Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgSBHqqH-FaFLo0CGqi0l-Tq2Bw.roa
File: SgSBHqqH-FaFLo0CGqi0l-Tq2Bw.roa (raw, json)
Hash identifier: KyuWKsFpCQhGiO2GgznaXkKVuPEkVmC5F/WLnSKvLU8=
Subject key identifier: 4A:04:81:1E:AA:87:F8:56:85:2E:8D:02:1A:A8:B4:97:E4:EA:D8:1C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFFD4AA9A924AD714569F067325F6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgSBHqqH-FaFLo0CGqi0l-Tq2Bw.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.143.0/24 maxlen: 24
5.175.233.0/24 maxlen: 24
5.175.246.0/24 maxlen: 24
5.175.247.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:d4:aa:9a:92:4a:d7:14:56:9f:06:73:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a04811eaa87f856852e8d021aa8b497e4ead81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:58:ea:90:81:be:7a:e7:f5:1e:d7:8a:9c:
69:3a:5f:03:a9:bc:09:2a:7d:db:d0:b2:bf:9f:d6:
2d:61:20:84:8a:bc:c0:1e:0c:01:65:db:5c:67:44:
b7:07:6f:58:3e:5d:28:b8:27:9e:6a:02:cf:d5:1e:
46:e3:f7:2c:d7:1e:45:39:38:19:b1:e9:bd:f9:dd:
09:e1:31:82:6e:b6:51:a8:b1:21:e7:a8:62:84:15:
b7:5b:e9:f5:b5:e3:bc:cb:31:10:53:e6:1c:5c:61:
f1:01:ad:0c:6a:41:b7:1c:49:f9:db:ca:72:73:09:
4e:fa:8c:51:30:f5:e1:be:15:9c:1a:a7:a5:2b:f8:
59:83:86:6a:67:32:7e:8c:76:1d:84:cb:29:a3:66:
15:98:ba:eb:ce:11:ba:ff:59:81:fd:3a:69:fc:f5:
81:d0:29:71:62:49:a8:31:0d:a3:ef:d9:d0:90:98:
13:c4:a3:41:5f:56:34:10:fa:5b:69:c2:96:57:8d:
ce:68:c2:6c:0d:89:a5:e3:2c:a9:36:72:cd:02:d8:
5d:b8:04:14:8e:64:29:bd:af:b5:be:9b:f8:eb:0c:
24:0f:f3:20:df:6f:cb:dd:e8:c9:fb:0c:03:70:43:
f6:82:f1:f8:0c:e0:42:df:64:d1:6e:28:f9:c2:07:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:81:1E:AA:87:F8:56:85:2E:8D:02:1A:A8:B4:97:E4:EA:D8:1C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SgSBHqqH-FaFLo0CGqi0l-Tq2Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.143.0/24
5.175.233.0/24
5.175.246.0/23
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.51.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1d:be:d2:1e:88:d4:71:17:a2:25:16:9c:32:23:17:0c:84:
6d:29:65:7a:c8:29:a5:15:1d:9c:03:dd:27:94:ac:c3:bd:28:
f0:56:9d:0d:35:fc:9c:13:6c:54:5a:35:37:cf:38:1a:81:77:
24:50:63:dc:71:a4:cd:63:57:e4:00:e0:01:23:47:d3:3e:34:
bf:d8:a7:f5:d7:6c:95:5b:78:51:54:1f:25:49:d2:be:e8:d7:
5e:18:fd:f5:ca:e8:2d:fc:3f:10:e5:f2:9e:1a:cf:f2:09:19:
90:7e:40:3a:22:d4:15:3c:7e:f5:b9:c5:ff:af:18:48:dd:b8:
7d:f5:ae:e7:86:48:46:9b:d6:b0:c5:c2:f9:17:7b:b3:dc:55:
d3:71:a9:37:3d:8e:53:e0:33:af:1b:db:3f:17:c6:f2:91:a4:
b0:e9:df:56:3c:2d:8f:5e:5b:aa:66:72:e5:f7:1d:3a:4c:b5:
4f:f8:58:21:f4:14:5e:04:b3:3d:c9:e7:1f:20:a3:c4:8a:40:
cb:69:b9:a0:82:75:56:b4:95:14:f1:49:88:ea:2b:ef:41:cb:
e3:c5:59:d0:4d:5b:07:79:a9:49:6a:7b:b5:53:6a:09:13:60:
4e:0c:f8:3a:e3:1f:75:7f:49:0d:ff:5f:f4:0e:41:33:9a:bc:
d3:ab:04:28
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQiH//UqpqSStcUVp8GcyX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTA0ODExZWFhODdmODU2ODUyZThkMDIxYWE4YjQ5N2U0ZWFkODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8FY6pCBvnrn9R7XipxpOl8DqbwJ
Kn3b0LK/n9YtYSCEirzAHgwBZdtcZ0S3B29YPl0ouCeeagLP1R5G4/cs1x5FOTgZ
sem9+d0J4TGCbrZRqLEh56hihBW3W+n1teO8yzEQU+YcXGHxAa0MakG3HEn528py
cwlO+oxRMPXhvhWcGqelK/hZg4ZqZzJ+jHYdhMspo2YVmLrrzhG6/1mB/Tpp/PWB
0ClxYkmoMQ2j79nQkJgTxKNBX1Y0EPpbacKWV43OaMJsDYml4yypNnLNAthduAQU
jmQpva+1vpv46wwkD/Mg32/L3ejJ+wwDcEP2gvH4DOBC32TRbij5wgfCuwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFEoEgR6qh/hWhS6NAhqotJfk6tgcMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU2dTQkhxcUgtRmFGTG8wQ0dxaTBsLVRxMkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABa+PAwQA
Ba/pAwQBBa/2AwQATVoAAwQATVoCAwQATVoIAwQATVoNAwQATVozMA0GCSqGSIb3
DQEBCwUAA4IBAQB2Hb7SHojUcReiJRacMiMXDIRtKWV6yCmlFR2cA90nlKzDvSjw
Vp0NNfycE2xUWjU3zzgagXckUGPccaTNY1fkAOABI0fTPjS/2Kf112yVW3hRVB8l
SdK+6NdeGP31yugt/D8Q5fKeGs/yCRmQfkA6ItQVPH71ucX/rxhI3bh99a7nhkhG
m9awxcL5F3uz3FXTcak3PY5T4DOvG9s/F8bykaSw6d9WPC2PXluqZnLl9x06TLVP
+Fgh9BReBLM9yecfIKPEikDLabmggnVWtJUU8UmI6ivvQcvjxVnQTVsHealJanu1
U2oJE2BODPg64x91f0kN/1/0DkEzmrzTqwQo
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:08 2025 by rpki-client