Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/zalftAHY0_vxWVcBQe7AUMKmyP4.roa
File: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (raw, json)
Hash identifier: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=
Subject key identifier: CD:A9:5F:B4:01:D8:D3:FB:F1:59:57:01:41:EE:C0:50:C2:A6:C8:FE
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 019422FC4D86A436903D6C7422F84536DC94
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/zalftAHY0_vxWVcBQe7AUMKmyP4.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59874
IP address blocks: 185.175.192.0/24 maxlen: 24
185.175.193.0/24 maxlen: 24
185.175.194.0/24 maxlen: 24
185.175.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4d:86:a4:36:90:3d:6c:74:22:f8:45:36:dc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda95fb401d8d3fbf159570141eec050c2a6c8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:d7:92:1c:b0:f0:96:4e:e0:cf:09:7d:cc:
84:3e:39:69:7d:21:cd:c5:03:4e:5b:99:9a:90:c4:
8c:e2:bc:de:80:55:fa:a6:e5:ef:09:58:30:d1:ee:
ec:45:f6:5d:89:a0:9f:46:23:f4:89:a4:32:bd:78:
cc:bc:aa:a1:45:8d:eb:7f:92:87:28:95:d9:da:94:
1a:a6:36:c3:31:e4:6b:8b:ab:24:89:d8:91:3e:4b:
b6:07:b4:62:0d:42:39:f8:04:73:50:c2:0f:73:36:
85:b2:28:04:a8:bb:3b:b9:40:eb:96:c3:27:f4:8f:
1c:12:7a:f5:69:a7:db:06:e1:ca:22:2e:ca:54:b5:
db:fc:cd:00:9e:93:fd:6a:f0:d8:05:4a:66:85:d3:
56:35:fb:bf:c6:4f:19:75:3f:1c:bb:41:3a:c9:9e:
fc:02:eb:e6:49:30:8b:94:79:7c:bc:a8:b7:fe:50:
8a:f3:2d:3f:3e:fc:f0:61:6f:90:e4:fd:5f:8a:bb:
84:ef:8b:eb:d1:1e:10:ca:5d:f2:b8:8e:59:9a:a0:
f0:37:c9:89:dc:c4:10:f7:e8:5c:16:fe:87:e8:f1:
12:9d:0b:ea:f1:4a:2d:7a:f8:cb:4b:a0:b6:7e:2b:
a0:38:02:19:2f:96:14:5a:e7:39:b9:29:10:25:a3:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:5F:B4:01:D8:D3:FB:F1:59:57:01:41:EE:C0:50:C2:A6:C8:FE
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/zalftAHY0_vxWVcBQe7AUMKmyP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.192.0/22
Signature Algorithm: sha256WithRSAEncryption
74:9b:b6:36:64:9a:c1:60:02:63:e1:e1:3b:7b:9f:07:96:e6:
d6:48:52:65:45:01:71:36:60:99:ce:a3:a0:90:1e:07:06:99:
e5:2a:b6:83:6c:b6:c4:84:10:f4:b8:25:57:21:d3:40:4f:8a:
2a:c5:af:82:06:4c:7e:20:d1:5f:eb:71:bf:f7:7b:b8:5f:24:
b3:d0:90:1c:71:a6:b3:ca:b2:f0:bc:50:c4:04:5a:83:1a:23:
80:65:37:b4:8c:69:21:1f:94:92:81:06:12:d7:43:48:04:e7:
a4:78:29:3c:21:d1:05:61:ce:4d:79:8d:af:f5:9f:2b:d2:f5:
0c:0f:29:d5:38:9d:d2:c4:47:1a:a3:fa:a5:03:ac:89:5c:49:
e7:03:69:8a:c0:63:2a:5a:6f:ef:bb:d5:24:dd:66:f6:5f:1f:
2e:6d:87:64:82:ce:ae:04:1c:26:3e:d6:68:fe:f8:ac:6b:e6:
b1:4e:1f:26:24:e2:f9:b4:d7:90:bc:21:60:a4:a9:81:20:02:
34:40:70:8f:1a:6d:c3:d1:e8:14:e7:1b:d4:b1:87:97:6e:de:
be:0b:00:52:cc:d7:ca:e7:22:60:00:33:da:dc:c2:4c:70:7d:
ef:4f:be:2b:49:1b:35:05:32:bc:0c:e7:78:2e:10:b1:e7:32:
06:13:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:15 2025 by rpki-client