Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/IO5_JEvZ22FfXOmUGu9fMZcMUEg.roa
File: IO5_JEvZ22FfXOmUGu9fMZcMUEg.roa (raw, json)
Hash identifier: 48DAtj6bWzznickwbdFvhSXW2egHCi6ZT4J5DaNor2k=
Subject key identifier: 20:EE:7F:24:4B:D9:DB:61:5F:5C:E9:94:1A:EF:5F:31:97:0C:50:48
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 019426D9C0E023920A14F917D8F69280E5E9
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/IO5_JEvZ22FfXOmUGu9fMZcMUEg.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56559
IP address blocks: 147.78.96.0/22 maxlen: 24
185.149.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c0:e0:23:92:0a:14:f9:17:d8:f6:92:80:e5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ee7f244bd9db615f5ce9941aef5f31970c5048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:66:98:bc:74:3d:06:fa:0d:bc:81:c5:96:
65:16:53:32:ac:5e:f8:40:79:27:3b:e8:16:c7:0f:
d4:1e:c4:27:cd:f0:f9:7c:cc:9d:cc:5f:42:d1:1c:
36:79:f0:1b:47:31:1d:42:fb:3c:b2:9c:62:f7:f5:
d9:48:9d:a3:da:d9:fc:26:d5:1d:47:f0:96:8d:f8:
37:57:96:9e:9a:da:b4:b7:38:4c:7c:8c:b0:bd:8d:
f0:8e:45:79:4a:bd:bd:48:44:85:87:73:5c:2a:6d:
59:11:8e:b0:d8:98:3b:41:21:f3:f1:a1:a7:ef:31:
a1:61:d6:c6:13:81:0f:65:86:75:07:e5:21:35:0a:
f2:70:41:9d:27:c5:95:b1:43:9f:9d:56:03:87:08:
99:c4:a7:91:92:8d:2a:91:48:f1:17:3f:ca:0c:c5:
60:be:5e:fc:42:90:cc:bb:ff:ba:f4:15:eb:a8:48:
ec:b1:e3:2b:96:7a:f3:33:01:e4:ae:11:1e:91:3c:
c7:1b:89:ab:78:cb:71:c7:98:47:76:67:b2:7c:4a:
d6:a4:1b:62:8d:b3:e5:95:f8:43:1f:1d:74:4b:0a:
3d:16:b4:fa:99:41:f3:c2:11:f4:5c:ba:92:e3:26:
a4:f0:48:35:a6:70:41:67:9b:5a:11:d0:37:ed:07:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:7F:24:4B:D9:DB:61:5F:5C:E9:94:1A:EF:5F:31:97:0C:50:48
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/IO5_JEvZ22FfXOmUGu9fMZcMUEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.96.0/22
185.149.188.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ba:7e:b6:bf:59:46:ac:51:31:ae:be:d1:27:27:e4:96:4c:
45:e6:d7:51:3e:bc:fc:7e:70:21:d4:5a:da:a7:98:c3:b4:77:
1c:76:0b:d7:be:8b:b8:65:d4:8c:60:cd:93:f6:53:da:06:63:
af:b2:94:cd:28:e7:51:c0:c3:43:25:44:63:4d:e9:be:ff:f1:
52:7e:1c:66:dd:f8:71:c7:89:90:59:78:a8:4a:26:c9:eb:31:
92:ef:e7:fd:ab:79:52:2e:f3:85:10:f4:07:b7:5c:c7:95:29:
c1:2c:02:6a:af:67:90:d0:f5:1a:a7:af:5d:d5:04:ae:4a:bb:
cf:68:ab:20:c7:3b:f9:26:b6:8f:93:16:52:fd:d4:3a:91:d4:
bc:c3:34:47:77:74:43:ee:df:bd:e1:e7:bd:66:b0:91:65:05:
26:05:a1:c8:1f:7d:1e:cf:4e:d7:d6:a5:a4:3a:fc:c4:5a:1f:
dd:5a:d2:ea:fe:a4:11:36:06:a4:2f:7a:ab:d7:74:8a:52:60:
c2:a8:a0:1b:b6:59:e1:f2:96:80:65:33:63:91:0a:c3:24:d3:
3a:a9:80:85:00:bb:6a:cc:3d:96:3e:63:ad:00:b9:d5:d1:7a:
eb:8b:ce:db:cd:10:8c:67:d5:be:2d:7b:c0:84:3d:1e:69:d6:
b0:38:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:56 2025 by rpki-client