Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/zei6YjhBpdjVqL63TukdVgynd-Y.roa
File: zei6YjhBpdjVqL63TukdVgynd-Y.roa (raw, json)
Hash identifier: T4fQda7C6XsjIP/sCnd8L2esALMeo+oGlKzEL3Px+0s=
Subject key identifier: CD:E8:BA:62:38:41:A5:D8:D5:A8:BE:B7:4E:E9:1D:56:0C:A7:77:E6
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 01941FFA34A9D4A3836EDC38CF47AD024B55
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/zei6YjhBpdjVqL63TukdVgynd-Y.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44884
IP address blocks: 176.103.208.0/22 maxlen: 22
195.216.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:a9:d4:a3:83:6e:dc:38:cf:47:ad:02:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde8ba623841a5d8d5a8beb74ee91d560ca777e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:5a:9d:44:08:fd:b9:a8:d9:ad:a3:8a:0a:
a0:80:71:08:59:9d:20:cd:44:d2:71:65:03:60:13:
d6:b7:6f:f4:b0:7c:4a:19:0e:a9:95:89:06:ca:9a:
db:6e:90:6b:36:fd:90:38:36:89:74:fb:0f:4d:55:
eb:ce:77:cc:85:26:eb:c6:74:d5:93:6a:fb:7b:6e:
21:c3:34:04:7f:0f:a4:61:31:85:c3:83:21:3a:1a:
b7:86:3d:9a:72:25:3a:b2:e5:fc:27:65:20:a2:98:
d3:a3:3d:11:9a:5b:a0:70:85:44:aa:86:92:9c:eb:
87:37:a7:31:c7:81:c8:2f:e3:2c:14:62:d7:9f:33:
ff:7b:71:20:f0:89:e4:99:f0:99:e9:f9:f5:01:54:
1f:9a:d4:bd:9a:ce:5b:f7:99:ad:bf:93:a1:76:9e:
cd:b9:f5:ab:e7:ee:f3:d7:b4:27:d1:28:4b:7a:5c:
08:07:d0:13:61:1f:26:15:20:2d:03:e8:4d:a9:47:
fc:bb:aa:49:90:d5:c4:be:40:a6:ab:78:f4:4d:8b:
7e:fa:07:6a:92:d7:a6:db:29:3b:bf:3c:e9:ba:fb:
5e:53:16:7a:bf:bd:e2:96:6f:2a:13:6d:8c:2b:ec:
7c:6a:29:a6:d7:ce:99:31:0e:37:6b:47:6d:53:ff:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:BA:62:38:41:A5:D8:D5:A8:BE:B7:4E:E9:1D:56:0C:A7:77:E6
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/zei6YjhBpdjVqL63TukdVgynd-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.208.0/22
195.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f1:e0:fe:a9:d7:03:ea:69:33:98:fb:90:34:44:98:31:7d:
23:6f:3b:c3:38:7b:7c:35:8d:70:11:27:27:39:3b:67:e7:57:
b7:6c:9b:e1:23:d6:a6:03:88:7a:51:fe:98:5b:41:40:be:7d:
af:7e:b2:43:70:2b:7f:9b:db:6f:ce:04:a5:b4:88:28:9b:d8:
8e:48:96:d3:28:bb:54:6a:0d:09:4a:c6:7c:cf:73:78:b7:81:
d1:3e:8f:7b:f1:33:53:eb:49:07:0a:70:0f:61:a9:c3:c9:f9:
68:72:ce:2e:c5:4f:6d:63:49:ce:49:7c:96:be:4c:85:17:41:
c5:11:b4:6c:a8:d4:06:b0:15:7c:cc:7b:c2:b5:81:30:29:4f:
d5:1c:e5:46:05:8e:a2:cb:bd:3c:29:6d:49:26:e9:d8:07:ee:
94:76:99:ef:2a:eb:bf:94:54:f6:dc:fa:b4:e6:98:be:d2:e8:
0a:9f:f1:6b:45:53:ed:5e:06:8c:67:89:0c:79:ba:ab:f8:37:
08:f7:6f:ac:69:f0:69:f1:20:d2:bd:79:73:ce:17:a6:5e:4c:
ef:09:f0:6c:db:98:2b:86:9b:d3:83:fe:53:5b:a3:2f:c7:27:
0f:af:17:7f:a9:27:2d:d8:d0:fc:85:dd:a0:4a:cd:ac:87:6b:
d7:12:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:14 2025 by rpki-client