Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/310ROsyav8Co4ubmxbErEWDIZhs.roa
File: 310ROsyav8Co4ubmxbErEWDIZhs.roa (raw, json)
Hash identifier: 6ORyLPbWXL0BCTYKjIaDnzDUfzezq98CRfDxBpoPxnY=
Subject key identifier: DF:5D:11:3A:CC:9A:BF:C0:A8:E2:E6:E6:C5:B1:2B:11:60:C8:66:1B
Certificate issuer: /CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Certificate serial: 0190E03662E146B46916C2866CF726C102EC
Authority key identifier: 90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/310ROsyav8Co4ubmxbErEWDIZhs.roa
Signing time: Tue 23 Jul 2024 15:29:38 +0000
ROA not before: Tue 23 Jul 2024 15:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.228.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:36:62:e1:46:b4:69:16:c2:86:6c:f7:26:c1:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Validity
Not Before: Jul 23 15:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5d113acc9abfc0a8e2e6e6c5b12b1160c8661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:95:1e:8b:28:71:e1:42:8a:35:0c:4b:c6:
8b:45:20:65:d6:e2:f2:65:57:13:d4:98:3f:4b:b4:
f7:42:6d:38:d7:74:fc:f4:f8:1c:b6:0f:33:ba:92:
bc:5b:48:0c:58:1e:ef:5c:d8:a5:28:6e:54:e3:dc:
c6:b8:ac:bc:e8:49:53:6b:d4:40:af:4b:ac:1f:7d:
70:aa:01:bc:4b:d5:35:0b:c7:22:c4:dd:4b:1b:76:
64:6a:0e:00:e2:0a:2a:de:4a:75:54:06:cf:17:d2:
00:ba:5a:28:a1:b5:03:61:8a:d9:2d:ba:8d:be:5e:
a0:a6:da:be:2c:ce:d8:f9:37:3b:22:e5:34:19:b5:
58:b9:8e:32:ec:0c:61:b5:6e:3f:c2:b9:5b:20:bf:
41:b8:2c:ed:7f:80:a6:48:d0:1f:f3:78:58:bd:2f:
3f:1f:da:5c:ee:fd:be:01:fd:9c:dc:d5:6f:88:64:
27:80:75:a2:0c:3a:b9:59:93:e4:cb:95:9e:60:f8:
3a:e8:64:cb:06:b2:82:e4:a5:b3:04:79:9c:3c:8d:
1e:33:9c:60:c8:79:46:25:eb:86:ff:50:c2:04:bc:
01:79:1a:6c:89:76:6c:f2:66:fd:b5:eb:96:bb:0d:
2b:9f:ad:b0:29:21:ec:45:85:6f:d4:f8:a1:f4:1e:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:11:3A:CC:9A:BF:C0:A8:E2:E6:E6:C5:B1:2B:11:60:C8:66:1B
X509v3 Authority Key Identifier:
keyid:90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/310ROsyav8Co4ubmxbErEWDIZhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.96.0/23
Signature Algorithm: sha256WithRSAEncryption
14:41:ce:de:c9:dd:ad:7a:f7:a1:5e:15:c2:4e:83:47:b1:3b:
ce:c9:e4:d7:45:66:e1:2e:ea:50:0a:a8:cb:17:68:b0:98:73:
b5:8a:d0:64:49:69:df:44:55:06:32:7a:4c:ae:a3:81:39:52:
86:ae:20:80:36:ff:39:eb:ab:52:a6:60:fc:c5:b0:6d:bf:32:
84:49:1f:f9:c7:d1:65:98:bf:ae:22:5c:46:a1:e9:0d:6b:c0:
8f:1a:82:01:24:0c:6f:38:cf:7f:9e:12:b9:67:b9:96:00:b4:
ee:3d:69:d4:d2:41:28:7d:f2:51:f3:47:6f:43:97:f3:fb:fc:
8e:72:d2:92:78:b8:b1:51:69:7e:e6:7f:29:3e:dd:3f:61:9b:
50:eb:e8:a4:a7:8a:e2:e8:b9:14:82:ce:5b:d7:2c:b8:aa:b4:
6c:01:48:38:ab:92:16:09:b7:96:c4:0a:1b:58:ec:0f:1a:61:
37:cb:a7:e2:d0:bf:0f:0d:3d:75:9d:56:f2:7e:70:ef:2d:cb:
59:07:95:9c:47:1d:02:18:06:42:32:22:1c:56:fb:0e:0c:4c:
7a:21:53:8a:0b:2c:7e:23:10:0f:d8:30:5c:28:43:54:4a:fd:
62:f9:d0:e1:48:d5:0a:10:b5:ae:3e:3c:25:11:79:73:a6:bd:
25:e1:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:31 2025 by rpki-client