Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa
File: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (raw, json)
Hash identifier: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=
Subject key identifier: 64:AC:02:CA:DC:50:C1:BD:A5:03:C1:DD:37:62:2D:4D:AF:A7:18:51
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0194228D8C97BFA2488E6AC9D1D764586F79
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24953
IP address blocks: 185.23.202.0/23 maxlen: 24
194.34.224.0/24 maxlen: 24
194.34.227.0/24 maxlen: 24
2a0d:f9c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:97:bf:a2:48:8e:6a:c9:d1:d7:64:58:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ac02cadc50c1bda503c1dd37622d4dafa71851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:33:7a:03:f2:45:79:7b:6f:b0:f1:99:11:
3d:51:55:af:c5:69:6c:b9:2f:9c:e1:cb:18:ab:58:
91:00:b6:a3:69:e2:2c:20:dc:4e:62:ca:d9:9d:d0:
1b:49:f4:af:d5:20:72:b2:58:db:63:60:e7:d7:79:
e2:6c:a6:9f:04:af:50:8e:8b:ac:a9:96:d8:9e:36:
e7:39:e5:1f:51:2a:a9:37:b6:83:68:70:01:c1:db:
93:9f:e9:40:0b:4d:88:7b:da:96:14:23:16:1b:84:
c1:2e:25:49:0c:a9:55:a5:f5:da:b2:18:74:7b:9d:
e9:fc:85:5f:04:5c:0c:34:06:c4:d5:58:c3:b3:84:
0c:75:bc:68:ad:2f:f1:9f:2d:09:8d:9b:3c:ef:ca:
4c:49:79:8b:19:0b:a3:55:e3:78:c0:80:21:63:06:
30:c5:c3:f1:79:50:a8:10:ed:7a:40:0b:e1:bb:ad:
e5:52:fe:4e:57:f6:90:54:07:74:22:94:e2:36:db:
ed:e3:76:e6:ff:44:52:5f:94:a6:47:59:9d:d8:55:
c2:e7:01:f3:9a:95:ee:a6:0e:19:cc:11:2a:7b:22:
bf:21:f4:0f:2c:b7:e0:6d:14:9d:b8:2b:f9:b0:98:
72:3d:e5:60:e0:25:95:01:9e:13:df:90:c3:2d:a5:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:02:CA:DC:50:C1:BD:A5:03:C1:DD:37:62:2D:4D:AF:A7:18:51
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.202.0/23
194.34.224.0/24
194.34.227.0/24
IPv6:
2a0d:f9c3::/32
Signature Algorithm: sha256WithRSAEncryption
81:6e:ba:84:28:91:49:c7:c0:10:75:8f:30:e3:50:e4:3b:b0:
97:86:5d:64:43:8f:dd:f6:a8:64:4d:e4:9b:c6:d4:18:8b:ef:
ed:87:bf:08:55:1a:a7:9f:67:c9:81:57:37:b6:86:db:87:93:
4f:8c:83:7f:d7:c8:d4:88:4d:a7:ac:df:ec:cf:eb:a7:d6:fc:
2c:f3:76:7b:6f:89:88:53:8d:6f:b4:dd:5b:23:88:b7:6e:07:
2d:64:30:07:56:f5:d6:2a:91:1a:ff:25:d0:b4:3c:af:d1:9c:
bc:b4:18:01:e8:d1:5f:df:6b:d0:00:ce:68:94:d5:ff:70:ce:
31:97:f8:85:16:22:c7:21:78:96:0f:5a:db:57:16:d5:c2:c0:
d9:1d:b3:dd:17:d6:56:d4:30:55:d0:e1:2b:ff:90:3a:8d:89:
d2:93:b5:57:fb:32:7f:bd:19:75:36:5f:0f:ea:60:2a:58:1c:
4f:32:a8:19:06:ff:03:7a:9c:83:60:4e:5d:5a:84:d5:29:ff:
a4:a1:6f:20:5e:5a:e0:c5:ac:7d:70:7d:1b:d3:5b:60:e6:3f:
78:90:74:76:22:65:d9:eb:46:d9:f6:be:f8:41:19:87:e4:e8:
f2:c8:9b:49:cb:05:e1:4c:3c:48:bd:6e:0f:e7:6e:6a:bd:8b:
c2:ba:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:05:37 2025 by rpki-client