Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SbYnLPVgSXao7MG4-ss-Jwq8iWQ.roa
File: SbYnLPVgSXao7MG4-ss-Jwq8iWQ.roa (raw, json)
Hash identifier: +RK9jx/hL5/XaOcgKRycP0hA9KawHXEd33+xuL2NK3o=
Subject key identifier: 49:B6:27:2C:F5:60:49:76:A8:EC:C1:B8:FA:CB:3E:27:0A:BC:89:64
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEC8A66C0F6D52B979C662E0E29D7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SbYnLPVgSXao7MG4-ss-Jwq8iWQ.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201801
IP address blocks: 193.192.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:8a:66:c0:f6:d5:2b:97:9c:66:2e:0e:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49b6272cf5604976a8ecc1b8facb3e270abc8964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:41:92:8c:c4:bd:45:f8:89:a5:c3:ba:d9:
24:f2:79:a0:42:ad:09:79:2f:cd:3c:e9:e2:5d:39:
ae:ad:68:e1:c5:2a:47:9c:dc:34:cd:1e:01:11:50:
8a:1b:41:b0:4d:d9:87:97:ab:74:e2:c6:81:a2:81:
ac:d4:34:ee:12:9f:3b:e1:07:d6:17:b7:ca:73:5e:
97:0c:3e:58:ff:fc:c7:de:59:ce:b7:c8:57:b4:b2:
27:08:f4:30:8c:f0:cb:14:d6:0c:1c:b6:20:80:fb:
69:03:a2:cb:ed:2d:ed:cc:34:86:a0:e8:1a:7a:bd:
8a:7e:db:54:a9:35:91:87:a5:9b:d6:8a:0e:bd:d0:
6b:d2:70:28:c9:79:2c:8c:90:40:7c:43:45:33:d3:
49:e8:d6:2b:c1:75:d7:45:ee:92:25:b6:d6:c2:69:
93:70:13:e3:61:e6:47:4b:96:86:93:f3:7e:40:71:
1d:7b:8b:5e:36:0c:d0:e6:40:67:79:26:f6:cc:55:
3a:2a:d2:bb:a2:44:f6:ba:f7:70:b4:e6:86:94:53:
eb:4e:9e:9a:96:18:22:99:d9:19:cf:9e:49:b5:89:
3c:4b:e1:07:e8:68:07:df:6f:bd:19:5b:78:01:49:
e6:54:d7:53:c1:95:4e:c6:b4:08:32:16:85:93:e5:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:27:2C:F5:60:49:76:A8:EC:C1:B8:FA:CB:3E:27:0A:BC:89:64
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SbYnLPVgSXao7MG4-ss-Jwq8iWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:51:f8:35:fd:d3:bc:c5:ff:87:a7:3d:3e:5b:f0:f6:6d:4e:
0f:1b:a1:a1:a8:ca:4a:f8:56:77:6d:7c:ad:dc:a9:04:b9:0b:
b4:fb:67:3f:e9:f2:03:c2:7f:45:61:37:90:38:16:72:5f:94:
f8:5c:61:b8:f2:6e:f1:59:61:22:71:f5:4c:23:74:04:c7:c6:
7a:6a:b0:89:1d:ed:29:34:8e:46:a8:75:33:0c:1d:3a:2b:34:
55:83:fe:e0:e1:71:70:47:a9:15:30:38:8f:39:e7:a6:fb:07:
e7:9c:cb:04:18:05:77:11:cc:49:13:5d:d6:be:c8:65:ef:8f:
06:87:2e:1f:bd:a9:84:43:5e:b6:d2:77:05:80:a6:5f:f9:42:
25:e7:12:bd:c3:d0:3e:c4:44:fe:47:b7:b6:02:05:4d:28:98:
6b:d2:b5:c4:c9:09:c9:88:15:d2:52:37:12:c2:8e:6f:9a:a5:
fb:4a:21:df:38:23:0b:fa:18:98:72:65:f6:d5:83:89:0e:dc:
29:0b:2b:b2:9e:61:ba:9a:be:20:ee:f8:4b:4b:cf:22:ce:b4:
a2:4a:c0:a3:6d:d4:29:23:a9:3f:55:bc:93:5a:d7:b7:9a:16:
5d:f5:4a:3d:ff:6e:73:bd:82:e5:18:5a:45:50:92:84:db:8c:
64:15:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:34:30 2025 by rpki-client