Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/olKQ6P92hxH5viaM4PEzFGZfLbQ.roa
File: olKQ6P92hxH5viaM4PEzFGZfLbQ.roa (raw, json)
Hash identifier: 4ss6eDuLHbirOM3lwmsv7We41Om53173tqUXcZubk9M=
Subject key identifier: A2:52:90:E8:FF:76:87:11:F9:BE:26:8C:E0:F1:33:14:66:5F:2D:B4
Certificate issuer: /CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Certificate serial: 0190EAB7AEC0D09EA402746C5026F9B26493
Authority key identifier: 90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/olKQ6P92hxH5viaM4PEzFGZfLbQ.roa
Signing time: Thu 25 Jul 2024 16:27:04 +0000
ROA not before: Thu 25 Jul 2024 16:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.228.96.0/23 maxlen: 23
185.228.96.0/24 maxlen: 24
185.228.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:b7:ae:c0:d0:9e:a4:02:74:6c:50:26:f9:b2:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Validity
Not Before: Jul 25 16:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25290e8ff768711f9be268ce0f13314665f2db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:88:ab:6c:48:69:bd:e3:6b:97:b0:51:4e:
25:53:bc:d8:c5:cd:eb:30:e1:b3:f2:0a:c4:de:3b:
b8:09:5c:1f:ec:40:34:6c:06:d8:6c:1d:6e:82:71:
e1:0e:9e:89:2c:62:c3:bb:83:34:f3:eb:96:4f:3f:
e4:5a:18:c4:7f:12:41:f6:bd:e5:ea:ea:79:01:17:
dd:c3:d5:f9:2c:f9:94:4b:71:53:08:c9:52:45:24:
df:7d:fb:a9:9e:3f:79:9a:f2:03:1a:6d:f5:22:cd:
6b:38:36:a7:b6:64:ad:da:bd:21:f2:73:d7:4e:b8:
e1:c8:dc:9f:61:33:9d:cb:2f:62:a0:b8:2e:d4:f9:
8c:a7:29:8d:c2:1a:68:47:b4:0a:9b:ff:7f:3b:e6:
f9:06:0b:c2:aa:2e:1a:ba:58:2a:9a:06:eb:73:37:
19:7d:ea:2b:87:e1:40:b1:92:ba:6e:e5:c0:20:20:
b8:51:9b:0a:e1:2c:5e:aa:e8:5c:0b:ee:f1:8b:de:
95:a2:12:65:41:aa:5c:2d:61:dc:90:13:e8:33:ee:
2e:78:b6:e6:5e:ff:7a:84:47:97:78:c6:af:fc:55:
cb:04:ea:f6:73:33:ef:c6:d4:de:f9:5b:89:e1:b1:
2e:aa:27:98:0d:87:97:a0:80:c6:b5:6d:93:27:5f:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:90:E8:FF:76:87:11:F9:BE:26:8C:E0:F1:33:14:66:5F:2D:B4
X509v3 Authority Key Identifier:
keyid:90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/olKQ6P92hxH5viaM4PEzFGZfLbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.96.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:53:d4:7c:02:db:e4:d8:9d:f1:5a:7f:bc:4b:a1:04:fb:81:
4f:7e:cc:bb:cf:7f:35:bb:e8:4a:72:38:b8:42:81:85:d9:e3:
98:85:6d:21:6a:6d:76:b2:37:5b:6d:27:21:32:55:60:21:87:
bd:94:ef:5b:0a:13:52:e5:73:88:1d:f6:7e:82:63:d3:c4:06:
5b:b2:01:82:a3:a6:d1:76:40:fe:2f:62:0b:c2:8b:23:a1:b3:
d2:79:c0:c7:ce:d6:55:ac:ca:97:d0:68:6a:29:a7:d5:f5:79:
ab:b4:4c:03:78:a5:50:35:c7:aa:19:d1:29:a8:1b:96:ef:4d:
de:d0:9f:e0:d2:23:b8:4d:70:29:1b:c5:e4:22:57:3e:f0:91:
9e:8a:f1:6c:56:ba:50:34:7b:74:d7:7c:da:aa:80:ab:e0:4b:
ef:ff:9a:0b:da:82:49:f5:4a:23:7b:1a:a8:8e:b1:82:49:d0:
a8:25:d0:35:fa:83:d8:8b:84:65:68:4a:21:d0:4d:93:35:23:
25:bf:53:7f:d5:c5:a8:51:c5:87:e7:56:46:e1:92:d3:05:5a:
e7:8f:73:13:5d:d6:0b:d8:e8:1a:a3:51:39:fe:30:df:34:bf:
88:cd:4d:96:cb:80:f8:a4:4c:6c:2d:de:25:b6:e0:71:13:48:
40:fa:2c:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDqt67A0J6kAnRsUCb5smSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTdmOTcyMzdlZjM2NmRlNWFiNmQ3NThlZWU1NDNlMDhk
NTdmNWMwHhcNMjQwNzI1MTYyNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjUyOTBlOGZmNzY4NzExZjliZTI2OGNlMGYxMzMxNDY2NWYyZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytWIq2xIab3ja5ewUU4lU7zYxc3r
MOGz8grE3ju4CVwf7EA0bAbYbB1ugnHhDp6JLGLDu4M08+uWTz/kWhjEfxJB9r3l
6up5ARfdw9X5LPmUS3FTCMlSRSTfffupnj95mvIDGm31Is1rODantmSt2r0h8nPX
TrjhyNyfYTOdyy9ioLgu1PmMpymNwhpoR7QKm/9/O+b5BgvCqi4aulgqmgbrczcZ
feorh+FAsZK6buXAICC4UZsK4SxequhcC+7xi96VohJlQapcLWHckBPoM+4ueLbm
Xv96hEeXeMav/FXLBOr2czPvxtTe+VuJ4bEuqieYDYeXoIDGtW2TJ1/NtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJSkOj/docR+b4mjODxMxRmXy20MB8GA1UdIwQY
MBaAFJCX+XI37zZt5attdY7uVD4I1X9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pmNWNqZnZObTNscTIxMWp1NVVQZ2pWZjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hYzEzZTItMmEyOS00ZTcwLTg1OWIt
NmMzMGI4ZWY2M2I0LzEvb2xLUTZQOTJoeEg1dmlhTTRQRXpGR1pmTGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9hYzEzZTItMmEyOS00ZTcwLTg1OWItNmMzMGI4ZWY2M2I0
LzEva0pmNWNqZnZObTNscTIxMWp1NVVQZ2pWZjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueRgMA0G
CSqGSIb3DQEBCwUAA4IBAQBvU9R8Atvk2J3xWn+8S6EE+4FPfsy7z381u+hKcji4
QoGF2eOYhW0ham12sjdbbSchMlVgIYe9lO9bChNS5XOIHfZ+gmPTxAZbsgGCo6bR
dkD+L2ILwosjobPSecDHztZVrMqX0GhqKafV9XmrtEwDeKVQNceqGdEpqBuW703e
0J/g0iO4TXApG8XkIlc+8JGeivFsVrpQNHt013zaqoCr4Evv/5oL2oJJ9Uojexqo
jrGCSdCoJdA1+oPYi4RlaEoh0E2TNSMlv1N/1cWoUcWH51ZG4ZLTBVrnj3MTXdYL
2Ogao1E5/jDfNL+IzU2Wy4D4pExsLd4ltuBxE0hA+iz2
-----END CERTIFICATE-----
Generated at Tue Jul 30 01:00:53 2024 by rpki-client on console.sobornost.net