Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/zeGJY-nsOInvvd3T0IdWJNf1k28.roa
File: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (raw, json)
Hash identifier: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=
Subject key identifier: CD:E1:89:63:E9:EC:38:89:EF:BD:DD:D3:D0:87:56:24:D7:F5:93:6F
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 0194236987EF8576F0AF2F5EAB8D0CEB89ED
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/zeGJY-nsOInvvd3T0IdWJNf1k28.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206348
IP address blocks: 185.159.248.0/22 maxlen: 24
185.159.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:87:ef:85:76:f0:af:2f:5e:ab:8d:0c:eb:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde18963e9ec3889efbdddd3d0875624d7f5936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:16:bd:86:15:d5:ab:14:90:94:9f:b9:0c:
32:3e:4c:51:75:86:68:b7:91:a2:f3:9b:2f:f8:65:
91:53:dc:17:5d:2f:13:7d:54:cf:8d:97:3f:89:b0:
25:e0:f0:85:d0:0a:b7:b2:43:8b:b2:11:39:aa:76:
34:39:09:cd:36:a6:b8:00:1c:3e:86:68:77:4f:2e:
62:85:a2:f8:ef:3a:a0:09:b7:90:02:46:07:99:28:
4c:3f:04:54:14:34:5f:9c:84:a9:40:ce:af:d2:63:
7e:56:3a:62:7b:28:67:8c:ec:bc:81:4b:85:e9:47:
27:c4:af:ad:f9:9d:4a:80:10:3a:da:6e:d4:03:2d:
cb:70:83:98:ca:52:28:7b:6d:58:6f:4a:3b:2a:e9:
2b:7e:8f:95:69:90:c1:57:68:9a:78:23:0e:94:81:
cf:d9:f2:a4:8e:a5:91:42:2a:5c:22:a2:a3:50:17:
bc:ee:69:d8:96:c9:d6:e8:0f:b1:0c:67:c4:12:ce:
4c:4e:f5:59:32:79:fb:37:de:5b:43:67:2e:7c:cb:
fe:1b:1a:7b:f2:81:72:1d:b3:d0:0a:c4:7e:0e:05:
16:18:09:e9:c5:6b:3c:45:72:ec:2f:55:5a:b2:de:
2a:6f:6c:3a:c4:0f:28:22:06:26:b5:23:82:05:fb:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:89:63:E9:EC:38:89:EF:BD:DD:D3:D0:87:56:24:D7:F5:93:6F
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/zeGJY-nsOInvvd3T0IdWJNf1k28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a9:80:91:a4:f2:c4:d3:9d:51:e6:33:a4:fa:51:4c:6c:9f:
05:72:72:d5:44:4e:43:47:35:c9:57:af:47:ff:f8:9d:4f:7c:
27:88:a6:7c:9e:cd:40:b4:dc:4e:21:b8:d9:5b:60:c4:29:24:
de:26:a4:97:84:67:42:f3:d0:5d:74:51:b0:93:bd:79:ae:30:
24:da:37:7d:42:4c:18:f3:d5:ec:1e:2d:80:c7:77:a1:72:23:
02:af:f4:69:72:a0:ba:85:8d:dc:16:18:41:56:d5:ed:a3:1a:
0a:ad:16:ee:75:90:16:67:9e:d1:b6:85:0e:84:8f:8c:7e:02:
cd:e4:b3:2f:13:69:ad:e7:fc:82:be:ff:8c:16:22:72:24:24:
08:92:c6:70:87:42:0a:5f:93:fa:5d:37:91:1b:55:f7:95:3c:
40:c8:63:c4:8a:30:0a:4c:d3:17:a7:7a:3f:3d:16:46:b8:0e:
ab:5c:65:e4:b1:49:13:e0:36:21:d5:09:76:4f:52:d0:41:97:
0d:05:04:5d:91:3c:3e:35:12:a6:9e:51:e9:f9:fb:02:f4:09:
27:ba:f3:f3:c4:e8:a5:1a:70:97:07:95:44:2b:61:05:4b:45:
39:ec:2b:56:fa:6b:b2:73:d4:7c:30:54:a6:ed:63:14:4d:bb:
9a:26:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:47 2025 by rpki-client