Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/zLqZByVIYZNIOabo6CqeO7mf32s.roa
File: zLqZByVIYZNIOabo6CqeO7mf32s.roa (raw, json)
Hash identifier: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=
Subject key identifier: CC:BA:99:07:25:48:61:93:48:39:A6:E8:E8:2A:9E:3B:B9:9F:DF:6B
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 0194266C0FFB545EB3D81DC90DAD9DB61D58
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/zLqZByVIYZNIOabo6CqeO7mf32s.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200271
IP address blocks: 185.255.84.0/22 maxlen: 22
2a02:4ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0f:fb:54:5e:b3:d8:1d:c9:0d:ad:9d:b6:1d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccba9907254861934839a6e8e82a9e3bb99fdf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:03:68:84:32:c3:b1:3b:14:f0:c7:80:ba:
eb:e8:6e:29:c3:e5:ca:de:5b:ac:bb:62:94:62:16:
8c:60:9a:4b:95:4f:0b:a8:de:fe:4c:93:47:11:13:
84:84:3f:40:32:c1:85:cc:8d:94:5f:e4:d0:e7:1e:
b6:32:3d:44:a7:6b:f6:73:5b:d3:17:31:52:66:b0:
9a:5d:ad:22:d6:32:be:5c:87:16:4f:13:54:eb:56:
e4:96:7e:eb:b6:33:a0:03:cb:51:0e:45:29:1e:29:
ad:36:60:b7:90:ba:a1:b1:a3:01:c9:c1:b5:bc:c7:
64:73:35:15:9c:88:c7:71:92:7c:97:17:38:13:56:
84:59:dd:39:ba:32:b1:6f:36:33:c7:48:fe:75:e1:
ce:3a:fe:a5:24:a3:bb:d2:d4:08:e4:5e:54:7f:80:
30:3c:c6:a1:41:71:20:06:6f:a5:0b:a7:e5:5d:83:
3b:7c:7b:1a:b9:70:3a:d4:b4:09:e7:ff:58:e4:37:
2b:ac:a0:f1:8f:64:93:48:27:e1:3e:d5:54:e2:b2:
9c:0f:13:50:ed:64:7f:1b:ba:02:e5:1c:22:4b:30:
7a:45:26:65:cc:41:56:51:5e:9c:1c:25:0c:45:34:
54:9b:2e:bc:77:c3:82:b2:88:57:c9:d0:28:23:90:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:99:07:25:48:61:93:48:39:A6:E8:E8:2A:9E:3B:B9:9F:DF:6B
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/zLqZByVIYZNIOabo6CqeO7mf32s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.84.0/22
IPv6:
2a02:4ba::/32
Signature Algorithm: sha256WithRSAEncryption
55:f0:64:f0:10:8e:60:1e:2e:eb:5b:37:d3:9e:cb:36:7c:c9:
16:04:4f:04:d1:5d:ab:df:22:df:9a:13:7e:47:7c:00:bf:ee:
05:d6:96:73:a4:70:eb:d0:32:68:d5:74:ab:26:ae:43:2d:b8:
23:8a:db:d8:64:2b:5c:72:21:b9:27:4b:cc:4d:d8:45:0f:36:
88:9d:bb:7a:b1:36:7c:0a:8c:7d:ca:15:3f:44:50:6d:3b:d9:
f0:cc:17:0d:b6:3c:5b:49:55:8e:e8:f3:84:fd:5e:c7:69:44:
b9:ef:fc:df:3f:88:a5:45:3a:e4:39:08:17:ee:4e:36:9e:e9:
0f:c6:78:54:5f:96:3d:9e:6a:fb:21:04:56:86:33:ba:a9:4e:
e2:85:10:52:4b:cc:3f:ee:45:28:1e:bd:db:e8:07:4b:2c:f2:
97:a3:45:db:54:9f:a7:9c:6b:86:41:4c:5d:b4:9b:f8:e0:bb:
93:d1:35:3c:17:f3:52:e4:87:a3:84:10:6f:c3:2f:2e:23:d3:
c8:14:a7:cf:4b:c8:e3:61:02:55:c0:45:29:3e:ec:47:63:63:
fe:cb:4e:46:c1:a8:e0:dd:e7:f8:79:d9:d2:69:02:e3:46:73:
52:85:d5:97:04:cc:a5:14:16:cd:2d:9c:52:0e:d4:52:01:d4:
b3:10:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:12 2025 by rpki-client