Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SGqQT2BA7nvZeypVaggMahgg5Ag.roa
File: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (raw, json)
Hash identifier: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=
Subject key identifier: 48:6A:90:4F:60:40:EE:7B:D9:7B:2A:55:6A:08:0C:6A:18:20:E4:08
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0E8D37DAF90DAD517AF872E3378A
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SGqQT2BA7nvZeypVaggMahgg5Ag.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202924
IP address blocks: 82.222.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:8d:37:da:f9:0d:ad:51:7a:f8:72:e3:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=486a904f6040ee7bd97b2a556a080c6a1820e408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:4a:8e:22:5d:81:af:ac:b3:a6:26:b4:11:
de:8b:3c:3e:e5:b7:7e:f9:e5:87:27:21:5f:a5:22:
fc:f5:b9:dc:79:15:32:9e:b8:4c:a9:3c:08:36:4a:
ed:37:50:07:de:92:96:5f:5e:54:bc:15:e1:2e:b5:
fc:3c:e3:33:44:7f:6b:1c:7c:47:ff:89:3f:8c:d2:
39:aa:11:e0:7d:d9:ac:88:91:c0:a2:b2:66:24:0f:
a5:f5:fe:3a:f7:86:94:09:80:21:6e:5c:9a:3e:78:
f8:91:5c:7e:e7:54:81:ca:6a:f5:60:2d:ef:20:9f:
45:21:4a:d2:1d:ad:12:66:92:fc:1f:7a:24:c5:ce:
e2:f0:ee:b2:ce:ab:9c:0f:1f:b7:00:36:8d:15:94:
4f:0d:d9:2f:ab:25:c0:c7:95:69:25:64:54:e4:a7:
31:e6:1a:f3:79:fc:e5:6b:a2:af:f7:4b:b1:bc:23:
a6:3d:a5:b3:7b:99:35:7f:1d:ee:97:63:cb:b6:fa:
95:b1:cd:d8:b1:80:e8:9b:11:4f:37:d8:35:4d:7a:
e9:a3:30:05:9f:02:85:20:b9:3c:cf:42:13:ed:0a:
91:ef:9c:17:57:e5:e6:f4:8d:6f:e5:e1:e4:b8:65:
f9:29:f5:98:49:25:a3:7b:11:4f:2d:09:aa:c2:cc:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:90:4F:60:40:EE:7B:D9:7B:2A:55:6A:08:0C:6A:18:20:E4:08
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/SGqQT2BA7nvZeypVaggMahgg5Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.83.0/24
Signature Algorithm: sha256WithRSAEncryption
25:eb:4d:34:98:91:f6:bd:b1:5d:04:17:f5:77:8b:91:fb:83:
15:54:e9:2d:5a:2e:0f:46:9f:1e:9d:f3:05:4b:82:a6:62:1b:
90:3e:5b:73:a8:60:0c:db:a9:fb:e4:ff:e5:c2:b6:3c:4c:e7:
2f:f0:c2:74:50:59:f7:a5:00:1a:39:c1:cb:9f:5a:dd:86:bf:
ab:e0:a5:51:67:a8:22:03:05:b9:b4:33:04:2f:bd:7f:f3:07:
c9:1f:05:86:be:10:36:09:d7:3f:e2:2f:8e:e0:78:8d:34:4f:
49:41:6d:36:8f:2c:52:83:3f:63:b5:51:be:f5:c8:d1:00:d6:
e3:a7:1f:0b:b5:d3:51:a9:29:c4:60:58:d8:da:63:4b:f1:33:
00:1a:0d:09:93:df:f5:11:f6:fa:db:ad:71:c2:4c:98:ac:55:
c7:38:95:c1:b7:96:b5:22:64:a7:c9:7e:e9:bf:46:2b:a5:50:
e4:13:82:f3:6d:6f:21:24:80:58:f0:fd:1e:fc:20:3a:ff:20:
6f:38:49:0d:ec:80:77:98:3c:96:0f:4f:3e:e5:f6:09:0e:da:
f9:71:cb:bb:d4:cc:ac:44:1b:81:6f:09:ca:4f:3c:94:ff:92:
73:84:9d:2e:88:29:22:dc:17:eb:c2:da:8f:0c:56:cc:8a:58:
1f:ee:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:44 2025 by rpki-client