Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/Sjk-hMVz5Yq15653m82LHzN2q2c.roa
File: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (raw, json)
Hash identifier: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=
Subject key identifier: 4A:39:3E:84:C5:73:E5:8A:B5:E7:AE:77:9B:CD:8B:1F:33:76:AB:67
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 019422FB4589D5FC3C87EC8E917ACD734784
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/Sjk-hMVz5Yq15653m82LHzN2q2c.roa
Signing time: Wed 01 Jan 2025 17:48:00 +0000
ROA not before: Wed 01 Jan 2025 17:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58231
IP address blocks: 194.33.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:45:89:d5:fc:3c:87:ec:8e:91:7a:cd:73:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Jan 1 17:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a393e84c573e58ab5e7ae779bcd8b1f3376ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:31:06:27:c2:de:1d:97:7f:55:be:df:53:
af:cd:32:37:16:1b:f8:b7:4f:5e:df:1f:05:14:97:
c2:ab:d5:5e:57:ae:a3:14:b2:d1:73:51:ae:ed:cf:
36:27:4a:f4:b3:59:98:c4:82:34:e4:c0:63:0d:1d:
8e:4b:0a:9f:53:0d:d0:6c:c4:c0:32:52:bb:23:f8:
18:f8:d7:a1:22:28:ab:4d:f8:de:a2:21:b8:ab:4e:
b7:1a:1d:71:9b:74:83:72:0f:70:b2:1d:e7:7d:1a:
fd:c0:33:aa:2d:1b:06:a3:6d:f2:f1:d3:fe:07:86:
d9:13:75:04:28:33:7f:4d:07:52:54:90:d2:e6:16:
a6:da:85:c9:a0:9a:56:96:75:18:d5:95:70:61:31:
56:89:02:ba:ee:08:67:20:19:94:9a:f1:e1:48:d3:
37:ff:d2:7a:72:66:40:da:7e:67:2f:13:59:75:60:
f9:2a:51:d7:d1:3a:18:d5:51:1d:a8:c3:f9:60:00:
6c:02:2f:fc:18:5e:b3:a7:0b:6c:70:dd:9f:4e:0d:
aa:27:88:29:42:3f:77:89:d9:dc:fa:a4:90:61:d6:
eb:bb:47:89:7c:a5:c6:f1:51:ee:cb:91:f2:07:e1:
69:07:27:e6:00:d3:c3:d7:1f:b4:af:41:c5:5f:c7:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:3E:84:C5:73:E5:8A:B5:E7:AE:77:9B:CD:8B:1F:33:76:AB:67
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/Sjk-hMVz5Yq15653m82LHzN2q2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b7:30:09:be:0a:c1:06:04:b6:85:90:64:97:ea:08:46:5b:
8d:07:6b:33:48:60:c2:86:15:d7:b8:72:7c:63:b0:82:45:8e:
81:a0:49:40:9c:a1:a1:68:74:2a:0b:e6:b5:11:c4:a7:c0:f5:
17:f7:8b:f2:fc:f4:15:33:f2:a3:5b:95:ad:b0:ab:4c:b3:b3:
f2:15:6a:de:f3:49:b5:13:1b:fe:53:bc:fe:f6:38:5d:f7:d6:
64:1c:39:0a:d4:16:6a:8d:63:30:44:42:27:08:75:e4:8a:9a:
a9:e5:47:5e:9f:27:16:63:a8:1d:9a:f3:32:a0:21:16:ce:be:
5d:17:c3:57:d9:9f:5a:53:77:12:38:7c:e8:8a:57:71:86:36:
0a:c9:6b:cc:df:74:40:7e:98:21:f5:bc:12:df:19:04:07:ae:
44:78:5b:30:5e:7d:4d:f0:2d:19:f1:50:cd:d9:f5:0c:45:2f:
c5:d7:ca:f3:56:d3:22:35:57:1a:ae:aa:b8:af:48:37:64:f1:
ea:2f:3b:49:2f:d9:8d:c3:28:70:7e:57:39:ca:2e:10:e2:f6:
9f:b5:b1:71:15:c0:17:57:81:61:6a:a1:7f:b6:b0:3f:8a:ca:
79:38:d2:0d:05:8d:76:4e:ed:4b:1d:26:fa:81:a8:ec:47:19:
c4:ef:2a:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+0WJ1fw8h+yOkXrNc0eEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWNhZjVlNTQ5NWY1NGIwMzlmMWQwZjI0NzExMTI0Njdj
OTc5MWMwHhcNMjUwMTAxMTc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTM5M2U4NGM1NzNlNThhYjVlN2FlNzc5YmNkOGIxZjMzNzZhYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTgxBifC3h2Xf1W+31OvzTI3Fhv4
t09e3x8FFJfCq9VeV66jFLLRc1Gu7c82J0r0s1mYxII05MBjDR2OSwqfUw3QbMTA
MlK7I/gY+NehIiirTfjeoiG4q063Gh1xm3SDcg9wsh3nfRr9wDOqLRsGo23y8dP+
B4bZE3UEKDN/TQdSVJDS5ham2oXJoJpWlnUY1ZVwYTFWiQK67ghnIBmUmvHhSNM3
/9J6cmZA2n5nLxNZdWD5KlHX0ToY1VEdqMP5YABsAi/8GF6zpwtscN2fTg2qJ4gp
Qj93idnc+qSQYdbru0eJfKXG8VHuy5HyB+FpByfmANPD1x+0r0HFX8cEWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEo5PoTFc+WKteeud5vNix8zdqtnMB8GA1UdIwQY
MBaAFE5cr15UlfVLA58dDyRxESRnyXkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMt
MDlkYjU3NDY5YmI4LzEvU2prLWhNVno1WXExNTY1M204MkxIek4ycTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMtMDlkYjU3NDY5YmI4
LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiFcMA0G
CSqGSIb3DQEBCwUAA4IBAQAOtzAJvgrBBgS2hZBkl+oIRluNB2szSGDChhXXuHJ8
Y7CCRY6BoElAnKGhaHQqC+a1EcSnwPUX94vy/PQVM/KjW5WtsKtMs7PyFWre80m1
Exv+U7z+9jhd99ZkHDkK1BZqjWMwREInCHXkipqp5UdenycWY6gdmvMyoCEWzr5d
F8NX2Z9aU3cSOHzoildxhjYKyWvM33RAfpgh9bwS3xkEB65EeFswXn1N8C0Z8VDN
2fUMRS/F18rzVtMiNVcarqq4r0g3ZPHqLztJL9mNwyhwflc5yi4Q4vaftbFxFcAX
V4FhaqF/trA/isp5ONINBY12Tu1LHSb6gajsRxnE7ypR
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:21 2025 by rpki-client