Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/s24ws25uv296vCOy9q_Gj20ajLo.roa
File: s24ws25uv296vCOy9q_Gj20ajLo.roa (raw, json)
Hash identifier: LhFDWiZIkJRPm1UuefNaW7z8FjbQ47OGdTTlKsQVHso=
Subject key identifier: B3:6E:30:B3:6E:6E:BF:6F:7A:BC:23:B2:F6:AF:C6:8F:6D:1A:8C:BA
Certificate issuer: /CN=5c60ed8cb4746245a7e901549ae13f0c10552e15
Certificate serial: 018487D4D899D6ACBECEF6FCAD32F82D470D
Authority key identifier: 5C:60:ED:8C:B4:74:62:45:A7:E9:01:54:9A:E1:3F:0C:10:55:2E:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGDtjLR0YkWn6QFUmuE_DBBVLhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/s24ws25uv296vCOy9q_Gj20ajLo.roa
Signing time: Thu 17 Nov 2022 23:03:03 +0000
ROA not before: Thu 17 Nov 2022 23:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209529
IP address blocks: 185.228.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:d4:d8:99:d6:ac:be:ce:f6:fc:ad:32:f8:2d:47:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c60ed8cb4746245a7e901549ae13f0c10552e15
Validity
Not Before: Nov 17 23:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b36e30b36e6ebf6f7abc23b2f6afc68f6d1a8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:e5:58:42:5b:05:b9:a7:a6:3b:41:a8:b1:
63:31:4b:42:63:fe:76:30:13:4f:27:7c:51:26:5c:
68:f3:89:64:ff:22:15:58:2f:bc:53:5c:5e:c6:42:
c3:13:09:31:45:5e:4b:3e:9e:5c:83:aa:c6:8c:e2:
13:48:a8:eb:e8:7b:ab:b9:26:03:56:ea:4a:3e:62:
65:fa:7a:04:36:fe:ce:a8:4c:82:5c:77:06:49:63:
79:94:1e:5d:3b:4c:c9:51:28:ee:39:ba:32:75:71:
1e:59:d2:bc:2c:3a:5d:10:ba:8b:fc:35:83:0b:c3:
1e:26:87:f3:5d:13:75:38:65:e0:33:71:a1:93:5a:
75:d6:87:73:94:86:b1:8e:d5:16:f1:3d:6b:02:60:
77:23:63:0b:ad:55:af:9f:07:07:a7:1e:4f:e0:71:
ee:68:f3:1f:4f:fe:58:58:86:33:c1:38:cc:87:b4:
74:f7:da:20:f9:dd:9a:60:69:f8:01:49:cc:bf:f1:
58:ec:32:b0:da:bd:34:a1:68:bb:e4:be:6d:f3:cc:
b3:9e:9b:a2:2b:f6:d1:9e:0e:32:4d:33:7a:c5:06:
b7:b1:c0:42:7c:16:b2:c6:ef:48:02:86:da:f0:4a:
42:32:af:a9:d5:c9:69:74:87:cd:04:58:0f:35:b3:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:30:B3:6E:6E:BF:6F:7A:BC:23:B2:F6:AF:C6:8F:6D:1A:8C:BA
X509v3 Authority Key Identifier:
keyid:5C:60:ED:8C:B4:74:62:45:A7:E9:01:54:9A:E1:3F:0C:10:55:2E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGDtjLR0YkWn6QFUmuE_DBBVLhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/s24ws25uv296vCOy9q_Gj20ajLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b103d1-4c6c-41ba-82a7-d03bc1512cc7/1/XGDtjLR0YkWn6QFUmuE_DBBVLhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
39:b5:95:8c:5e:3a:4e:5f:d4:8f:7f:a7:75:37:f2:cd:ad:19:
78:1c:07:f0:31:92:9b:e1:4e:58:bc:5e:5e:8d:b1:b3:f5:b1:
ee:c5:0a:71:3d:a1:54:29:33:df:db:6d:6a:0d:04:cd:d6:0f:
e8:25:25:46:19:00:ba:38:a3:0f:43:10:e3:1a:a9:b6:e1:4b:
7f:8c:ce:70:23:41:98:ec:e7:83:1c:a0:a6:76:6a:e3:69:03:
c0:6c:c6:9c:62:4f:68:39:a9:6e:1a:1f:84:50:78:8b:df:38:
d8:04:b3:33:ad:66:9a:a0:cd:b1:d9:ac:b7:38:69:44:32:9d:
9b:6b:87:af:8d:a5:dc:ce:0b:11:ea:33:74:85:7b:d1:b6:33:
3d:1f:93:a5:1f:53:a5:dc:09:d3:e3:62:17:9a:77:4e:db:e5:
ce:29:b3:cb:13:c7:bd:2a:a1:e9:61:ba:7d:9f:17:45:4b:f3:
cf:6e:33:4b:f6:ce:34:c8:3c:d3:55:9f:c9:8a:04:60:c9:00:
c4:af:09:58:fc:c6:42:ec:76:13:53:c4:28:21:16:eb:08:75:
fb:1f:1e:2c:d9:6e:d1:33:fe:17:2e:8e:3d:9a:a3:7f:79:f9:
f6:c7:b3:27:86:ec:9c:5e:09:e0:f7:ba:1a:92:16:88:0f:e5:
45:dd:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:30 2025 by rpki-client