Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa
File: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (raw, json)
Hash identifier: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=
Subject key identifier: 64:3B:5B:E9:52:BF:CF:77:B0:CB:A0:23:A2:6B:95:1D:B7:46:07:D0
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8BEAACD9A99788F7C98957462B4D
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211515
IP address blocks: 178.237.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:ea:ac:d9:a9:97:88:f7:c9:89:57:46:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=643b5be952bfcf77b0cba023a26b951db74607d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:dd:34:4d:42:73:d8:10:ab:de:23:88:40:
b1:48:22:d6:99:0d:f4:13:9b:66:4f:00:32:a4:5d:
d8:c3:f0:1e:1a:d9:ff:53:78:ba:4f:07:34:d3:8c:
14:09:e3:9a:75:35:f2:96:05:0b:42:85:4d:70:7d:
c5:10:f2:fd:45:5b:94:27:8c:e1:b1:77:66:b0:32:
31:d8:ea:8c:32:7e:56:f9:3f:46:19:95:54:d5:b4:
7e:4e:e4:a6:66:3b:0e:85:11:a0:18:ce:4f:bd:68:
2a:de:2d:5f:0b:44:37:af:c3:8d:b2:cc:5c:33:b9:
d7:a7:8d:c4:30:13:71:af:bf:1d:84:f1:be:dd:55:
4d:8e:08:43:b7:4d:a6:ae:26:81:97:c0:71:bf:15:
f0:49:01:ba:16:03:49:d7:66:56:c4:bb:73:f3:37:
76:1a:3a:a3:aa:d0:c1:c5:fa:80:cb:a7:95:37:e5:
12:94:c9:65:dd:27:3d:03:6f:ad:35:d6:45:89:35:
c4:5e:9a:3a:ae:fa:52:10:f0:27:99:37:6d:a7:33:
e9:f8:1c:9f:20:b7:57:e6:5d:2e:65:d0:37:d7:c0:
d0:b0:e2:3f:fd:f0:68:1e:4d:f5:ec:5b:ec:10:f6:
e2:4b:8d:75:74:2d:64:b5:7d:a1:9d:5d:5e:ec:99:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:5B:E9:52:BF:CF:77:B0:CB:A0:23:A2:6B:95:1D:B7:46:07:D0
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.204.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6c:55:aa:d8:90:39:ca:d8:98:37:fb:00:52:22:b3:00:f1:
34:ed:5f:97:05:5d:d0:a1:75:61:a3:ba:6c:d7:0d:02:2d:a8:
e4:61:72:bb:6e:77:04:c1:1a:99:69:8d:af:b9:9b:30:73:a3:
17:09:51:0f:ca:c8:61:ed:6f:52:e8:0a:20:64:05:d9:21:1a:
b1:cb:88:f7:80:3e:2b:3e:3c:5d:64:9c:ec:dd:3e:0e:f7:07:
82:49:45:53:e3:a5:4e:83:dd:30:c3:6e:c0:d0:f2:24:c7:cf:
a3:a2:99:cc:36:ca:47:08:d3:fc:78:0d:e9:f7:d9:75:20:20:
e2:01:34:98:35:70:ba:a1:48:8d:a6:3c:1b:c7:58:2d:c3:9d:
6e:03:2b:a8:86:c4:d9:f6:b5:eb:9c:26:2e:67:f5:27:c9:ab:
d2:12:bf:7a:8e:07:f5:af:c6:b1:c8:7c:3a:16:62:7f:e0:40:
9b:c2:32:95:0c:cf:40:0c:c9:50:0d:ce:c7:1f:0a:61:a4:50:
c7:52:a1:6c:85:65:5a:9d:51:73:b0:bc:b1:be:14:9b:59:a3:
20:a6:16:7c:f2:ca:4c:c2:85:8b:5d:30:90:7b:41:e7:77:3a:
4a:80:79:7d:45:8a:3b:c1:21:82:92:c6:29:06:fb:59:f8:90:
9b:0a:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:45 2025 by rpki-client