Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/jr8y-5BaBbyZVG_A9BcUYNdcvSo.roa
File: jr8y-5BaBbyZVG_A9BcUYNdcvSo.roa (raw, json)
Hash identifier: ZEAeB+UGpZFxciGqdGWe5eA/VEg0i+u8jD2WKtNSg5o=
Subject key identifier: 8E:BF:32:FB:90:5A:05:BC:99:54:6F:C0:F4:17:14:60:D7:5C:BD:2A
Certificate issuer: /CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Certificate serial: 01B2D2C2
Authority key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/jr8y-5BaBbyZVG_A9BcUYNdcvSo.roa
Signing time: Sat 01 Jan 2022 09:56:22 +0000
ROA not before: Sat 01 Jan 2022 09:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 92.119.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28496578 (0x1b2d2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Validity
Not Before: Jan 1 09:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ebf32fb905a05bc99546fc0f4171460d75cbd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:82:7d:c9:a5:90:2f:57:73:a7:a9:39:f5:
66:d4:7a:82:ca:f9:fe:77:39:b5:ff:fa:c3:88:e4:
bf:db:30:27:1c:0a:30:47:af:88:3e:56:89:da:44:
7b:fe:85:e9:30:90:4a:19:9c:2f:5a:ea:73:6e:f4:
fc:70:cd:c8:af:73:2c:88:d9:20:ff:98:f7:7e:ed:
87:70:9c:a0:e4:8c:92:f5:a4:1b:18:63:4e:7f:d0:
99:d6:e2:f6:92:15:1b:5f:d9:c5:95:1f:2a:4a:8b:
99:a6:ca:bd:ad:72:81:05:df:d6:b2:b6:63:67:1e:
45:60:34:77:4a:9d:71:6d:80:e5:b2:10:35:da:17:
ca:20:38:4d:ac:e9:dc:05:71:08:4e:4d:22:17:4e:
76:1f:7f:fa:fd:e8:5d:56:72:58:b0:7c:bc:36:61:
be:68:d0:7d:e8:e9:64:f2:5c:8e:37:a1:98:0c:69:
be:4f:da:4c:af:21:90:fe:b8:bc:61:8b:7b:d7:78:
6b:51:04:e8:9d:e5:23:62:67:3c:3e:8a:dd:52:00:
7b:7d:8f:fb:1a:bf:04:2e:1c:42:27:cd:1c:5e:e0:
c3:e6:85:86:43:30:49:58:fd:4f:d1:e8:e0:a2:f1:
bf:af:fb:4d:fc:98:de:2a:c5:53:e2:f4:42:2c:0f:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:32:FB:90:5A:05:BC:99:54:6F:C0:F4:17:14:60:D7:5C:BD:2A
X509v3 Authority Key Identifier:
keyid:9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/jr8y-5BaBbyZVG_A9BcUYNdcvSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ac:45:16:e5:30:c2:01:00:cc:1e:6c:7e:34:fa:7d:1d:3a:
87:ac:fb:2c:ce:22:2f:79:82:a9:7d:52:74:7b:a4:c2:27:c5:
86:fd:9d:da:3f:67:c2:07:4c:fa:cf:3d:bc:6f:ee:7c:56:3f:
a4:d1:88:6b:83:77:6c:ea:27:c5:e6:d3:bf:d4:f9:28:8c:76:
17:c2:ad:67:39:9a:de:2a:69:da:f6:6f:fa:fd:1c:6d:75:f5:
20:c7:81:45:d4:cf:6e:67:f8:b8:ae:c8:43:2e:62:93:d9:7a:
16:9d:31:7e:0a:a2:cf:6f:ab:f5:d3:1d:66:90:df:9b:11:76:
8b:30:a9:4f:09:16:f0:cb:96:74:3c:46:36:e4:9b:96:80:d6:
26:8f:1c:e4:c8:6d:d4:fd:25:f5:33:2f:d9:b3:b9:5b:b9:1d:
c6:6a:70:77:18:35:21:f1:9b:9b:a3:57:83:2d:18:5d:27:3e:
db:96:6c:ed:d8:ed:c4:63:8f:68:61:b6:ad:e9:88:e6:74:85:
21:ae:01:1a:3f:7e:db:3f:ed:4c:09:47:f4:0d:cc:5b:ed:c4:
67:ee:3a:8c:20:cf:45:b3:9c:c4:29:bd:ae:c3:56:ea:0e:9d:
f8:eb:fd:d4:24:11:76:2e:a5:92:f2:68:03:7a:08:b3:65:d4:
18:0c:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:48 2025 by rpki-client