Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa
File: Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa (raw, json)
Hash identifier: vyUE4iE6P3VunHQn7CBSp04IcceuNcHP3wF8npQ/Nvg=
Subject key identifier: 66:0D:D2:7C:F2:6A:C8:92:76:B0:DE:54:56:01:3C:33:A5:13:3A:3A
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 019421446BA3B4A1A6A0DB0F8D5EE3D9E7BC
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205101
IP address blocks: 185.219.132.0/22 maxlen: 22
185.219.132.0/24 maxlen: 24
185.219.133.0/24 maxlen: 24
185.219.134.0/24 maxlen: 24
185.219.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6b:a3:b4:a1:a6:a0:db:0f:8d:5e:e3:d9:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660dd27cf26ac89276b0de5456013c33a5133a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:d0:60:1b:5b:c9:54:d8:b4:50:6c:d4:89:
04:99:7e:a0:95:7a:c7:f9:01:af:b1:28:e2:e5:45:
52:16:a6:16:9c:2b:1f:a7:3d:28:ce:ca:10:92:31:
42:8b:b0:d6:e1:ac:f2:58:7f:c8:b3:8d:86:09:6c:
e4:0f:ea:17:b6:8a:e2:6b:91:fc:48:6e:fb:03:2c:
cc:76:5b:99:95:a1:ef:62:13:89:29:a1:47:6c:bb:
35:d5:55:5a:5f:7e:a1:97:24:ea:e8:63:be:77:93:
02:e2:2c:25:ad:ae:0c:98:db:2b:26:91:6d:4e:b9:
c9:0a:07:7d:64:bc:37:63:85:0a:5b:99:86:ef:7c:
a7:9b:f7:4c:da:89:a6:8c:4e:3f:5c:a6:06:6c:e2:
c1:e3:fb:5c:91:f2:a6:a2:17:6a:31:78:c8:2d:22:
11:59:1f:f9:7c:e0:cc:df:63:38:48:09:29:e2:c9:
45:80:a2:44:78:74:2f:9f:35:0d:f0:0c:99:bb:5a:
fb:04:e1:01:c2:ef:38:1e:b5:40:78:6a:d2:3b:71:
99:cc:00:2f:e5:9b:54:79:5b:67:16:5e:d9:1a:82:
b2:cd:05:5a:82:59:04:36:5b:9a:73:01:a9:44:e4:
f6:1e:fc:04:18:b4:4a:71:16:c8:8b:aa:81:c4:8f:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:D2:7C:F2:6A:C8:92:76:B0:DE:54:56:01:3C:33:A5:13:3A:3A
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:53:27:63:1a:87:46:f4:e2:b8:0d:d7:97:cf:e4:2f:1d:7b:
af:86:06:5b:a2:bf:65:79:9e:7a:fd:b5:a6:2d:89:2a:51:30:
95:7e:95:c1:c0:f2:3b:ef:4b:2c:93:cb:db:ed:31:fa:1c:86:
8b:49:10:a0:b9:e2:d4:ea:11:3b:7a:d6:c1:de:fc:62:ae:07:
c9:43:42:6d:b8:ee:9b:18:5e:1b:42:99:af:71:c8:ae:e4:ed:
34:ea:83:07:3f:d6:96:68:41:1e:03:66:b0:c6:64:f5:e5:4a:
0e:85:c6:6a:96:54:e7:bc:f9:e1:b5:f9:d8:b9:6e:b9:6d:f9:
05:d5:f9:93:41:c8:29:18:a8:5b:d5:4f:82:f3:42:14:ef:24:
cf:fd:f6:a6:e7:ac:3c:8e:5c:ce:bd:8f:3b:0b:89:0e:ac:7b:
37:37:ec:0e:91:34:7b:f0:a3:47:3e:c8:7b:45:df:f8:8a:8d:
0b:24:57:9d:42:33:d5:2d:c3:54:e1:b6:2d:1a:6d:69:7b:b4:
3b:9b:84:89:bf:7b:68:e6:49:b1:b5:9a:54:8e:08:09:c4:12:
f4:27:a0:ea:72:54:c9:01:e9:c1:1d:80:dc:9b:b0:c6:41:bc:
16:12:f8:fc:97:dc:1e:46:9b:d6:1e:ad:5c:0b:f2:87:7f:fd:
c8:4f:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:11 2025 by rpki-client