Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/SKgq1Y0UQMELPT0LepbjJxizaQg.roa
File: SKgq1Y0UQMELPT0LepbjJxizaQg.roa (raw, json)
Hash identifier: VbaRvQAGFjlQQhIn4wd3Tfz9i4Ub3AjXuSXIESDoszw=
Subject key identifier: 48:A8:2A:D5:8D:14:40:C1:0B:3D:3D:0B:7A:96:E3:27:18:B3:69:08
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0189E537FA3CD8FD94841C65EF29F2B4B919
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/SKgq1Y0UQMELPT0LepbjJxizaQg.roa
Signing time: Fri 11 Aug 2023 15:29:58 +0000
ROA not before: Fri 11 Aug 2023 15:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 185.126.255.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:37:fa:3c:d8:fd:94:84:1c:65:ef:29:f2:b4:b9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Aug 11 15:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48a82ad58d1440c10b3d3d0b7a96e32718b36908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6a:f3:45:29:2a:98:18:46:15:09:f6:ca:49:
55:56:0b:33:5b:47:28:4f:0c:93:95:43:5c:4a:9d:
38:65:e7:e9:e7:3d:66:d1:a5:75:17:93:49:ac:ff:
2a:3d:dc:87:8f:95:3e:b5:5a:d5:f2:19:e9:8d:e9:
20:7e:46:b1:50:a0:2d:5f:49:ba:93:6d:61:9a:f4:
1f:9a:dc:fb:1b:c4:5d:1d:92:09:d8:6f:a7:69:e8:
d2:96:c6:1c:22:4f:71:18:3a:88:fb:a0:04:28:24:
65:ef:93:a5:93:3a:a6:62:c1:21:34:5b:d0:c7:55:
6e:91:aa:d9:25:e9:b4:8a:9a:21:87:02:47:3b:a6:
20:7f:37:8f:ba:8c:5d:c9:22:74:9b:84:71:fb:2d:
0c:27:9d:81:8e:02:80:7b:b4:16:55:27:06:a3:da:
e9:66:71:52:62:a5:31:e6:8a:38:09:7d:e6:0e:b4:
5b:8d:ad:52:62:53:01:c5:ca:d2:69:a6:e3:cb:61:
c1:b4:2c:7f:a4:db:40:74:d5:e8:ce:91:9c:3d:66:
69:7e:b6:70:02:10:c3:27:20:33:f7:94:bc:bb:2e:
2f:ca:de:b3:27:0c:1b:91:88:6a:d9:a5:9c:9d:1f:
01:b9:87:85:78:72:69:4b:7c:6a:f7:5e:09:c9:a6:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:2A:D5:8D:14:40:C1:0B:3D:3D:0B:7A:96:E3:27:18:B3:69:08
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/SKgq1Y0UQMELPT0LepbjJxizaQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2a:f2:a5:6f:58:06:89:13:32:10:0c:dc:03:fc:1f:5a:78:
40:a1:54:8d:80:38:1f:73:8d:99:11:ae:a4:1c:ad:bc:69:d0:
ad:e1:2e:f0:0b:96:97:16:3f:17:da:62:dc:4c:3c:12:82:26:
ef:3f:d7:63:cd:68:f3:0c:48:3e:32:06:8b:70:8c:30:d3:b3:
67:93:56:8d:a7:ee:d7:a6:8c:e0:d7:49:04:1d:cc:bd:97:33:
08:0a:a9:a0:4d:b2:f4:93:d8:60:a7:5b:42:aa:b9:c0:98:ee:
84:e0:28:ec:2e:58:cf:ce:e3:0d:91:50:2b:8c:7a:12:1b:a1:
43:ea:36:81:4f:8c:54:f6:8b:30:9d:d6:8d:5a:ae:57:2a:63:
a5:b8:27:35:7a:38:51:6c:91:49:e2:53:39:f8:e0:cb:99:c2:
02:a5:86:ee:a2:f0:44:a8:9d:8e:0a:dc:e9:82:62:e5:13:ad:
06:7f:31:57:c1:b2:9d:c7:f1:8a:5d:a9:bb:bb:b1:10:ad:02:
b0:e8:a4:fa:d2:b7:fc:b8:d7:41:90:c1:ad:b1:c3:c8:97:25:
87:20:6b:20:2e:71:90:90:dc:69:c0:6e:c6:b8:9a:21:d1:2e:
47:97:2a:55:83:de:b4:1a:2a:c6:70:63:77:72:1a:cf:c9:65:
9c:23:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:07 2025 by rpki-client