Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/SGMD-KVvRcy3Oh30Wcpq4pRW7Gc.roa
File: SGMD-KVvRcy3Oh30Wcpq4pRW7Gc.roa (raw, json)
Hash identifier: 1nsEs6e84GtIOODGcg47h2SFOFS7HnkaMUhXcueW29o=
Subject key identifier: 48:63:03:F8:A5:6F:45:CC:B7:3A:1D:F4:59:CA:6A:E2:94:56:EC:67
Certificate issuer: /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial: 1393F1A0
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/SGMD-KVvRcy3Oh30Wcpq4pRW7Gc.roa
Signing time: Mon 28 Feb 2022 00:11:27 +0000
ROA not before: Mon 28 Feb 2022 00:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.40.84.0/24 maxlen: 24
185.40.85.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.40.87.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
185.123.100.0/24 maxlen: 24
2a04:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328462752 (0x1393f1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Validity
Not Before: Feb 28 00:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=486303f8a56f45ccb73a1df459ca6ae29456ec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:4e:f5:06:bb:c9:dd:17:2f:29:ab:2c:fe:
ae:c5:4b:11:fd:cf:6f:3f:04:c9:b2:93:cf:ce:d8:
bf:ed:53:7a:0a:95:3c:8d:4a:8e:9d:b0:6f:a1:5a:
ff:cc:32:83:5e:5b:97:a5:8b:64:d7:a5:e5:0d:98:
ee:51:fe:f3:22:0e:93:9d:10:2d:8a:50:34:cc:cf:
97:99:8b:44:f1:bb:fd:7f:90:25:6f:ce:d8:76:ca:
2e:89:62:90:9f:cd:4b:b6:d0:46:c5:09:21:5c:a6:
e6:fc:0e:ff:b0:49:65:77:aa:12:ac:ed:6e:43:b8:
84:80:54:c2:80:74:f6:23:b6:11:34:ec:95:86:f1:
eb:2f:fe:d1:6f:c0:47:13:4b:9a:28:84:31:71:74:
06:88:d6:c9:81:96:30:3e:3d:fe:72:08:c8:84:95:
e5:d8:c2:1a:00:fe:62:31:4f:8a:2e:09:b1:d2:9f:
1d:33:19:44:1f:63:e8:10:1c:a8:4b:c9:ca:39:08:
1e:1a:df:b4:18:ba:93:18:d5:e0:e4:14:b3:74:18:
65:a4:f2:4c:e0:bf:81:5b:98:b7:d8:ff:07:07:34:
53:2b:cb:91:d1:b4:32:b1:62:1b:72:1f:c9:7d:9c:
50:a0:81:12:52:b3:15:50:ce:c5:68:04:2f:de:1a:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:03:F8:A5:6F:45:CC:B7:3A:1D:F4:59:CA:6A:E2:94:56:EC:67
X509v3 Authority Key Identifier:
keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/SGMD-KVvRcy3Oh30Wcpq4pRW7Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.84.0/22
185.123.100.0/24
185.123.103.0/24
IPv6:
2a04:8340::/29
Signature Algorithm: sha256WithRSAEncryption
2e:36:65:60:be:64:c4:b8:7e:fe:9a:bc:a2:b0:70:cd:1f:62:
13:5d:34:55:ea:7f:a3:59:fd:3e:71:2c:b1:33:f2:8e:32:53:
80:da:95:59:a9:02:00:88:0e:9f:33:ca:7f:0f:ba:bd:28:0f:
08:70:e1:4f:2b:7e:4d:ac:80:1e:a1:3f:17:b1:c8:b5:04:f7:
de:b8:d2:8d:a2:cf:09:2d:f6:1a:36:cf:f1:b1:16:76:7b:3e:
89:eb:a9:81:ab:ef:01:ac:94:a1:63:40:4e:da:3c:10:a6:67:
4b:da:36:dc:48:79:31:8d:0a:f0:ff:66:43:8e:c7:70:5b:81:
39:49:49:23:25:18:b3:cc:a0:32:38:69:c1:f7:2c:c8:eb:02:
e6:77:1f:98:49:ce:57:5a:98:15:d7:f8:51:e5:dc:38:35:55:
ec:ea:9c:cf:1a:6a:0c:93:d7:ac:9c:7a:36:35:ca:72:b8:0c:
9e:b8:bf:e0:bf:9a:92:47:04:ea:0e:a3:3e:90:50:54:b8:56:
ea:41:0c:14:75:67:83:1b:2c:00:e2:c0:58:8c:40:2a:46:16:
d6:ad:a6:dc:4b:6e:1a:aa:ae:c4:91:ac:df:b0:b9:0c:21:08:
26:ad:08:77:fd:91:11:9b:e7:1a:4c:d3:e0:06:e7:3d:a8:a0:
63:a4:5a:f4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEE5PxoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NWMzMTNlOTk2NWVhYTdiM2FlOWJkNWNiZjM1NjZkNDRhNTEwOTdkMB4XDTIyMDIy
ODAwMTEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg2MzAzZjhhNTZm
NDVjY2I3M2ExZGY0NTljYTZhZTI5NDU2ZWM2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANofTvUGu8ndFy8pqyz+rsVLEf3Pbz8EybKTz87Yv+1TegqV
PI1Kjp2wb6Fa/8wyg15bl6WLZNel5Q2Y7lH+8yIOk50QLYpQNMzPl5mLRPG7/X+Q
JW/O2HbKLolikJ/NS7bQRsUJIVym5vwO/7BJZXeqEqztbkO4hIBUwoB09iO2ETTs
lYbx6y/+0W/ARxNLmiiEMXF0BojWyYGWMD49/nIIyISV5djCGgD+YjFPii4JsdKf
HTMZRB9j6BAcqEvJyjkIHhrftBi6kxjV4OQUs3QYZaTyTOC/gVuYt9j/Bwc0UyvL
kdG0MrFiG3IfyX2cUKCBElKzFVDOxWgEL94a3AUCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRIYwP4pW9FzLc6HfRZymrilFbsZzAfBgNVHSMEGDAWgBSFwxPpll6qezrp
vVy/NWbUSlEJfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hjTVQ2WlplcW5zNjZiMWN2elZtMUVwUkNYMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvMDU5YTdhLWI1NjktNDY4MC04ZGU1LWRlMjMxMjgwYzJhMS8x
L1NHTUQtS1Z2UmN5M09oMzBXY3BxNHBSVzdHYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
MDU5YTdhLWI1NjktNDY4MC04ZGU1LWRlMjMxMjgwYzJhMS8xL2hjTVQ2WlplcW5z
NjZiMWN2elZtMUVwUkNYMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEArkoVAMEALl7ZAMEALl7ZzANBAIA
AjAHAwUDKgSDQDANBgkqhkiG9w0BAQsFAAOCAQEALjZlYL5kxLh+/pq8orBwzR9i
E100Vep/o1n9PnEssTPyjjJTgNqVWakCAIgOnzPKfw+6vSgPCHDhTyt+TayAHqE/
F7HItQT33rjSjaLPCS32GjbP8bEWdns+ieupgavvAayUoWNATto8EKZnS9o23Eh5
MY0K8P9mQ47HcFuBOUlJIyUYs8ygMjhpwfcsyOsC5ncfmEnOV1qYFdf4UeXcODVV
7OqczxpqDJPXrJx6NjXKcrgMnri/4L+akkcE6g6jPpBQVLhW6kEMFHVngxssAOLA
WIxAKkYW1q2m3EtuGqquxJGs37C5DCEIJq0Id/2REZvnGkzT4AbnPaigY6Ra9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org