Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa
File: dj4-jxaqa75u-rqzZr5KnV0Ywls.roa (raw, json)
Hash identifier: MJ8M2jR94kx9fiRpgNa4bl+kezgizOEgwXFT63mTXV4=
Subject key identifier: 76:3E:3E:8F:16:AA:6B:BE:6E:FA:BA:B3:66:BE:4A:9D:5D:18:C2:5B
Certificate issuer: /CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
Certificate serial: 01856F0B82ED35F5A0CF2FCA91CFD108B88A
Authority key identifier: 23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa
Signing time: Sun 01 Jan 2023 20:35:03 +0000
ROA not before: Sun 01 Jan 2023 20:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.234.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:82:ed:35:f5:a0:cf:2f:ca:91:cf:d1:08:b8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
Validity
Not Before: Jan 1 20:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763e3e8f16aa6bbe6efabab366be4a9d5d18c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:5d:2c:c0:92:ad:ec:d1:ce:c1:ed:af:0c:
45:61:1f:50:81:e7:17:93:18:a6:b0:f3:c3:2f:aa:
92:33:14:c5:d0:fc:e5:eb:2d:0b:2c:5a:bf:82:7a:
c9:7c:e6:66:43:0e:f3:f4:9a:25:8b:ee:26:15:0c:
f0:1d:b8:ac:b3:f7:9e:9d:f6:8f:5c:18:86:82:f5:
88:75:1e:4c:70:66:3c:6f:dc:87:57:de:bd:d1:a8:
fc:6a:62:56:54:82:87:22:6e:20:79:2b:ca:8a:8b:
3e:d2:e3:23:d0:6b:c5:40:31:99:c3:2e:15:27:43:
e9:0c:64:59:56:d0:22:f6:d2:28:ae:51:31:f0:07:
fc:ea:bc:4e:38:98:0a:60:c2:30:c4:e3:ab:e5:db:
db:49:cb:22:2b:75:5d:e0:ba:a2:8b:8c:9b:a7:80:
d1:57:2b:f6:a3:89:13:c7:6d:71:c3:c5:0a:40:d5:
15:ae:f0:14:d8:39:94:26:61:2a:93:c0:69:c0:46:
84:e3:82:8d:0d:17:6e:d2:96:73:43:e7:b7:4b:29:
c5:c1:20:39:7d:a9:3f:c7:82:bd:92:92:ce:4f:99:
d4:44:2d:5a:43:b7:98:4c:61:81:92:3a:e6:8f:f8:
46:6e:db:d6:45:12:06:1c:d3:b3:6c:b2:42:4d:e0:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:3E:8F:16:AA:6B:BE:6E:FA:BA:B3:66:BE:4A:9D:5D:18:C2:5B
X509v3 Authority Key Identifier:
keyid:23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/dj4-jxaqa75u-rqzZr5KnV0Ywls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b7:5e:e3:e6:dd:dd:43:43:82:e5:b4:5b:fd:e8:63:af:45:
16:fa:bc:02:f2:0b:34:c8:b0:53:d1:1b:a1:46:16:57:b6:04:
45:9a:21:e4:8c:48:73:14:1a:04:12:1e:9f:86:60:94:44:6c:
e8:41:99:dc:8d:d7:70:89:f8:36:27:f0:c6:51:6b:63:18:0c:
1d:e4:51:d4:1a:f3:e7:72:63:93:d8:17:14:f9:38:d5:4a:fe:
40:14:46:7a:df:22:62:cb:be:5f:f0:4c:bf:cc:84:2a:75:ce:
14:2b:da:a2:9a:11:96:a9:13:3a:6a:12:d5:aa:d3:6e:7f:4a:
47:a4:12:5e:f6:87:85:ec:db:1e:3c:bc:00:5c:06:cf:0d:f7:
0c:52:ca:1a:15:41:b7:90:0a:2a:1a:b1:59:36:1d:ed:06:e2:
5e:c3:cb:3b:44:1b:52:39:f0:4f:7d:4f:92:3c:c6:a5:6c:49:
1b:9e:34:a8:10:a0:f7:f1:b7:71:f0:d0:d1:6b:7b:c5:fc:49:
50:b1:b4:48:0d:cf:d6:7e:da:d8:1a:0e:37:98:23:7b:f4:da:
41:63:1d:95:b6:94:b3:88:d0:22:7e:3d:a4:e2:69:8b:06:00:
64:aa:35:e4:b1:cc:c0:c3:52:6b:73:c5:5e:ed:c1:f3:78:98:
78:4e:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:02:45 2025 by rpki-client