Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/o-ZlaW1WgunU3TjJVwdOR6husz0.roa
File: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (raw, json)
Hash identifier: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=
Subject key identifier: A3:E6:65:69:6D:56:82:E9:D4:DD:38:C9:57:07:4E:47:A8:6E:B3:3D
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 019426D94C984D66525D2D716124D5714985
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/o-ZlaW1WgunU3TjJVwdOR6husz0.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47289
IP address blocks: 185.65.143.0/24 maxlen: 24
2a10:e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4c:98:4d:66:52:5d:2d:71:61:24:d5:71:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e665696d5682e9d4dd38c957074e47a86eb33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:a0:38:bb:6a:1f:0f:13:af:a1:14:47:7f:
c9:fd:f1:6a:2b:4d:dc:59:77:e2:c6:8e:cc:c1:75:
ce:d7:1e:50:4f:78:cc:5e:5a:f6:a9:46:5f:a1:bc:
0c:20:c8:87:55:c9:87:b9:ec:3e:f4:ed:f9:af:e2:
11:04:fe:35:b9:39:d8:9a:60:e2:e3:36:66:31:bf:
7a:c8:a8:ca:25:0e:43:02:b6:52:7b:73:e0:3f:aa:
17:36:de:83:4a:86:c0:c0:83:85:d3:3d:8a:cc:db:
e0:de:d4:02:98:59:9a:df:44:4f:69:77:40:e7:e8:
81:30:4c:1d:4f:95:ac:fc:04:79:18:6c:05:70:72:
b1:39:63:02:15:15:cd:59:1d:7b:84:09:0e:5a:cb:
64:0f:95:a9:34:8f:ac:35:7a:ec:8d:7a:31:71:0f:
55:6a:c3:46:04:84:98:f5:53:f5:f2:a9:a0:c4:54:
cf:b6:aa:72:fb:c4:b8:7c:7f:21:d1:96:00:6c:a2:
92:36:b6:c8:07:4a:02:05:6a:95:8f:29:3a:a6:39:
55:cb:71:b0:7e:58:4a:c1:70:60:73:64:59:fa:f7:
f0:d8:45:6a:87:f9:ff:d2:49:b9:d9:3c:c2:7f:9f:
0d:1c:fb:9c:14:81:22:8d:62:7f:c0:14:0c:89:7f:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:65:69:6D:56:82:E9:D4:DD:38:C9:57:07:4E:47:A8:6E:B3:3D
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/o-ZlaW1WgunU3TjJVwdOR6husz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.143.0/24
IPv6:
2a10:e80::/29
Signature Algorithm: sha256WithRSAEncryption
b4:4f:ad:b3:1c:e3:68:d1:32:f1:eb:69:50:e2:77:ce:45:b4:
cb:11:8f:71:7f:68:95:df:20:ab:88:ed:b3:1c:ef:88:fd:c8:
c3:d5:b4:b5:a3:9c:9e:07:76:e0:db:fd:bb:3b:1c:38:2b:69:
bf:12:4b:8b:87:26:42:55:e9:67:ce:6f:35:b8:1f:90:9b:9e:
0d:32:da:d3:bc:73:82:ba:81:fd:6e:d1:1b:57:fe:4a:b5:23:
cc:df:98:50:40:b6:e1:44:5d:f2:5d:8d:64:49:59:c6:c6:b1:
2d:13:b1:14:da:6e:2a:89:e2:20:8e:c9:31:f0:90:76:7d:17:
a0:3b:cf:1c:5f:d9:cf:e1:6e:78:1b:89:bf:6d:40:bc:ad:88:
3b:06:17:ba:90:5b:0e:1c:4d:51:0e:97:5c:14:61:e1:6f:2d:
9c:7d:a9:d2:2b:16:7d:3b:13:2a:f2:20:14:9f:00:29:8f:15:
ff:42:6e:65:74:f1:ae:44:8d:b7:24:e5:e5:79:9f:4c:75:c5:
58:d7:51:62:c0:c9:b7:55:eb:0e:46:29:84:d6:cb:a5:03:34:
2d:11:26:7e:ab:23:9b:0e:3f:9f:79:79:94:43:f4:55:58:8a:
e8:57:73:a6:66:00:7e:45:ab:fc:54:c7:a8:71:3d:5a:91:d0:
1a:bb:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:31 2025 by rpki-client