Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/4vil7F5AVXDMUdkQqh6KspXV9gc.roa
File: 4vil7F5AVXDMUdkQqh6KspXV9gc.roa (raw, json)
Hash identifier: Zhfqie0SbaHz00LuRAfdHCKBwGG01nDlZUyp+bE3H8U=
Subject key identifier: E2:F8:A5:EC:5E:40:55:70:CC:51:D9:10:AA:1E:8A:B2:95:D5:F6:07
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 01856CB842E33CC9BA72845F6DCFA4B14074
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/4vil7F5AVXDMUdkQqh6KspXV9gc.roa
Signing time: Sun 01 Jan 2023 09:44:53 +0000
ROA not before: Sun 01 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49282
IP address blocks: 185.196.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:42:e3:3c:c9:ba:72:84:5f:6d:cf:a4:b1:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Jan 1 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f8a5ec5e405570cc51d910aa1e8ab295d5f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:d8:ce:d9:a7:f8:db:95:60:8d:8a:15:3b:
d7:17:d3:7a:a6:d9:98:14:8a:df:7c:11:87:2d:6b:
e4:27:24:f2:13:bb:e5:09:95:07:ae:74:47:5c:37:
06:7b:a3:61:62:00:ed:2e:50:58:7b:a9:56:2f:7b:
41:56:31:b0:37:ad:4a:94:7c:0f:29:c3:a3:0a:1a:
43:bf:45:c0:d0:ba:7c:4d:3f:4f:05:da:13:7d:ef:
1d:e4:f9:46:b3:a9:7f:fa:54:a1:02:f9:d4:2a:fc:
9a:7a:22:0d:a1:0d:01:a8:d0:4b:84:84:a4:d9:36:
26:88:82:2d:3d:67:d9:c6:bc:7a:ba:a4:34:61:fe:
06:36:87:8d:35:bf:7c:c1:ce:f1:de:5b:6a:b4:eb:
3b:1c:a2:c7:f1:48:db:b4:94:17:dc:ae:39:29:bf:
a3:c5:69:71:18:23:94:93:24:71:5b:d3:dc:01:28:
5a:ad:7d:18:f1:e7:ef:b1:58:a8:81:9f:ba:aa:67:
c6:50:89:9f:d1:82:03:88:61:fe:59:97:a2:66:0a:
34:37:86:a5:ee:a5:d4:4b:89:49:70:00:50:1f:f6:
25:54:23:3c:82:70:00:1f:12:3e:4e:e4:b3:a4:bd:
32:8b:c6:aa:1a:8a:da:39:91:07:b9:d4:fa:8a:90:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:A5:EC:5E:40:55:70:CC:51:D9:10:AA:1E:8A:B2:95:D5:F6:07
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/4vil7F5AVXDMUdkQqh6KspXV9gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:38:11:b0:be:00:fb:78:55:bc:ec:58:5b:ff:e7:20:55:d8:
83:7a:85:3e:cc:9f:7e:37:54:34:82:a3:4f:61:ae:3d:22:98:
89:ad:8e:78:20:d5:fa:a4:c8:35:7c:ec:d0:86:8c:0a:08:4c:
66:14:64:54:15:d1:c2:fa:0a:3e:1a:82:b9:ce:3b:37:41:d6:
34:b4:99:6f:2b:2e:00:aa:a9:da:f1:a9:20:1b:34:7b:fd:6b:
7a:76:80:1e:32:78:2f:3f:9b:06:f3:de:04:4a:d7:64:bf:84:
f9:0d:ca:f0:de:de:e2:3f:8c:4b:42:d0:ff:c1:a8:15:57:b3:
0d:28:ff:cf:f9:7d:f2:e9:9f:99:d5:bb:72:97:07:43:75:c5:
e0:47:65:f3:59:26:92:53:20:b4:31:5c:eb:64:26:06:e8:1d:
1e:ed:bd:6f:49:7a:0e:a9:df:bb:6d:96:39:3e:10:14:d7:d3:
e4:e2:1e:aa:2b:05:e6:ec:98:4d:40:d9:8e:3b:51:b8:38:1a:
53:88:90:1f:61:df:97:5d:d5:8b:38:78:6b:7f:03:06:31:ca:
97:db:3f:19:46:45:c2:2b:68:9f:b9:17:62:f1:fc:e7:74:01:
cd:58:ff:06:7e:d5:fa:97:9a:35:dc:12:bb:38:e7:7a:57:ce:
25:7e:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:37 2025 by rpki-client