:78:5e:95:8a:2c:0a:81:8e:e8:
22:cc:07:2e:31:08:c0:f4:11:87:ad:81:f1:50:e7:
15:0b:5e:34:64:1d:0e:31:59:85:39:98:b1:85:b4:
93:f9:cf:94:b3:fc:34:ee:ed:ab:75:c9:17:80:fa:
e6:cd:33:4f:b2:0d:49:2e:b1:a9:a6:8a:f8:f8:8d:
aa:89:f0:53:9c:23:23:9a:f0:89:2f:6a:22:d3:89:
36:41:d1:c4:4d:97:11:84:83:51:58:30:f1:a9:78:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:5D:83:EB:04:A4:0A:A9:10:40:A6:7F:21:A4:49:2E:24:46:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sb5dg-sEpAqpEECmfyGkSS4kRgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:58:78:9c:0c:87:11:6e:e1:02:e1:72:b6:c4:73:eb:f8:89:
10:bf:8a:ed:3c:b6:de:8a:15:8d:74:c3:03:e9:60:a2:7d:10:
50:a3:af:48:23:cc:0e:7d:08:34:c3:2c:6e:5c:b9:97:52:9e:
ac:40:99:0d:84:b1:25:61:24:23:0c:c0:5f:95:8d:64:34:37:
f7:2b:1b:10:e0:5d:7e:90:9f:a2:96:f0:a3:3f:df:73:31:2e:
3f:60:9e:a1:26:42:de:4c:d7:da:b4:e2:70:82:65:78:a2:b3:
80:04:16:ee:df:02:b1:5e:a3:39:62:cb:a7:13:57:fa:62:c5:
80:c4:2e:16:d5:6c:f4:a9:d7:16:b8:16:6c:06:e7:7d:28:e1:
2b:04:03:5c:54:d0:eb:9f:14:4a:0b:ce:67:a7:fc:43:0a:57:
d3:a7:d7:e7:6f:c8:00:1f:30:27:fd:16:a4:46:eb:47:11:73:
14:42:a0:86:09:02:36:ed:27:17:90:ab:21:8a:af:ed:11:fe:
0f:b7:57:03:45:f4:a0:a5:11:e2:0e:cb:42:6b:3e:17:98:24:
09:b9:d7:14:48:78:d4:56:34:5e:e1:37:a6:b0:25:63:55:e1:
d9:fe:d5:5f:76:e1:07:f2:5a:72:40:3f:24:32:06:84:8d:4b:
8a:cc:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:11 2025 by rpki-client