Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa
File: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (raw, json)
Hash identifier: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=
Subject key identifier: 67:4F:E7:2A:7E:4F:A5:FE:CE:FF:19:4F:1B:F1:D0:80:A4:E3:29:F8
Certificate issuer: /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial: 019425FC2C61FE24DA3FAC84708CCF88CD2D
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203520
IP address blocks: 185.16.196.0/22 maxlen: 24
2a03:dfc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2c:61:fe:24:da:3f:ac:84:70:8c:cf:88:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=674fe72a7e4fa5feceff194f1bf1d080a4e329f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:46:d2:ea:7f:35:d6:38:3b:ed:87:25:f8:
8e:00:a6:2f:21:ba:b8:2f:cf:db:d7:37:9a:1d:8b:
e0:36:65:f7:11:b8:e6:e7:6e:a7:2a:84:13:5f:34:
9f:65:1b:dd:6e:2d:46:ea:66:8e:50:4c:f2:2b:e3:
fc:d8:12:d1:79:89:bd:62:32:c2:6a:18:3a:bb:51:
1a:c9:a5:af:14:69:16:7a:71:0c:e2:05:65:16:bd:
9d:ff:a4:4c:b1:36:b6:63:9d:10:9d:22:8f:77:59:
7e:f6:ee:00:32:a9:e9:7b:0d:48:07:ba:27:ce:a9:
a3:83:89:60:68:a3:2b:10:cc:79:85:0b:66:04:6e:
31:db:d7:e1:19:de:83:d0:af:e7:de:ae:d6:b6:87:
2e:5f:27:2d:fb:b8:1d:4e:f7:27:14:1a:fa:7d:47:
09:04:02:7d:40:90:0c:07:70:3c:4b:ba:4b:db:78:
e9:96:c1:34:de:50:56:0d:bc:ad:cd:66:87:4b:c2:
46:d1:12:84:9a:01:cc:ac:ee:19:40:83:5d:2a:de:
86:07:53:65:81:d1:d7:a4:bc:ec:79:96:fc:4c:9c:
92:92:ea:3c:f0:f2:ae:45:77:46:49:51:e1:89:a8:
d5:2e:eb:5a:4d:fb:40:28:b7:b0:a9:7e:80:59:d7:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:E7:2A:7E:4F:A5:FE:CE:FF:19:4F:1B:F1:D0:80:A4:E3:29:F8
X509v3 Authority Key Identifier:
keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.196.0/22
IPv6:
2a03:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
07:e2:ea:7d:d1:c8:34:ec:5b:47:ec:5b:41:6b:44:86:66:79:
18:8a:28:74:d2:e5:9c:4a:ff:89:33:07:cb:86:8a:0a:0e:27:
e8:6e:2c:f9:20:fa:ac:a8:fa:f4:47:07:18:d0:5a:2f:03:86:
57:ab:64:ed:e9:27:5b:5e:73:40:cc:a6:b9:37:30:2b:f3:fc:
91:c9:eb:a3:be:8e:5a:d8:21:ef:5c:1f:5e:5d:8b:0a:ab:4a:
ec:36:0c:7a:3a:52:0d:64:14:eb:30:b7:b6:ae:fb:eb:17:ad:
18:6b:66:1b:fb:06:67:db:c4:89:82:25:1d:d5:27:8a:8f:bd:
09:de:76:31:95:c2:a2:d0:d7:a7:01:27:f7:42:4e:7e:3e:7f:
65:52:2c:54:87:ee:40:78:0f:cc:9c:b2:c3:a1:6d:b9:54:bc:
c5:f7:6d:3c:ee:d2:fa:d8:f5:c0:9c:0a:63:ca:bc:e3:cb:56:
79:25:17:21:85:b4:a8:1f:bb:77:1f:a1:85:7f:36:18:62:43:
29:b0:df:fb:9e:5b:80:65:c5:2c:14:e9:66:4d:8a:4d:26:17:
bc:be:f7:64:90:c1:73:1e:34:02:93:e7:7d:9d:9c:50:3a:61:
63:76:00:5c:b3:cc:9d:cb:b4:5f:ec:66:9a:d4:05:09:b0:b0:
23:39:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:17 2025 by rpki-client