Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa
File: ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa (raw, json)
Hash identifier: FUPgIKTRbD3IVqEoytl9TWolLWbbwFaaKQfjRWOMZxY=
Subject key identifier: 65:9C:67:2D:F9:10:65:97:BC:EB:C6:26:9A:1D:61:EA:F8:BD:14:AE
Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial: 019422FC401F44226D869E9781AF90A3D7A4
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43237
IP address blocks: 194.8.72.0/23 maxlen: 23
195.114.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:1f:44:22:6d:86:9e:97:81:af:90:a3:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659c672df9106597bcebc6269a1d61eaf8bd14ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:13:e2:57:99:54:4c:a0:be:76:27:9d:86:
80:98:e3:05:2d:5b:9f:27:0a:4f:96:6a:bc:65:e2:
70:7a:b1:1d:ad:78:ef:6d:31:3e:3c:19:3f:24:bc:
36:79:07:2a:c0:16:3e:03:cd:4d:b6:13:57:09:97:
69:f7:fc:89:c8:c1:26:69:7a:04:a1:08:28:ad:0f:
9d:53:a0:2d:02:83:e1:20:cd:e5:cf:76:87:66:37:
5d:3b:92:7c:b1:8d:44:11:e1:98:67:83:69:c0:bf:
c4:89:3a:df:ac:70:dd:95:35:4f:52:c5:e1:6b:ff:
0c:46:24:00:39:2c:bf:d2:f9:37:dc:4d:e2:61:da:
6f:17:50:a3:a8:bc:5a:69:80:11:cf:1c:af:7d:37:
05:8f:ca:96:4b:0c:6f:ac:f4:81:b9:c4:f5:47:80:
7a:6c:0a:6b:9c:52:55:83:24:5f:df:aa:9c:fb:0e:
2f:fd:fd:f3:06:26:ca:a7:41:38:b4:25:08:db:66:
ba:c1:4a:d2:a4:ba:09:78:14:13:56:9b:18:16:39:
71:79:c0:3d:69:f6:3b:fb:7f:2b:75:56:a6:85:60:
1e:05:43:be:f8:d9:4d:94:a7:65:c8:1a:6c:41:95:
8e:b6:f2:9b:e5:73:02:fb:43:de:a7:6c:27:5f:2d:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:67:2D:F9:10:65:97:BC:EB:C6:26:9A:1D:61:EA:F8:BD:14:AE
X509v3 Authority Key Identifier:
keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.72.0/23
195.114.20.0/23
Signature Algorithm: sha256WithRSAEncryption
51:7e:69:4f:ab:f4:66:68:4a:74:9d:32:96:bd:3c:6a:13:5b:
c0:e1:e5:61:1a:df:20:72:75:43:a1:d1:af:ee:2d:08:1f:6a:
73:4a:76:04:73:e6:6f:c3:e0:aa:30:17:ec:4a:54:e6:e9:c5:
d2:30:d7:44:0a:0d:29:f7:06:6a:08:0d:20:fa:02:a2:e6:85:
95:bc:db:29:89:5c:b1:b7:2a:b9:be:64:92:ce:3f:87:5d:bd:
fc:7b:8a:7c:0e:8a:2c:a1:b8:5d:d2:01:13:dd:30:ce:1e:35:
95:bc:5d:dc:62:7b:13:2c:2f:93:83:71:da:97:ea:34:8b:1c:
68:03:5d:62:63:5a:16:23:a9:dd:6e:dc:4a:c1:8e:4c:14:c1:
cf:f0:b2:82:ae:dd:74:4f:59:bf:90:a8:26:89:46:f7:e6:00:
ee:7d:41:90:f3:5c:de:39:22:b8:07:3f:6e:26:a0:84:fb:62:
43:9d:39:ba:d3:69:24:4c:32:ac:8d:6f:e8:a2:5c:ea:de:3a:
dd:f9:35:1c:7d:b5:b2:d7:25:5b:8a:8b:4e:f0:67:7c:e7:14:
a7:ff:14:47:cf:d1:c7:de:f4:63:75:fe:1b:df:d1:09:10:ad:
f5:16:6e:3c:de:53:ee:09:94:05:c0:4e:33:a6:bc:91:c5:49:
b8:ea:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:40 2025 by rpki-client