Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/_4NNVShIfZL5iPletIDJflUZF2s.roa
File: _4NNVShIfZL5iPletIDJflUZF2s.roa (raw, json)
Hash identifier: k6Ark7pALw86bD2QsntrC4KPJNeXKbZe5Anw8tAPvFM=
Subject key identifier: FF:83:4D:55:28:48:7D:92:F9:88:F9:5E:B4:80:C9:7E:55:19:17:6B
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 01856F1D951DB45AE3938C1AF8C06A570619
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/_4NNVShIfZL5iPletIDJflUZF2s.roa
Signing time: Sun 01 Jan 2023 20:54:47 +0000
ROA not before: Sun 01 Jan 2023 20:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204546
IP address blocks: 185.213.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:95:1d:b4:5a:e3:93:8c:1a:f8:c0:6a:57:06:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jan 1 20:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff834d5528487d92f988f95eb480c97e5519176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:21:cf:41:4f:0d:ec:74:5e:5b:c9:97:d1:
a2:23:14:88:0c:e7:51:87:2b:a4:f0:89:28:9c:14:
b4:60:4c:d1:3f:70:fe:17:46:43:30:c6:59:7c:27:
67:cc:3c:4a:1d:c8:b6:50:62:cc:aa:03:79:ee:a4:
e5:ee:ac:4b:c1:ec:fe:55:b7:60:0d:b8:a0:32:6a:
85:19:54:77:8c:12:fe:b2:44:b6:c5:36:39:3b:5b:
11:f3:ae:64:a5:ef:3c:de:71:80:c9:fe:18:57:51:
56:ad:67:d4:45:8f:40:6a:9e:fb:9c:b1:fd:8b:06:
56:ae:24:af:03:73:88:38:ab:ea:7f:ec:f0:b5:49:
73:a5:c1:f7:8e:fa:26:93:ac:be:ca:76:cb:46:fe:
62:b2:d7:36:a4:4e:d6:68:48:4d:95:b0:60:c5:d5:
65:da:f3:7e:06:80:ec:e0:d0:bd:c1:4e:15:b7:cf:
d2:b5:53:42:99:fd:64:69:4c:38:83:e0:70:c0:02:
cb:de:71:92:1a:2c:58:dc:d0:83:90:d9:58:ab:75:
68:59:41:ef:61:9d:fb:26:37:a4:fd:54:48:f5:8f:
65:96:af:47:0a:1e:69:bc:4d:37:a4:a8:51:da:e9:
8b:29:2e:88:4c:c7:42:74:18:20:87:37:05:a5:7a:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:4D:55:28:48:7D:92:F9:88:F9:5E:B4:80:C9:7E:55:19:17:6B
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/_4NNVShIfZL5iPletIDJflUZF2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d3:20:b1:7f:3d:5e:5e:ee:b9:cc:3c:43:34:58:69:ca:42:
ca:df:43:5b:0c:16:6b:2a:35:9b:91:41:64:03:5d:60:43:99:
80:50:18:86:91:10:2f:d6:f1:2c:d3:0f:13:d9:ab:f3:34:fc:
b2:f3:cd:68:ef:75:d9:c3:1a:2f:29:09:1c:b4:53:f7:ef:12:
5d:1e:1b:0a:e5:50:dc:31:44:da:97:23:d2:da:7b:9c:27:c7:
46:0f:83:1c:67:23:40:0d:09:eb:94:56:0b:8f:d8:38:c3:b7:
14:a4:32:6c:ce:1a:e0:d8:0b:7f:5c:a6:75:85:2f:3a:2e:5c:
28:d4:5e:17:44:a1:2a:4a:8b:b6:9e:c4:30:09:5c:7a:ec:f5:
4f:70:c4:c3:50:4a:88:98:0a:b0:9a:55:a1:11:c0:44:1f:b8:
d2:6a:63:c8:b5:f5:88:52:b2:82:86:83:4d:48:86:8a:eb:bb:
2f:04:bb:fa:5b:07:4c:d2:8c:7c:7a:a4:c0:fb:22:c0:19:f1:
bc:64:5b:36:7a:a4:c6:a2:13:23:a2:f2:81:9e:57:c9:c2:e9:
cc:0d:77:ca:cb:0c:fe:03:fc:02:9f:27:25:46:3f:4c:6d:bd:
d9:33:08:cf:1f:18:e3:b6:1f:d9:f2:12:aa:9d:74:b7:54:84:
bd:e4:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:44 2025 by rpki-client