Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa
File: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (raw, json)
Hash identifier: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=
Subject key identifier: CC:6E:71:FC:59:B5:3F:AE:E3:6F:DE:AA:71:99:04:DC:E9:76:79:36
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 019424B39DE84972DAD9B2715872499D2783
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207821
IP address blocks: 2.59.28.0/24 maxlen: 24
185.89.36.0/24 maxlen: 24
185.89.37.0/24 maxlen: 24
185.89.38.0/24 maxlen: 24
185.89.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9d:e8:49:72:da:d9:b2:71:58:72:49:9d:27:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6e71fc59b53faee36fdeaa719904dce9767936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:f1:d4:bc:70:60:7b:2c:55:6a:30:c2:96:
c7:d3:0c:b1:b9:52:4a:ae:d3:43:00:16:a6:fb:9d:
96:ae:f5:a7:1e:30:70:02:13:73:bb:e4:cf:d5:bb:
b4:e7:69:9c:aa:9e:68:46:46:bb:c2:a5:51:71:70:
97:a8:39:75:cb:0c:59:71:15:ba:d2:d7:74:67:1d:
83:72:05:70:fd:26:11:a1:e4:7b:3c:e0:fb:05:34:
24:3c:28:cd:9c:58:b8:a0:ef:55:11:f1:e3:dd:ce:
8d:2a:92:e7:14:5b:63:3a:57:71:93:a9:97:b1:81:
0b:22:dc:8b:81:8f:05:e1:d1:b0:a8:0a:7e:ff:27:
14:ee:32:af:37:29:11:73:25:1f:dd:5f:b5:d1:83:
76:fd:b0:37:7a:55:27:24:24:e1:3c:7d:aa:4f:9b:
a8:2a:2f:50:9e:c3:dd:89:ae:ba:60:b8:49:e3:d7:
3d:aa:fd:c7:28:84:3f:ba:04:c1:3c:93:52:69:8a:
8b:80:9b:3b:be:66:ba:ee:ac:e3:ba:4e:ce:13:65:
46:9b:d7:60:2c:a4:f0:a9:47:f8:72:17:df:b5:53:
f9:e5:80:3d:09:79:79:49:37:67:d1:d7:b3:b9:f9:
4e:01:86:90:8a:36:f5:b7:b0:33:26:62:5d:96:3d:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:71:FC:59:B5:3F:AE:E3:6F:DE:AA:71:99:04:DC:E9:76:79:36
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.28.0/24
185.89.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:49:ef:1b:8f:f3:16:a4:7d:98:47:87:f3:da:44:f7:44:cd:
5e:b2:de:01:e0:8c:7e:0f:d7:30:ba:7e:1a:f0:97:21:0c:33:
00:9f:8b:27:4f:b2:82:79:6b:fd:f6:df:c5:6a:c3:65:54:0f:
e3:e2:a5:55:cf:6e:94:a2:f3:c9:94:7d:f9:bd:a7:92:ec:f5:
c3:d7:c9:64:d7:f1:4d:3b:fc:a0:f6:b8:4f:2f:19:52:74:0d:
b6:ac:03:9c:df:1e:5c:9f:b7:94:3a:b3:6c:ce:b9:5c:da:58:
fb:fb:4b:ab:41:06:23:a3:01:82:b6:59:59:f8:d9:89:64:a1:
3a:2b:ab:9f:71:2f:68:a7:fa:3c:74:3a:29:64:80:79:93:39:
72:7a:a4:4f:a6:26:7b:4d:e9:04:92:cc:e2:92:28:a7:4d:0a:
7f:ae:28:13:ab:51:57:11:cc:39:9c:fb:27:80:cb:a1:03:de:
85:80:91:05:f0:48:0d:b0:8b:b7:b8:44:47:54:94:0a:42:9b:
88:30:27:b6:0d:93:de:cf:df:32:c2:90:54:25:08:99:68:c6:
95:c5:7a:2f:40:f8:f0:d7:7d:e2:1b:b8:7a:d5:71:fd:b8:41:
3c:0c:01:04:88:b9:55:0d:cf:b2:4c:4c:16:1b:93:15:7d:b4:
06:6a:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:34 2025 by rpki-client