Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa
File: cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa (raw, json)
Hash identifier: ptcOLOBEIgDro10MJyiqeVzzPTgAas0GugoUSuUsWgQ=
Subject key identifier: 71:9A:B5:11:65:BE:09:C9:3B:A0:D8:79:CF:69:D5:AD:36:0C:45:03
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 019428214725B1185C1F3384D4B78490E9B4
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa
Signing time: Thu 02 Jan 2025 17:47:36 +0000
ROA not before: Thu 02 Jan 2025 17:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60111
IP address blocks: 185.254.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:47:25:b1:18:5c:1f:33:84:d4:b7:84:90:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Jan 2 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=719ab51165be09c93ba0d879cf69d5ad360c4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:7b:2d:5b:35:f6:41:5a:76:aa:f6:ea:9d:
ef:45:5f:5a:03:14:a5:92:22:ca:80:0b:94:97:e1:
9a:ca:ca:1f:3c:26:82:e9:18:48:84:9d:9f:a6:14:
56:8c:18:8a:46:81:50:cd:77:64:37:db:25:de:45:
8b:8a:99:1f:a0:2c:3e:3f:71:25:fa:2b:c1:a1:e4:
2b:1d:bb:85:be:84:8a:e7:4c:22:7c:c5:4c:e7:99:
b5:ee:57:25:98:8a:3d:05:a7:b4:c6:1a:e1:64:4c:
4b:2c:ec:ab:64:f7:31:e2:10:66:30:57:ab:32:55:
28:08:5d:09:ee:19:da:4b:23:6a:f4:f4:40:af:7d:
93:62:44:7a:c3:c6:32:e0:48:76:70:eb:52:31:99:
74:8c:0e:b6:de:31:0f:dc:31:64:39:4c:b0:f9:90:
f9:ca:f2:82:27:1e:70:ea:41:01:6d:1b:b8:64:4b:
42:4b:10:20:86:4d:14:04:ea:d6:99:1c:04:26:55:
6c:2d:64:9d:0c:e0:cb:22:9d:22:c4:56:db:2e:b7:
d0:f1:6a:8d:5a:42:37:2b:68:60:2a:da:e7:49:46:
f9:91:b2:74:9c:67:c1:ce:aa:bd:e6:41:f4:d8:28:
c4:b0:f1:3e:d6:9e:6c:90:8e:08:d9:53:ed:13:3c:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:B5:11:65:BE:09:C9:3B:A0:D8:79:CF:69:D5:AD:36:0C:45:03
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
80:8a:02:ff:10:0e:fb:5d:70:e4:47:24:65:d5:6b:0d:19:5b:
2b:30:45:5b:ab:70:ec:dd:89:96:6c:c1:a8:e1:37:9e:73:73:
ab:95:ee:9c:83:c8:c2:f4:0e:f6:9f:f5:e1:b3:76:3f:7a:f3:
5c:c6:a7:e7:51:38:af:aa:0c:80:7b:c9:8f:f1:52:92:e2:8a:
16:f9:11:3f:a9:26:4b:3b:ef:81:e3:f1:77:36:17:0d:6e:fb:
6f:7b:43:7d:81:73:15:35:2e:b2:a5:08:69:10:c0:b4:20:5d:
4a:06:a1:3e:b4:62:9e:94:5b:21:9c:6f:06:34:1c:8c:1f:f5:
6d:70:8b:4e:bc:a0:e6:ec:47:3c:81:47:5f:ab:0e:c9:b7:b7:
d0:36:1a:b5:55:9d:66:b7:59:86:4f:05:80:06:38:ad:42:66:
a5:5b:51:02:b1:57:b7:cb:40:5d:e0:23:62:79:57:6e:5b:9d:
c9:19:6b:61:0d:69:eb:27:c2:3c:17:0e:78:90:6e:8e:f7:b0:
76:e5:53:14:da:48:19:da:32:09:72:e5:37:81:04:0c:94:e9:
50:e6:3c:a3:84:b2:9c:c7:ed:6c:a2:4e:41:8b:1f:de:74:4c:
6b:1c:9c:5a:c2:3b:b4:d3:8c:f1:54:ef:9e:aa:51:88:1b:c9:
4b:4d:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:06 2025 by rpki-client