Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/s-bF-4I-MJBGPJdxAer-gZJYmnk.roa
File: s-bF-4I-MJBGPJdxAer-gZJYmnk.roa (raw, json)
Hash identifier: 5uc1Pm5Ss4jlYQhGE2msp1v7h8jNQXk/7X0b2Z7Gh+I=
Subject key identifier: B3:E6:C5:FB:82:3E:30:90:46:3C:97:71:01:EA:FE:81:92:58:9A:79
Certificate issuer: /CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Certificate serial: 0185712783B4468948D7A1B03AD116DA726A
Authority key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/s-bF-4I-MJBGPJdxAer-gZJYmnk.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 92.119.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:83:b4:46:89:48:d7:a1:b0:3a:d1:16:da:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e6c5fb823e3090463c977101eafe8192589a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:ee:7a:fe:e0:e2:25:35:44:39:b8:81:d1:
0c:d8:c5:23:46:6a:f1:e3:e0:cf:92:eb:56:a0:ff:
91:75:1c:4e:ae:3f:68:f8:54:80:9f:41:60:6f:12:
27:fe:81:24:aa:ff:b5:1a:4f:65:d5:4d:e3:19:c3:
84:32:01:b7:58:57:72:ed:ab:d8:d3:fd:b8:8d:4b:
12:a9:d1:03:97:44:76:35:95:ed:78:49:dc:08:63:
95:6c:34:11:cb:c8:b5:e0:96:90:6e:3c:33:3d:3a:
d5:ec:c4:f8:4b:3a:13:ed:a9:27:ad:88:bd:5d:f6:
c1:23:a3:04:7c:db:24:7f:c9:7d:b2:db:9a:05:6b:
4f:c4:ff:0d:04:49:17:8b:ae:d3:fb:49:fa:da:45:
a1:f7:66:ad:6d:a4:3e:2b:ab:13:f1:73:52:3a:b1:
d8:cf:fd:c2:ff:ba:6f:20:ed:f3:ac:7f:54:d9:0d:
65:e0:3f:d7:1e:4c:b3:6b:9f:7a:6e:de:59:92:92:
01:d2:4d:3e:6c:75:c6:3e:8a:c6:07:9c:37:80:3d:
5b:8e:de:a7:a3:fc:ba:bb:08:0f:e2:22:f3:a4:a6:
f1:1a:84:8e:f1:cf:29:01:ac:e3:6d:d9:e0:34:7b:
8d:c8:66:e0:9a:67:8f:33:08:46:e9:85:d4:af:9a:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:C5:FB:82:3E:30:90:46:3C:97:71:01:EA:FE:81:92:58:9A:79
X509v3 Authority Key Identifier:
keyid:9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/s-bF-4I-MJBGPJdxAer-gZJYmnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ad:86:7b:04:0b:ed:c3:1b:89:b5:3b:e6:7a:aa:3b:a4:86:
76:5b:82:77:d9:bc:a2:5e:90:87:3e:49:ad:dc:1a:ab:7b:91:
22:0f:bb:22:9e:58:dd:c0:1b:fc:e3:39:9b:b3:8d:2d:0f:a4:
99:89:f8:4a:f7:46:48:5f:63:52:eb:e6:ed:1c:ac:49:e6:32:
89:bb:4f:88:a8:56:ad:7c:59:db:92:36:f8:0b:19:62:dc:6c:
11:d5:e7:d5:f3:a3:30:8c:68:cd:2e:74:52:b6:30:bf:01:c0:
03:06:a4:c3:95:e9:f6:dc:08:1e:fa:4b:d6:22:98:bf:70:ba:
92:96:28:09:fb:cc:8c:d9:33:32:ec:8a:9d:30:eb:c6:55:26:
18:2e:5f:ca:e1:85:1a:e6:fb:22:fb:e2:87:69:e8:96:56:38:
e3:16:da:24:73:a2:4a:a2:91:a6:0d:4c:e0:ef:db:54:50:34:
b5:26:0c:aa:3e:7c:99:7c:5b:a5:18:6f:2d:82:bb:6e:51:98:
61:46:81:14:ef:ca:46:ae:b2:b5:5d:35:ae:f8:56:9b:e9:ec:
5c:ee:26:b9:66:a2:99:17:e2:c2:20:d0:6a:e5:8c:94:b9:b3:
e9:e4:88:15:61:eb:d1:68:d2:89:96:17:2c:4d:54:7f:56:60:
2c:2f:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:59:59 2025 by rpki-client