Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/sJYMwo200kc_JOEUu8LgshH8u4E.roa
File: sJYMwo200kc_JOEUu8LgshH8u4E.roa (raw, json)
Hash identifier: ZSBFSQniA3kGtcm+Z+BZhg6dXJBYL9d1swTV3ijAXis=
Subject key identifier: B0:96:0C:C2:8D:B4:D2:47:3F:24:E1:14:BB:C2:E0:B2:11:FC:BB:81
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A62B1A60A682864EE9726A8F25E9
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/sJYMwo200kc_JOEUu8LgshH8u4E.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 194.99.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a6:2b:1a:60:a6:82:86:4e:e9:72:6a:8f:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0960cc28db4d2473f24e114bbc2e0b211fcbb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:a3:ae:23:27:1f:3b:bd:2a:eb:25:e6:4c:
2f:67:26:cd:91:42:c5:16:79:d8:8e:81:6d:d3:e3:
64:53:b6:c3:06:50:a3:01:d7:46:ac:8b:e1:dd:5d:
4a:ce:d4:40:80:c4:24:51:06:8d:f6:87:d5:12:67:
71:5a:98:af:35:28:c0:9e:27:61:c4:e0:fd:6d:15:
a4:93:79:31:e0:40:d6:de:b6:69:3a:bf:47:98:d2:
a0:ea:50:5d:f6:38:8e:bd:ad:89:e5:46:e9:52:38:
24:b5:db:48:2f:f2:4b:93:b3:16:72:1e:0d:4f:32:
2e:e3:63:0e:10:51:59:96:02:b9:5f:4c:5c:53:38:
8e:86:2a:d0:fd:e9:12:3f:67:9e:ca:99:34:18:59:
a3:1f:9b:61:4f:aa:4b:fb:8f:3c:0a:2e:b0:24:7c:
f6:b3:e2:d7:46:a9:d1:28:19:61:3e:71:05:da:22:
ff:d6:ce:31:ec:0a:15:be:db:ea:18:af:c5:f8:8d:
40:c7:81:bd:87:ef:03:f9:6b:be:64:21:e1:40:9b:
8a:92:f9:67:75:d3:9f:7b:9a:eb:f0:2e:50:76:48:
96:37:db:9f:5b:1e:ab:19:6b:60:a2:7d:f4:3b:11:
d9:6e:31:73:b8:15:84:8c:fc:6a:ed:94:c7:a5:74:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:0C:C2:8D:B4:D2:47:3F:24:E1:14:BB:C2:E0:B2:11:FC:BB:81
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/sJYMwo200kc_JOEUu8LgshH8u4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ff:23:40:1d:fa:aa:90:bf:a9:a9:f6:78:f1:a5:1b:bb:c3:
e5:e9:be:9e:b4:6c:6e:10:c6:4d:a1:9b:f0:9a:22:57:dc:2d:
bd:5c:3b:b4:a4:24:75:d2:20:c4:84:94:27:4f:f0:26:bc:8a:
1f:58:97:35:99:7b:b9:14:b7:3a:99:45:0f:9d:64:a2:b0:fa:
e1:31:0f:bd:a7:10:fe:48:8e:9d:25:66:93:e1:99:d3:75:42:
7a:01:fc:51:e9:b1:1a:e7:65:ae:6c:17:65:15:88:e3:56:61:
a5:06:49:ee:0f:b5:12:44:47:47:b3:c8:b8:6a:3b:64:38:58:
0a:a7:fd:58:da:6b:16:85:3b:3e:5b:1f:96:58:d3:ab:5f:cf:
06:af:68:63:95:6a:f6:91:57:b2:51:69:f5:f2:a7:33:65:2b:
f4:c7:db:be:07:17:0d:e1:16:dd:93:24:94:ae:d1:04:ff:40:
36:72:c6:7a:6c:82:5e:53:e9:04:e3:97:72:59:d5:af:5f:60:
ea:d6:15:f1:7f:68:ec:4a:a6:04:8b:14:ba:63:7c:4c:5b:08:
54:2c:12:09:49:95:ce:c8:67:5f:35:25:54:73:e7:cd:67:4c:
be:9e:90:cf:16:05:b3:aa:a2:0b:bf:e7:52:4e:fd:11:e8:42:
e0:14:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:31:40 2025 by rpki-client