Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/sFqvD3DbXn90SlSxedk-_VFVTi4.roa
File: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (raw, json)
Hash identifier: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=
Subject key identifier: B0:5A:AF:0F:70:DB:5E:7F:74:4A:54:B1:79:D9:3E:FD:51:55:4E:2E
Certificate issuer: /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial: 01941FFA2D49F6A3F04A12642D7E41FBC71E
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/sFqvD3DbXn90SlSxedk-_VFVTi4.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2d:49:f6:a3:f0:4a:12:64:2d:7e:41:fb:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b05aaf0f70db5e7f744a54b179d93efd51554e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:38:56:bc:18:bd:8f:19:fd:95:9e:af:58:
52:9b:e5:47:cf:59:84:c5:58:49:a1:55:b9:e2:3d:
89:b6:c3:4b:45:d6:d2:6d:a0:6f:56:d7:e2:8a:66:
ed:78:5a:ad:05:59:e7:e2:0f:10:78:5c:c2:6c:41:
c4:24:62:f1:ab:85:31:ba:56:9c:7c:31:73:81:da:
78:34:4f:e1:10:b7:31:17:34:a2:22:a5:65:b3:0f:
8d:e0:e3:1f:e9:b0:52:ab:9e:05:cc:23:ef:f0:b4:
8c:49:08:a8:d7:a3:81:f8:36:37:32:a3:99:56:71:
88:bd:08:bb:89:71:80:f5:59:16:93:5a:b5:5a:71:
b8:22:66:fc:73:85:46:26:68:af:de:c2:12:39:99:
d8:9f:e0:31:f3:d5:e5:05:88:69:28:e8:3d:c9:66:
b5:7b:58:de:36:03:24:bf:19:de:00:ee:0e:0f:4b:
d6:a3:9d:e4:5b:66:f7:81:03:4c:2c:5e:09:68:29:
9c:9e:f3:20:f0:82:e6:38:38:c6:00:84:d1:69:76:
98:4e:31:7f:6f:94:34:2b:dc:e5:6f:55:7b:ec:62:
b4:05:17:c7:a2:f5:29:fa:b8:39:12:f6:60:51:5d:
ab:eb:fc:17:96:6e:e3:a0:af:87:04:e8:6a:e3:85:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:AF:0F:70:DB:5E:7F:74:4A:54:B1:79:D9:3E:FD:51:55:4E:2E
X509v3 Authority Key Identifier:
keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/sFqvD3DbXn90SlSxedk-_VFVTi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.134.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e1:47:b0:5f:a7:d7:96:22:05:bb:5d:46:83:fb:0b:12:d8:
92:bc:81:e3:34:9c:12:67:84:b8:c7:3c:0a:01:59:58:54:bc:
94:d9:e9:66:ab:bb:e0:74:f2:81:c4:14:02:e0:aa:c0:e8:35:
80:d0:79:3d:14:30:ab:ac:32:4c:e1:a9:a9:56:96:19:a2:94:
dd:f1:c1:d0:c6:d6:67:b2:3f:f7:b3:af:b5:de:6b:8d:17:03:
ec:e1:a6:a2:11:39:cd:00:3f:b7:94:ad:01:f8:bc:e7:ba:4f:
38:02:a3:e3:5e:b1:b4:f7:ff:97:b2:10:59:18:45:24:14:5e:
97:9d:2f:a9:5b:bc:87:0d:a2:0a:80:be:dd:1c:c0:1c:d4:3d:
61:48:57:ee:c5:fa:31:25:72:ef:ca:92:82:a7:20:da:55:7e:
a7:2b:73:f7:20:7d:9a:32:d4:0b:9f:e0:0d:f9:04:b9:73:22:
70:7a:e6:f5:b6:b7:0e:4c:5c:10:e3:86:7c:c9:87:de:4e:50:
98:48:ce:cf:79:76:2f:35:e7:a6:84:f4:91:e7:d6:01:11:b1:
f1:f7:a3:74:8a:81:9f:fb:02:c9:36:ff:4a:bf:05:8a:61:31:
16:24:70:56:1b:9f:7f:2e:1f:00:24:5c:03:c4:da:66:ab:85:
0d:2f:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:41 2025 by rpki-client