Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r96CDZ29E-fcIUFShP-BgZDkpMY.roa
File: r96CDZ29E-fcIUFShP-BgZDkpMY.roa (raw, json)
Hash identifier: 9Lg6IzJLXWW9+51ByfSqMKOQ7/I4ChqMPGWQmau/bfc=
Subject key identifier: AF:DE:82:0D:9D:BD:13:E7:DC:21:41:52:84:FF:81:81:90:E4:A4:C6
Certificate issuer: /CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Certificate serial: 01856B80E17DFE4E1C89D82ED712EAA8663B
Authority key identifier: AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r96CDZ29E-fcIUFShP-BgZDkpMY.roa
Signing time: Sun 01 Jan 2023 04:04:46 +0000
ROA not before: Sun 01 Jan 2023 04:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 185.215.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:80:e1:7d:fe:4e:1c:89:d8:2e:d7:12:ea:a8:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Validity
Not Before: Jan 1 04:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afde820d9dbd13e7dc21415284ff818190e4a4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:61:76:52:04:88:ed:96:2a:07:48:d4:fb:
3f:ee:9b:2d:6b:7d:1f:d2:48:0c:19:8d:16:da:25:
47:7c:25:64:2f:a4:bf:e1:b8:93:c1:70:1c:15:f3:
4e:95:43:b5:92:a6:de:c9:eb:26:51:01:48:98:ac:
e5:8e:06:6c:44:cb:d4:79:2a:ff:8f:06:3d:d6:d8:
2f:e4:d1:87:be:6c:d0:eb:f4:04:e4:d9:d9:00:ec:
67:b1:42:ea:46:7b:97:06:81:bf:af:0a:dd:d0:9c:
33:47:95:d9:46:5d:0b:09:13:a2:b4:7a:11:03:70:
a2:02:87:bb:4d:56:aa:b4:7b:10:f8:3d:e4:46:cb:
61:11:41:c4:93:36:4f:12:97:a8:c4:1e:24:7b:3b:
d5:d4:80:22:7f:66:35:ee:fe:13:f9:d6:1f:71:fe:
97:2b:cc:f6:5d:95:8f:db:d2:7d:53:ca:d8:3c:78:
aa:7a:87:d6:87:b2:47:ab:4c:93:64:4e:be:59:c8:
45:5c:d7:41:7b:d9:74:bf:14:43:28:bf:5a:56:4c:
df:ee:35:49:41:83:52:ec:82:6c:d1:29:c0:9d:0c:
87:12:04:30:ed:b4:5b:f0:2e:c8:2c:9d:82:3c:b9:
37:28:0d:af:68:60:eb:c7:1e:27:e1:2b:fa:21:d9:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:82:0D:9D:BD:13:E7:DC:21:41:52:84:FF:81:81:90:E4:A4:C6
X509v3 Authority Key Identifier:
keyid:AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r96CDZ29E-fcIUFShP-BgZDkpMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.114.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5f:79:30:b2:5c:ad:47:6a:ad:93:eb:37:be:9f:6a:8c:5d:
94:79:c6:3d:ff:3c:c2:42:4d:dd:64:44:37:87:e0:2f:b1:b3:
59:07:54:9d:3c:9c:b3:31:42:3a:9b:c8:c4:a6:cb:09:99:de:
25:d7:ea:a0:b4:6c:b4:8f:ef:54:65:ba:15:ff:b0:0c:e9:97:
26:67:d5:4e:f1:6d:ae:69:8e:11:9d:5e:11:44:cf:25:d5:88:
cb:04:05:b5:64:35:fa:ea:fe:fe:63:ff:f6:77:6d:8d:ac:17:
ae:87:73:50:4a:43:77:56:8f:10:1e:b7:a4:d7:97:9a:be:fc:
65:1d:14:c6:25:8f:bf:7d:cf:83:5f:0f:7f:f5:b5:fc:fa:ef:
0f:11:ab:ef:05:dd:c4:83:fd:89:42:32:26:96:28:92:49:cb:
ce:5c:a1:9d:fa:2d:1f:02:0d:1a:c7:50:43:55:be:89:62:e0:
c0:37:13:c2:e9:fa:e0:3b:15:5a:eb:61:b8:77:13:29:08:69:
8e:29:60:81:e0:c1:62:44:21:61:45:49:94:5d:e8:5c:56:02:
2f:9e:c6:ce:6f:ea:6c:0c:98:c7:34:fa:af:4d:9c:0d:63:32:
e5:f5:79:46:e8:65:c4:43:82:28:8f:94:61:cc:06:07:d5:1f:
26:10:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:59 2025 by rpki-client