Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SGUSmUbykBNQca489rTDr5H7TUw.roa
File: SGUSmUbykBNQca489rTDr5H7TUw.roa (raw, json)
Hash identifier: sHwxwvrHUWm6wMY6yXM0WuSJ3XhvZLBBAlnjJ4BZgaU=
Subject key identifier: 48:65:12:99:46:F2:90:13:50:71:AE:3C:F6:B4:C3:AF:91:FB:4D:4C
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF5D6AB4DCA2797E7C7A56014529B
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SGUSmUbykBNQca489rTDr5H7TUw.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215995
IP address blocks: 2a0f:5707:cf80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:d6:ab:4d:ca:27:97:e7:c7:a5:60:14:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4865129946f290135071ae3cf6b4c3af91fb4d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:92:72:c8:fe:1c:a7:43:3a:1e:d8:8e:d8:
9f:a7:8d:86:ec:66:1a:55:11:5d:c6:31:14:53:05:
79:73:bb:f8:a3:e5:ef:58:87:c2:a1:4e:34:62:49:
8b:65:1a:54:02:ce:95:8f:f6:bf:51:55:50:e5:59:
c5:36:b4:b8:99:cf:e1:df:d5:79:e4:a5:9e:92:0c:
78:28:23:e1:cc:96:14:da:71:0e:75:6a:29:94:e3:
26:f4:e5:11:8f:77:5c:8c:36:c8:06:54:d2:09:8a:
3d:91:14:3b:e7:c7:47:92:ed:18:6a:31:75:bc:15:
65:a5:79:24:1e:cb:41:be:fe:23:62:7c:f0:62:d9:
67:1a:b8:21:b3:dc:ba:51:92:2c:3c:a1:07:62:f0:
9a:8a:7c:89:17:2f:30:96:3a:5f:61:d3:80:49:30:
44:ce:8b:fb:a8:ba:43:0b:e0:f0:21:2e:6c:e6:95:
12:aa:ce:5e:21:32:9e:71:2f:65:e0:9b:d5:4b:74:
15:3a:fa:0f:4a:72:ca:e5:a7:6e:c9:45:0d:67:19:
0e:d5:fa:99:56:56:25:1a:6c:c1:fe:46:17:09:3b:
b6:27:a9:5d:7f:f5:1a:52:60:fb:b8:17:ac:4e:7a:
f8:da:09:40:91:85:a1:f0:57:9e:3b:19:e6:9f:7b:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:65:12:99:46:F2:90:13:50:71:AE:3C:F6:B4:C3:AF:91:FB:4D:4C
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SGUSmUbykBNQca489rTDr5H7TUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:cf80::/48
Signature Algorithm: sha256WithRSAEncryption
6f:b9:b2:fa:57:6a:1e:01:ef:46:89:1e:4e:d0:7c:4a:45:78:
8d:59:70:b1:a1:34:bd:d1:d1:57:56:aa:66:80:d1:4d:39:25:
c6:be:f9:bc:50:60:2e:83:61:97:7f:e5:84:6f:e3:a7:23:d1:
ae:aa:6c:ad:63:f4:71:e7:1c:22:26:9e:97:0f:17:a6:d5:d7:
71:05:84:3d:54:18:83:f5:99:5c:c9:d0:d0:d4:bb:83:1a:2e:
47:e8:38:70:ab:01:d4:97:50:d0:6d:bd:d9:92:20:1b:e9:e3:
31:1e:14:38:d7:de:0b:d3:70:ae:a9:df:08:f8:c2:5e:00:5c:
52:12:94:1f:15:02:b0:f9:97:20:ed:90:ee:0c:e8:c0:4a:f5:
f8:e5:fa:bd:f8:a8:9a:57:c3:a5:66:ee:71:df:69:8a:d9:78:
c6:b1:4d:e2:25:e1:c3:9b:18:4b:75:e4:d7:f4:77:2d:ee:1e:
ce:9d:0d:90:76:60:b5:58:ca:0e:65:55:f7:30:c4:9f:d4:8f:
2e:63:3c:72:ba:b2:57:57:46:25:bd:30:2f:f8:bb:29:98:a8:
21:16:5b:5e:eb:e7:5d:3e:44:33:d1:78:db:ed:1b:9c:a7:02:
14:bc:d9:06:e0:80:67:d5:65:ed:46:aa:ad:25:d9:6c:db:b5:
8a:69:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:14 2025 by rpki-client