Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa
File: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (raw, json)
Hash identifier: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=
Subject key identifier: 64:E5:92:75:35:3E:59:35:85:6D:0E:2E:71:3A:F3:C5:44:92:CF:DD
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019428236B87B77C3CAC9BAFD7BB5EDC6113
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa
Signing time: Thu 02 Jan 2025 17:49:57 +0000
ROA not before: Thu 02 Jan 2025 17:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208027
IP address blocks: 213.192.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6b:87:b7:7c:3c:ac:9b:af:d7:bb:5e:dc:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e59275353e5935856d0e2e713af3c54492cfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:a5:1d:72:c0:1d:3d:0f:16:69:31:07:98:
22:a6:e9:36:a9:06:0a:b9:54:1d:24:9d:4d:7e:fa:
56:72:7e:44:ac:05:52:14:a9:98:63:e4:4f:e9:23:
87:75:a8:8b:a0:08:34:7a:68:22:7e:00:a5:32:4a:
70:fa:50:be:82:20:76:1e:0b:44:dd:6a:f6:2e:82:
d9:e7:63:21:16:01:bc:5f:24:14:8c:d3:a4:d3:ae:
4a:0b:15:b7:56:d3:75:9e:19:67:82:93:f6:15:01:
74:ad:3f:30:50:cd:5c:3c:1f:04:c1:a4:b9:ae:df:
f4:09:c9:c3:9e:b7:a7:63:57:4e:24:ae:c8:ea:8c:
48:8a:6c:23:2c:55:61:41:4f:2f:9e:4e:4a:bb:c7:
b7:28:ae:01:e0:df:ec:8c:65:6c:ec:43:e9:a2:4b:
78:3e:2e:0e:c2:6f:df:d3:53:c8:d2:f0:17:44:54:
74:3f:74:c3:35:83:4a:a3:18:6b:94:75:f3:89:5e:
cf:8e:90:b9:c9:78:cf:c1:33:e4:54:18:71:47:b1:
a0:c6:da:dc:5b:f6:1b:6e:ca:09:76:a2:46:04:ce:
96:7d:f8:2f:1b:0a:0b:0f:e0:46:2b:5c:e2:e0:95:
7c:c0:61:1e:44:66:3c:6e:56:6e:c5:9a:d2:3a:6f:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:92:75:35:3E:59:35:85:6D:0E:2E:71:3A:F3:C5:44:92:CF:DD
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4a:3f:61:52:8e:e0:3a:a6:4d:d9:8d:44:d1:a3:a9:ed:d9:
63:34:d8:dc:68:e6:b8:ca:41:d4:86:9b:3c:b2:7d:7d:5d:da:
3f:fa:e5:45:fd:95:43:79:a5:95:27:09:0d:24:54:9a:ff:b1:
f7:76:d6:0e:ea:f6:4e:24:cd:0a:b1:50:56:57:5c:b0:80:22:
77:4d:7c:d3:8f:c7:18:83:27:82:88:30:cf:2f:5a:59:76:8e:
28:67:81:39:3e:9d:31:5a:08:ec:c7:20:85:25:a6:52:e5:d4:
43:81:88:97:4d:1e:a0:9b:21:ef:10:7a:36:22:78:f1:68:c7:
c5:48:e4:b1:6a:0b:9c:10:39:56:46:01:8b:cf:a5:fb:ab:d5:
7e:df:33:54:3e:c5:52:bc:75:8e:75:64:d8:fe:4b:69:c3:36:
31:b7:fa:ce:23:ca:e6:e4:3a:bf:14:01:3d:19:a6:ca:be:4a:
0c:fd:48:d3:a1:38:33:0f:11:ac:d0:bf:3f:f1:0d:fb:28:33:
3a:5e:9b:e6:8a:43:0f:fb:fc:3d:5a:96:ff:5f:1b:b8:d6:81:
59:70:94:f1:01:3f:8e:bd:34:85:ab:4e:90:a5:fe:6b:89:24:
f0:e7:2a:32:ef:e1:52:89:37:bc:46:77:1d:46:e3:ef:98:ac:
67:8a:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:26 2025 by rpki-client