Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/SJakYTj9pb3r41qOMQrQf_YPYbc.roa
File: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (raw, json)
Hash identifier: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=
Subject key identifier: 48:96:A4:61:38:FD:A5:BD:EB:E3:5A:8E:31:0A:D0:7F:F6:0F:61:B7
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 019420684662331B68AF2621E5854C4EAD3D
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/SJakYTj9pb3r41qOMQrQf_YPYbc.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208095
IP address blocks: 94.124.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:62:33:1b:68:af:26:21:e5:85:4c:4e:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4896a46138fda5bdebe35a8e310ad07ff60f61b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:60:38:d9:72:8f:3b:1b:48:74:39:70:e3:
a5:c4:0b:d1:7d:40:66:b9:3d:ae:e4:31:d4:c4:2e:
d8:21:2c:d3:ee:23:85:93:b2:c0:a2:be:01:51:35:
b6:54:41:76:0d:df:f3:c0:ac:06:4b:77:6c:dc:7d:
14:ba:d1:70:b8:b0:2b:ce:01:91:fe:b8:b6:e9:71:
a4:a4:f8:28:e2:13:a4:0c:a3:b0:0b:9e:af:6d:d3:
de:54:ee:ec:cf:04:f9:6b:89:e0:6f:20:af:d3:f4:
e1:82:cd:bd:aa:df:67:2a:c3:06:c2:09:21:c3:f2:
41:c9:33:d9:8e:a0:f7:57:6a:a3:2c:d9:2e:59:10:
39:cd:46:2a:69:5e:04:48:0f:e2:b4:6c:54:d9:c5:
5d:ee:d8:d0:bc:9d:d1:f5:9b:35:73:5b:2d:2f:32:
60:1b:66:93:da:45:ef:15:f9:53:97:52:71:f9:88:
ee:14:e3:b8:ea:15:92:43:67:d1:21:4c:3b:53:ea:
74:8c:50:b9:57:f0:c1:7f:b7:a4:c4:f0:4f:4a:d3:
23:42:ac:33:eb:ae:51:63:35:6f:68:d7:65:43:a3:
0c:55:a1:6d:37:bf:e3:b7:f7:83:c3:f9:dc:3f:fb:
12:c5:65:e5:3d:0f:d1:60:c6:7d:0e:b3:62:97:73:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:A4:61:38:FD:A5:BD:EB:E3:5A:8E:31:0A:D0:7F:F6:0F:61:B7
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/SJakYTj9pb3r41qOMQrQf_YPYbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.73.0/24
Signature Algorithm: sha256WithRSAEncryption
69:56:16:47:10:10:32:8b:61:ff:ba:5b:97:26:23:4b:65:cf:
71:ba:32:d3:2c:9e:fe:87:7a:78:ac:ac:54:d2:8d:96:37:ee:
d7:02:8d:9d:ac:7d:d5:e7:42:2c:b5:8d:cd:ee:ed:35:f1:b2:
c3:da:b9:e2:8f:c8:64:f9:b3:e9:47:9d:50:f3:65:50:0b:ec:
4f:ca:50:08:c0:83:6f:61:61:20:54:dd:00:46:ed:48:b1:7a:
58:fe:90:f4:f5:bd:54:57:ff:5f:ec:b2:9b:d0:10:1a:9f:06:
cd:f9:5d:37:82:9d:3a:00:f7:13:43:2c:81:b8:16:fa:18:42:
48:87:b3:96:0f:5f:96:0b:20:71:80:ae:b9:12:4a:d0:30:ec:
74:c8:49:1a:f8:bb:27:5c:19:50:12:25:96:f7:c6:71:df:77:
22:49:c0:4b:dc:e0:64:30:08:df:5b:0e:c3:d8:22:2f:1d:c3:
6e:48:6e:4e:e9:37:c1:2f:22:6d:62:47:d8:07:63:75:64:c6:
c0:94:94:39:32:2b:58:b1:c9:ff:a7:a5:c6:55:e8:86:c8:4b:
db:2a:0e:4a:22:b8:14:06:5c:d4:3b:40:7a:d1:14:2b:ce:96:
94:5a:17:9b:f7:2a:e7:63:20:7e:d6:ca:92:0c:09:ed:e0:2e:
a5:f5:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:21 2025 by rpki-client