Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/rzLK9K7U47FPPeK7ERJASBVVtlU.roa
File: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (raw, json)
Hash identifier: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=
Subject key identifier: AF:32:CA:F4:AE:D4:E3:B1:4F:3D:E2:BB:11:12:40:48:15:55:B6:55
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 019420D639D088D772BEC0BD52EC9139EADB
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/rzLK9K7U47FPPeK7ERJASBVVtlU.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199496
IP address blocks: 185.132.140.0/22 maxlen: 24
2a06:e240::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:d0:88:d7:72:be:c0:bd:52:ec:91:39:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af32caf4aed4e3b14f3de2bb111240481555b655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:7d:69:ab:1a:91:f7:dd:68:20:88:9f:e6:
2e:3e:32:6f:1d:78:60:6e:b4:18:19:9e:a5:f5:dc:
fc:8b:41:79:a2:0b:a2:40:87:a7:61:cd:73:d8:d0:
ee:70:19:ba:4f:db:ab:4b:82:d3:d8:81:b2:68:40:
1a:34:cc:08:bd:38:74:c8:cc:9c:d5:c8:6b:6a:af:
b4:31:ec:71:64:e4:6c:63:bc:66:11:45:87:4f:61:
8e:e0:30:ac:21:96:bb:a2:e0:8f:8e:f1:b6:25:47:
9c:d3:a7:0a:63:25:8d:65:c9:c3:ca:d4:17:20:d0:
4f:cf:66:86:3b:61:aa:a3:b4:bb:59:cd:60:b3:fc:
2a:55:35:90:ab:f6:ef:6a:6f:e2:7b:98:de:13:35:
34:ab:a0:08:b5:45:16:b5:07:a7:e7:84:53:f5:e0:
6f:dd:06:51:61:88:07:36:cd:a2:e0:47:b8:e5:c9:
41:4b:56:18:e7:03:2f:c3:aa:c5:72:28:64:09:0e:
aa:35:2f:f4:c3:84:40:89:47:23:82:60:ef:25:28:
f9:aa:4f:90:18:26:fd:55:d1:c2:66:c3:db:87:f5:
8b:c4:39:25:08:14:4f:cc:ac:a3:3a:8c:8b:30:22:
b5:7c:45:7c:49:c6:2f:87:7f:cf:c1:d9:f1:a1:7a:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:CA:F4:AE:D4:E3:B1:4F:3D:E2:BB:11:12:40:48:15:55:B6:55
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/rzLK9K7U47FPPeK7ERJASBVVtlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.140.0/22
IPv6:
2a06:e240::/29
Signature Algorithm: sha256WithRSAEncryption
35:96:9d:47:06:33:8b:b3:f9:7d:95:a0:a1:41:50:b2:d4:77:
98:50:c9:82:63:3c:d7:54:a7:13:b4:39:df:a2:86:7d:82:12:
ec:89:9e:99:a1:4f:2e:9b:ff:f1:9c:8f:f4:82:73:be:c1:f4:
c2:c7:2b:4b:78:f5:c2:b0:0e:b2:27:b9:f7:67:41:0f:88:47:
18:c3:68:24:3d:b7:d8:89:7c:d3:fc:1d:89:99:2d:40:15:bb:
56:48:bf:59:09:c3:0d:c3:a8:cc:e7:10:9e:22:c0:b1:7b:ae:
b6:00:cc:a6:72:d7:1b:ba:ac:7a:f0:e0:5e:bc:cd:b6:da:24:
54:44:23:43:82:fb:95:c7:23:c5:bb:8a:b4:53:d0:98:2c:a5:
f9:8c:6f:5e:62:64:07:5c:cb:88:94:d5:9f:46:bb:c2:c2:41:
f6:6c:13:ef:89:8a:02:6e:4f:d4:45:d3:d9:4e:61:aa:29:54:
67:69:b6:fe:03:05:3b:b4:f2:19:84:3d:dc:12:e0:da:43:15:
a1:29:8c:1c:c0:3f:2e:3d:62:61:fa:2f:45:1b:d6:ff:cd:3a:
11:cb:37:4d:f3:ed:98:8f:06:95:0b:c8:29:6b:fc:df:d4:e5:
1f:38:24:dc:e3:a7:ca:b0:08:6f:89:65:f9:f2:58:58:3d:9c:
e8:39:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:51 2025 by rpki-client