Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZhV4oMWZCtkFv-Xx6hrZW3RwIlA.roa
File: ZhV4oMWZCtkFv-Xx6hrZW3RwIlA.roa (raw, json)
Hash identifier: wDTGv0ab5wjculDxyPWMrEpU+1Kei5tpn9hGC3Qkmiw=
Subject key identifier: 66:15:78:A0:C5:99:0A:D9:05:BF:E5:F1:EA:1A:D9:5B:74:70:22:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BCAD1436377C35772534FD72BC322F49
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZhV4oMWZCtkFv-Xx6hrZW3RwIlA.roa
Signing time: Fri 31 Jan 2025 14:04:06 +0000
ROA not before: Fri 31 Jan 2025 14:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21441
IP address blocks: 2.59.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:ad:14:36:37:7c:35:77:25:34:fd:72:bc:32:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 14:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661578a0c5990ad905bfe5f1ea1ad95b74702250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:0f:0f:3a:a9:fe:fb:22:79:70:be:3d:7c:
d6:cd:b4:5f:cd:d2:c3:4e:a4:f4:b5:25:ff:f5:40:
ea:42:f8:ba:a5:31:c3:16:e7:e4:64:03:e6:ce:e6:
12:88:cd:ab:e7:3d:fa:41:1c:73:6f:cb:0d:42:25:
c6:fb:46:72:dd:71:4a:3a:5b:92:d5:0d:d0:42:74:
fa:6b:8e:9b:b8:0e:8c:c9:4a:f0:ec:48:28:f7:9b:
84:20:8b:c9:c1:26:fe:d4:d9:99:98:54:a2:05:2d:
a8:e0:e2:4f:14:d6:49:82:51:88:8e:b8:3f:b6:99:
d9:a7:74:16:ea:7f:fa:37:fc:1c:ca:5b:a8:71:cb:
e4:39:6d:02:2c:76:f3:26:5d:d4:1f:94:f2:90:a7:
f4:cc:39:7f:fd:e9:dd:f9:ba:f2:38:7f:ee:c3:79:
90:de:ce:8a:1a:94:3c:d0:e5:cf:b6:30:04:3b:3b:
55:17:88:7c:5f:7d:e8:b2:43:a7:a9:be:58:45:69:
bf:d0:c8:c5:cb:3a:94:5e:38:23:b3:99:45:9d:05:
37:86:ca:04:0d:16:65:5a:50:94:d2:d0:0e:6c:43:
b5:41:c5:4b:00:45:07:52:9e:fb:fa:f3:35:bc:90:
99:23:66:15:74:eb:a3:a4:e4:71:2d:08:dc:64:30:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:78:A0:C5:99:0A:D9:05:BF:E5:F1:EA:1A:D9:5B:74:70:22:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZhV4oMWZCtkFv-Xx6hrZW3RwIlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:64:88:03:06:3d:7f:5d:63:6a:06:a0:a2:28:cc:b2:a0:a2:
74:99:40:80:ac:66:bd:46:30:54:85:4b:80:7a:e9:26:fc:f4:
ca:10:a9:3b:57:04:76:50:4d:8e:4b:28:34:d1:87:52:86:4e:
82:4c:1b:91:24:a7:f0:aa:32:91:19:b7:02:84:54:b7:bc:d6:
74:bb:4e:1a:a9:d1:76:5f:2c:f8:3a:3f:0f:ce:a0:8e:aa:41:
5e:89:4e:5c:75:d5:e4:83:16:90:b7:84:57:c9:7e:af:0d:ed:
fc:fc:7d:80:bd:85:72:9b:2c:1f:2c:49:d5:2b:3a:9c:7c:da:
48:6a:a9:dd:ee:e0:97:f9:f8:1e:50:63:71:62:1e:2e:db:3e:
68:f2:19:a4:de:c9:04:cf:88:6d:7a:35:c2:d8:5a:05:5c:ce:
dc:2c:3b:75:35:f9:60:9e:c8:85:60:50:72:ee:07:3a:43:9d:
cf:e0:87:f9:67:15:06:f0:b3:4a:66:f9:c6:a0:58:40:b0:5e:
32:6d:87:87:fd:9f:59:8f:a0:71:11:80:f2:b2:d1:d9:d2:16:
79:d3:23:a9:4f:93:4b:a2:a9:49:99:12:d1:58:c6:04:f9:21:
a4:95:bd:5e:83:b2:b1:c2:85:1c:f0:d9:98:5e:ce:a1:5d:9f:
af:5f:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:15 2025 by rpki-client