Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/sgBY7n2csmLkZgf9ainTuHIvW2g.roa
File: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (raw, json)
Hash identifier: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=
Subject key identifier: B2:00:58:EE:7D:9C:B2:62:E4:66:07:FD:6A:29:D3:B8:72:2F:5B:68
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 01942369B92BDE5112B41D29EF8D4F6286D9
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/sgBY7n2csmLkZgf9ainTuHIvW2g.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 195.250.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b9:2b:de:51:12:b4:1d:29:ef:8d:4f:62:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b20058ee7d9cb262e46607fd6a29d3b8722f5b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:d4:f3:9f:0c:d9:6e:58:e5:45:d6:81:11:
84:32:5c:7b:dd:8d:9f:39:a6:7f:4f:d8:b7:17:c4:
59:b5:9a:68:48:09:b7:e6:56:fd:5a:ea:e8:3b:36:
32:4b:08:65:3c:9a:46:1e:b3:78:93:bb:9c:e4:a3:
e9:2f:52:80:29:91:3a:a4:5c:09:be:75:17:64:1b:
b0:c4:e4:8b:9c:18:d0:b4:5a:26:ca:87:e3:e4:b5:
27:70:fd:78:07:86:53:d3:27:0a:b1:44:84:de:25:
18:4b:cf:9d:c2:1e:d2:95:30:38:b3:bf:9a:99:56:
c2:34:48:ba:6c:c4:78:cf:10:74:04:02:04:20:bf:
a8:c7:db:0f:8d:1e:fa:6a:38:bc:e4:14:cf:46:5b:
03:e0:6a:46:8f:71:d9:49:f3:87:ea:5a:ff:24:67:
09:b7:c4:69:bb:c6:aa:da:a0:c0:e2:e7:68:5c:72:
ae:ec:d9:84:6b:66:d4:f3:69:fa:45:77:84:b7:d2:
04:94:14:8d:70:46:12:11:58:d0:b2:8c:98:1c:2d:
2c:f1:09:ba:93:08:5e:90:60:12:c6:2e:d6:1d:8a:
67:67:aa:48:ed:25:7e:fd:f1:c1:c6:1d:a1:6d:80:
4b:b0:5f:89:3e:24:81:13:a0:6e:f1:3e:5f:f1:0d:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:58:EE:7D:9C:B2:62:E4:66:07:FD:6A:29:D3:B8:72:2F:5B:68
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/sgBY7n2csmLkZgf9ainTuHIvW2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:16:73:ca:56:d3:f3:20:c6:aa:2a:33:33:52:80:9f:72:72:
e4:6f:e8:ad:7a:e6:dd:3c:7a:2c:0f:ce:ab:1d:53:29:ae:7c:
d3:50:fe:af:d3:b9:9b:4b:99:ff:66:e5:2c:bf:4b:ff:ca:4e:
d7:1b:c2:b9:13:d4:40:4f:9d:ba:db:a6:4b:d5:5a:34:95:3c:
9d:31:27:c0:c8:e5:8b:0f:c8:09:82:44:f9:17:ca:84:f2:2f:
80:2d:8c:4e:8e:bd:a6:31:8e:16:04:f4:7c:08:48:00:6e:16:
49:46:d9:0d:10:d7:4e:5f:28:40:92:4a:e7:30:4e:4c:bd:cb:
5f:eb:09:e5:95:dd:9d:57:d7:79:ca:27:95:e7:bf:9c:7e:48:
bf:47:37:a7:6e:b9:76:df:e1:1d:04:db:6a:86:de:ce:c4:0e:
7b:4a:b0:21:1b:c0:f9:d9:de:c9:ed:9b:72:c2:f1:4c:08:d5:
af:ee:51:d5:fc:a4:b4:fd:b9:61:6a:5b:02:2d:e2:50:b4:3f:
3c:0f:1c:f7:08:e6:a2:53:d6:24:06:91:eb:01:00:ca:ec:7a:
65:94:05:89:97:08:da:d1:e5:f0:85:20:ad:d2:6d:9b:27:d1:
d6:db:d9:36:4d:cd:18:4c:8b:b4:ab:e1:63:ac:9a:d0:11:55:
41:40:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:53 2025 by rpki-client