Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/SJHkosBOAVIwnrp1kruLR1wMVpI.roa
File: SJHkosBOAVIwnrp1kruLR1wMVpI.roa (raw, json)
Hash identifier: ePViFMP+PdJZw4jatYalnX+2jnhSl1m/WfZyenTkuO4=
Subject key identifier: 48:91:E4:A2:C0:4E:01:52:30:9E:BA:75:92:BB:8B:47:5C:0C:56:92
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 018EF6135501CE15D2CC59E2E76494229B33
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/SJHkosBOAVIwnrp1kruLR1wMVpI.roa
Signing time: Fri 19 Apr 2024 11:17:25 +0000
ROA not before: Fri 19 Apr 2024 11:17:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 92.119.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:13:55:01:ce:15:d2:cc:59:e2:e7:64:94:22:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Apr 19 11:17:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4891e4a2c04e0152309eba7592bb8b475c0c5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:ee:c7:2d:b0:18:30:e7:4a:46:19:71:1a:
c9:ce:50:74:f5:66:21:fd:01:aa:78:45:85:6a:06:
32:a1:85:2d:47:6b:44:1c:1b:f6:11:03:53:4a:2e:
26:e1:e9:a8:48:0a:8b:56:17:5a:ab:ba:d8:fa:1d:
f1:70:3b:9c:68:cf:fe:8b:e8:cb:a9:94:22:d5:2a:
0a:28:91:32:2c:a9:b3:22:12:e0:9a:88:7a:b2:36:
3a:71:1c:8d:b3:6e:fa:30:03:11:db:c3:ab:01:86:
4a:a9:06:cb:55:f8:15:45:29:17:27:91:db:83:7b:
26:a1:fc:42:57:ab:7e:24:90:fd:ff:f0:8c:1e:28:
53:c5:50:5f:c2:85:68:56:cc:25:e9:f6:e9:c8:e0:
83:42:37:d1:2e:45:75:02:fa:4f:f3:21:38:85:10:
9c:8a:ed:98:53:18:57:23:b0:40:24:cf:43:c1:74:
07:77:c9:a2:f6:38:9d:8e:b9:e7:9f:86:12:ed:ab:
26:e7:44:66:2f:2c:20:6e:c0:43:7d:2a:c4:58:31:
c4:ba:ac:e7:e3:4a:f9:4f:d7:6a:28:0b:72:fc:83:
03:2b:4a:1f:10:01:20:e0:20:17:20:a6:19:25:e9:
4f:4f:95:fb:e8:8c:75:60:a4:c5:57:4a:0d:9e:26:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:E4:A2:C0:4E:01:52:30:9E:BA:75:92:BB:8B:47:5C:0C:56:92
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/SJHkosBOAVIwnrp1kruLR1wMVpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.159.0/24
Signature Algorithm: sha256WithRSAEncryption
12:28:9d:a0:f8:8a:56:d5:a0:49:40:e3:da:20:84:b4:fd:97:
61:f8:b2:22:c2:e5:a4:19:65:df:62:c6:40:41:f6:e6:da:ff:
d9:b0:3c:27:d7:70:e4:f6:34:56:60:61:3f:04:42:54:7a:ae:
9e:06:d3:fc:5b:cb:ed:cd:14:50:63:ae:18:6d:c7:f5:47:7b:
84:2c:92:0a:58:62:3a:6c:e9:2c:9d:65:95:07:f1:46:c3:90:
cb:e7:5d:52:77:8a:5a:cc:47:af:4a:67:3b:66:2d:dc:7e:b3:
60:c1:b1:9d:bc:3b:15:f6:97:1f:d7:9c:50:6d:d6:fb:52:57:
2c:6d:30:59:c6:f1:4f:c4:77:04:78:1c:c1:5c:24:25:41:1e:
70:41:59:51:10:d6:11:7f:27:4c:9d:ae:25:53:18:9c:29:7c:
c2:18:be:5b:d7:1c:ee:21:ee:05:fb:8d:81:52:1a:49:96:84:
78:84:5f:a8:b5:77:ef:cd:2d:12:45:b5:1a:1d:7d:84:70:bd:
a9:2b:4e:83:31:d8:4d:47:bf:19:71:f1:60:51:67:6e:9a:cb:
97:61:c9:35:6b:29:55:7a:fd:80:26:ef:51:b9:d1:36:a4:de:
dd:c2:11:a4:12:ba:ca:40:7a:5b:cc:86:62:eb:c6:ea:52:70:
fa:07:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:15 2025 by rpki-client