Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/djhHll0hiiYmwSOdxIPEGAl_m98.roa
File: djhHll0hiiYmwSOdxIPEGAl_m98.roa (raw, json)
Hash identifier: 6r63URFExpLdSS2qRb3lr44AHeNDyXHHOdb1H9xm0hE=
Subject key identifier: 76:38:47:96:5D:21:8A:26:26:C1:23:9D:C4:83:C4:18:09:7F:9B:DF
Certificate issuer: /CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Certificate serial: 0183D25DA779804A72E466EE0E5DB86B4028
Authority key identifier: 04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/djhHll0hiiYmwSOdxIPEGAl_m98.roa
Signing time: Thu 13 Oct 2022 17:21:36 +0000
ROA not before: Thu 13 Oct 2022 17:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.4.33.0/24 maxlen: 24
185.4.32.0/24 maxlen: 24
185.4.32.0/22 maxlen: 24
185.4.35.0/24 maxlen: 24
185.4.34.0/24 maxlen: 24
185.239.160.0/22 maxlen: 24
2a02:5fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:5d:a7:79:80:4a:72:e4:66:ee:0e:5d:b8:6b:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Validity
Not Before: Oct 13 17:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=763847965d218a2626c1239dc483c418097f9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:10:47:c5:de:3f:af:34:79:93:75:3d:8e:
75:fc:b6:41:48:6f:59:14:96:7e:59:5b:68:39:a3:
09:c4:c9:b7:a7:8e:62:03:1e:59:24:3e:5c:c6:e4:
74:60:b1:6e:4e:58:69:b7:d0:06:59:28:1a:e8:eb:
ed:fd:e5:58:67:d2:aa:de:a9:28:57:ef:31:f0:b9:
e6:3d:d6:3d:19:57:e8:ee:dc:26:61:bf:18:31:86:
fc:a1:25:02:2d:14:b5:d8:10:b3:af:52:8f:7e:25:
b0:12:2d:0d:d3:31:58:ee:dd:eb:e0:c7:31:ca:e6:
97:53:0c:d2:e9:20:66:de:e1:bf:13:fc:f3:d7:91:
cc:80:df:90:69:54:de:e1:c8:64:39:74:ba:96:a2:
f3:4b:d8:71:03:f2:d2:17:e5:39:6a:26:7a:f4:9f:
63:a6:13:5e:24:f4:da:f1:d0:36:63:fe:13:19:16:
48:30:b3:98:7b:bd:fc:f6:1d:63:90:24:01:25:e6:
49:bf:07:c1:19:e6:9a:4d:2c:9c:b7:56:05:cb:37:
27:a3:89:14:30:43:6b:f2:76:d9:4e:8e:ba:57:10:
1c:29:ec:9d:38:e5:4a:b6:9f:ea:b7:9e:6e:cd:fb:
45:50:7c:5c:67:75:fd:c9:9f:7f:1b:17:c2:eb:81:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:38:47:96:5D:21:8A:26:26:C1:23:9D:C4:83:C4:18:09:7F:9B:DF
X509v3 Authority Key Identifier:
keyid:04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/djhHll0hiiYmwSOdxIPEGAl_m98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.32.0/22
185.239.160.0/22
IPv6:
2a02:5fc0::/48
Signature Algorithm: sha256WithRSAEncryption
c6:2b:2a:0a:46:42:0d:46:fa:f4:13:a9:d4:97:dc:23:36:e4:
7d:f0:e7:b9:30:de:d1:6c:8a:1e:d0:92:60:44:1c:97:81:3a:
9c:be:35:e3:07:00:45:ad:fa:fa:43:0e:0a:ba:25:c6:30:42:
bf:ce:86:13:eb:1b:6f:9f:2a:57:82:fb:e6:e9:f3:c1:ce:95:
c3:d8:d1:e9:0f:2c:68:d9:7f:d3:38:ee:93:58:67:40:31:42:
7b:91:61:aa:07:72:c7:2c:1e:94:75:61:14:50:d3:c5:3b:ea:
07:76:3f:a5:55:2d:c5:30:43:d6:72:4e:64:41:4a:62:43:5b:
4d:89:f5:27:91:29:80:7f:1e:9c:14:18:20:f6:1b:33:a3:a2:
65:6d:12:0a:23:cd:97:9c:72:25:48:f6:c5:92:25:ba:7c:12:
c4:75:84:41:51:33:83:25:09:8b:59:1d:b7:f2:9e:ca:a8:25:
75:42:f0:4e:45:4f:41:ee:39:5d:f4:c7:02:51:b3:ef:a4:54:
d0:61:dc:cb:74:8a:33:23:95:5b:d5:fd:12:0a:c7:62:38:de:
41:5c:e5:5d:41:7a:d5:b3:a3:bb:ee:e3:16:0f:80:cd:39:01:
6e:62:c4:0c:a6:06:a7:0c:29:c2:72:d6:3f:8c:5c:b1:58:e2:
ba:11:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:17 2025 by rpki-client