Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rJb-HQA4h92lbW6z5hWEZQYPTvY.roa
File: rJb-HQA4h92lbW6z5hWEZQYPTvY.roa (raw, json)
Hash identifier: LtyC0dfa/0giHYhBZPf0JC37dVrAob0iHGxHfduo2CM=
Subject key identifier: AC:96:FE:1D:00:38:87:DD:A5:6D:6E:B3:E6:15:84:65:06:0F:4E:F6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841DAFCE7E56692A849EE2A5B45129F296
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rJb-HQA4h92lbW6z5hWEZQYPTvY.roa
Signing time: Fri 28 Oct 2022 08:22:51 +0000
ROA not before: Fri 28 Oct 2022 08:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212491
IP address blocks: 185.196.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:af:ce:7e:56:69:2a:84:9e:e2:a5:b4:51:29:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 08:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac96fe1d003887dda56d6eb3e6158465060f4ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:c5:f6:4d:79:4c:24:2e:50:b2:2e:7c:1e:
af:1e:79:e0:64:81:3a:a3:cb:b5:fb:f6:fb:1d:4e:
97:37:1e:34:29:d2:79:cf:aa:19:eb:3c:4a:09:8a:
6e:d1:dd:ef:dd:e9:2f:a8:8e:21:29:1e:86:39:7b:
6c:da:0f:95:89:5b:49:1f:1a:44:06:40:3e:cb:3b:
53:d2:7e:9a:2b:8d:62:bd:5b:28:6b:a6:c3:c8:b8:
20:d8:e5:12:c4:b7:2f:24:82:0c:7c:96:bd:43:5b:
2e:44:68:a7:8d:2f:4c:57:fc:a6:d1:09:37:a3:75:
c3:9b:41:f1:30:f1:ae:ce:6c:6b:bd:98:3f:3e:15:
2b:b9:b7:98:7d:37:54:23:01:42:dd:bd:aa:2c:87:
7e:25:89:09:16:28:c8:eb:b9:65:3a:6d:55:57:3d:
cf:a5:8c:bd:38:6c:50:d2:5c:ea:75:b8:20:5d:46:
56:7b:d9:85:9c:f4:e3:a2:b7:d7:94:63:d5:37:a8:
eb:e2:9f:5a:e5:06:70:aa:ae:99:c2:2e:50:87:87:
19:5a:6f:59:cc:40:cd:3f:ca:1d:e8:35:6c:c8:57:
d4:bc:b0:dc:1e:b4:8f:df:5e:1c:08:3b:06:aa:03:
70:d8:3b:ed:1c:2e:38:b5:0a:54:5f:e9:0c:dd:7d:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:96:FE:1D:00:38:87:DD:A5:6D:6E:B3:E6:15:84:65:06:0F:4E:F6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rJb-HQA4h92lbW6z5hWEZQYPTvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.244.0/24
Signature Algorithm: sha256WithRSAEncryption
88:85:47:fe:f5:13:6e:56:2e:23:64:e9:e0:8d:c2:5c:98:01:
d7:f2:20:05:cc:c1:b6:21:61:e6:c9:19:bd:05:a9:79:fb:df:
3d:3f:eb:e5:ce:83:32:85:6c:6e:2d:96:2c:5a:92:88:1c:c4:
39:d7:55:d0:ec:c5:2c:2c:e9:75:88:fa:17:89:22:83:ad:3f:
83:10:c7:9e:a8:90:b6:db:4e:ba:1f:1c:85:01:33:79:16:78:
9e:54:1a:0a:35:4c:d4:5e:17:39:5b:7d:cc:0a:1d:d1:87:f4:
48:dd:b9:9f:5e:47:85:3a:8b:23:b3:98:cb:b9:57:77:f5:c5:
e0:7c:ec:50:73:87:d3:0c:d0:af:44:1e:ba:48:70:de:06:bb:
54:42:56:11:47:7b:47:e8:f3:5e:b8:16:41:90:7c:0e:ff:d6:
ef:af:dc:f3:0b:cf:7d:73:2d:5a:1f:62:bf:c8:9c:67:43:bf:
5d:ec:8e:eb:5a:f4:c8:b7:eb:02:f8:09:47:25:4d:5d:9b:3e:
54:05:97:09:db:9d:88:87:d7:c4:99:4e:a3:38:93:5a:a4:ec:
17:e0:b4:ba:97:7a:d3:34:10:9b:7f:2a:22:65:8c:92:37:ab:
e9:29:7c:39:4c:31:5c:be:82:cf:19:7d:68:5b:41:fb:74:cc:
6a:2a:2a:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQdr85+VmkqhJ7ipbRRKfKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI4MDgyMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk2ZmUxZDAwMzg4N2RkYTU2ZDZlYjNlNjE1ODQ2NTA2MGY0ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLPF9k15TCQuULIufB6vHnngZIE6
o8u1+/b7HU6XNx40KdJ5z6oZ6zxKCYpu0d3v3ekvqI4hKR6GOXts2g+ViVtJHxpE
BkA+yztT0n6aK41ivVsoa6bDyLgg2OUSxLcvJIIMfJa9Q1suRGinjS9MV/ym0Qk3
o3XDm0HxMPGuzmxrvZg/PhUrubeYfTdUIwFC3b2qLId+JYkJFijI67llOm1VVz3P
pYy9OGxQ0lzqdbggXUZWe9mFnPTjorfXlGPVN6jr4p9a5QZwqq6Zwi5Qh4cZWm9Z
zEDNP8od6DVsyFfUvLDcHrSP314cCDsGqgNw2DvtHC44tQpUX+kM3X14PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyW/h0AOIfdpW1us+YVhGUGD072MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvckpiLUhRQTRoOTJsYlc2ejVoV0VaUVlQVHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucT0MA0G
CSqGSIb3DQEBCwUAA4IBAQCIhUf+9RNuVi4jZOngjcJcmAHX8iAFzMG2IWHmyRm9
Bal5+989P+vlzoMyhWxuLZYsWpKIHMQ511XQ7MUsLOl1iPoXiSKDrT+DEMeeqJC2
2066HxyFATN5FnieVBoKNUzUXhc5W33MCh3Rh/RI3bmfXkeFOosjs5jLuVd39cXg
fOxQc4fTDNCvRB66SHDeBrtUQlYRR3tH6PNeuBZBkHwO/9bvr9zzC899cy1aH2K/
yJxnQ79d7I7rWvTIt+sC+AlHJU1dmz5UBZcJ252Ih9fEmU6jOJNapOwX4LS6l3rT
NBCbfyoiZYySN6vpKXw5TDFcvoLPGX1oW0H7dMxqKipF
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:49 2025 by rpki-client