Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/B29sFB_oXf8_hxrMQj3jPqY4fK8.roa
File: B29sFB_oXf8_hxrMQj3jPqY4fK8.roa (raw, json)
Hash identifier: CmSv52zB9ixCqbjmz8g+3vtq6Hg8PDH83+D8/nwysPs=
Subject key identifier: 07:6F:6C:14:1F:E8:5D:FF:3F:87:1A:CC:42:3D:E3:3E:A6:38:7C:AF
Certificate issuer: /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial: 01856FCBA8A6805E60F9EF5A756F9D6893E2
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/B29sFB_oXf8_hxrMQj3jPqY4fK8.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 185.97.101.0/24 maxlen: 24
185.97.103.0/24 maxlen: 24
185.97.102.0/23 maxlen: 23
185.97.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a8:a6:80:5e:60:f9:ef:5a:75:6f:9d:68:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=076f6c141fe85dff3f871acc423de33ea6387caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:f2:e3:aa:4c:06:80:dc:73:ae:31:69:2a:
0a:fb:e8:ef:a6:cf:36:5c:fb:76:4c:5e:63:9e:6d:
3b:b1:9e:b1:62:b0:66:fc:ef:88:d4:17:86:2a:b0:
26:c9:d3:a8:c0:0c:06:46:7f:12:42:e6:41:4a:47:
5e:79:fb:77:b6:c8:eb:7b:81:a7:ec:97:b2:c0:47:
17:55:4a:5c:89:68:98:36:6d:4e:b7:02:ee:07:5e:
4e:1f:7e:2f:3f:a8:8c:eb:24:ea:d2:6b:a8:ee:4c:
9d:58:f6:95:50:70:35:fe:f4:6b:5b:b1:5a:58:4d:
14:cf:5a:79:9c:5e:4e:1c:37:07:f0:00:c9:09:f9:
04:fe:3c:63:0d:d7:85:c0:cd:76:91:a7:fe:ea:11:
0d:6f:ff:ab:df:ed:11:13:13:a7:51:0c:db:1b:d3:
ad:d3:80:be:48:7e:2e:64:20:f9:a0:10:ef:b9:1f:
b8:3a:82:b7:cf:c9:43:8f:d9:00:80:b3:96:81:65:
b8:d9:82:c3:86:4c:b2:28:59:e0:ff:85:47:53:4f:
f3:13:65:48:7a:29:0a:18:80:90:de:87:cb:42:33:
19:5d:99:49:db:4f:fe:0e:7a:ad:fd:20:48:1f:60:
71:ff:d6:58:f6:82:a0:50:3b:38:41:06:51:2c:64:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:6C:14:1F:E8:5D:FF:3F:87:1A:CC:42:3D:E3:3E:A6:38:7C:AF
X509v3 Authority Key Identifier:
keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/B29sFB_oXf8_hxrMQj3jPqY4fK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.101.0-185.97.103.255
Signature Algorithm: sha256WithRSAEncryption
6d:82:b4:64:b2:81:0f:00:e3:2a:23:61:3e:f6:eb:a0:58:52:
d1:43:93:09:35:5a:3d:e3:c4:06:48:cb:cd:ee:3f:14:5f:96:
ae:c9:62:c6:9e:a4:b4:57:bd:71:e3:3f:c4:98:b7:4f:84:84:
40:5f:1e:4a:e0:21:ff:cb:09:18:07:4c:33:52:3e:b2:76:91:
5e:6f:94:7e:96:44:79:8e:2e:6b:ec:49:36:ce:30:61:25:cf:
be:76:4d:68:a1:cd:b4:23:49:fa:8b:0f:de:58:ac:27:9b:90:
97:41:ba:ee:a1:55:7c:5d:fc:bf:7d:3b:ca:74:61:75:bf:7b:
56:e4:4c:9a:b2:88:d9:18:8d:0c:44:ff:63:fc:3c:a2:e6:30:
fe:66:e7:e6:d7:84:e9:9c:03:be:28:76:a1:3e:56:2d:0b:d9:
e7:d3:6d:6f:58:16:44:cf:08:a9:99:b5:e4:73:d4:32:65:9c:
b7:b1:95:80:ee:6b:dd:14:a1:4b:f9:02:7a:9a:7a:c2:11:e8:
6a:53:61:f0:82:f0:60:8e:4c:b1:4a:0e:38:55:f4:20:57:57:
e1:9b:aa:0e:75:56:51:80:15:e5:34:30:27:f6:d6:9b:a7:b1:
59:6f:3b:43:3e:d0:38:57:dc:8b:53:e8:e0:a8:f4:6e:82:d3:
30:ea:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:33 2025 by rpki-client