Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa
File: z4wMvnR06etPJrAf1XPqDyyKG9U.roa (raw, json)
Hash identifier: 8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=
Subject key identifier: CF:8C:0C:BE:74:74:E9:EB:4F:26:B0:1F:D5:73:EA:0F:2C:8A:1B:D5
Certificate issuer: /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial: 019420683AA1C96E59610C698B25F27770D2
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208446
IP address blocks: 185.137.99.0/24 maxlen: 24
2a12:7c40::/29 maxlen: 48
2a12:7c40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3a:a1:c9:6e:59:61:0c:69:8b:25:f2:77:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8c0cbe7474e9eb4f26b01fd573ea0f2c8a1bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:58:f7:6d:86:33:a7:d5:5d:3a:e8:49:c4:
c9:e5:0d:4b:77:1b:7e:df:23:e3:1a:9f:05:32:3d:
1c:17:c0:e1:3f:58:c3:36:f1:0e:e9:c8:08:9f:fd:
51:ec:6b:80:e9:56:ab:43:ce:f2:3d:35:6f:8c:ca:
ca:7c:2d:a1:ff:67:82:cf:3a:7d:3a:8c:53:40:0a:
4f:e2:76:fd:31:13:05:52:20:d7:8a:6b:cc:6d:75:
23:d3:fc:d1:a9:ea:3c:b5:04:55:20:5b:68:c7:ae:
60:8b:a2:bf:cf:52:e3:f5:73:c7:a4:51:12:64:3a:
da:39:3d:98:16:03:d4:36:0d:83:ad:0e:51:b8:bc:
86:70:73:c2:f3:79:9c:84:97:25:b7:d4:60:33:b7:
2c:e4:5c:ec:42:6e:a5:da:95:8e:51:fa:39:e3:f4:
46:7a:cb:a6:fb:3d:36:06:f0:8e:35:da:b9:d9:9e:
8b:02:08:4a:8c:30:a0:1b:e3:43:67:ec:b6:b5:90:
6f:39:77:55:a7:fb:be:ca:2c:d6:33:08:89:f3:61:
19:5e:b7:5c:84:e7:de:9e:0b:86:a2:7f:a8:5c:fc:
3f:d4:e7:61:01:7c:66:01:f2:58:60:55:0a:44:bd:
cc:ae:e3:3a:4b:10:62:6c:db:64:ff:9d:de:e6:41:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:0C:BE:74:74:E9:EB:4F:26:B0:1F:D5:73:EA:0F:2C:8A:1B:D5
X509v3 Authority Key Identifier:
keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.99.0/24
IPv6:
2a12:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:12:ad:0d:c6:f5:ae:81:a0:a2:89:7e:8a:cd:09:72:4e:e0:
b2:3f:a4:30:c9:9f:9f:d4:91:af:8a:22:e8:7a:dc:10:89:bd:
4a:ef:8a:5c:8f:f9:d5:2e:6f:4f:e6:51:e3:fd:a1:94:f1:e7:
77:1d:d9:4c:ea:c0:91:ab:f1:bf:ca:de:70:43:a0:02:e0:e9:
5c:ba:38:96:a0:b2:dc:25:57:60:00:72:2a:f5:50:6b:95:38:
07:d7:95:37:9b:ca:f0:c0:f9:fa:89:bd:b3:f3:9e:0d:d2:41:
16:d3:7f:7f:67:38:6b:8c:74:d2:22:f9:88:a5:f1:47:2f:5e:
cb:28:45:0d:e4:da:df:28:c5:85:e2:43:01:1b:8b:70:a8:1e:
56:f7:cb:11:f5:e0:0f:b3:c9:ce:3a:c2:d8:d2:4e:b1:5a:08:
42:25:87:85:71:c0:9e:20:d1:26:08:7e:07:c0:60:b7:a2:09:
0b:87:a6:b6:e0:6b:55:6b:84:9e:38:f6:f1:c2:71:fc:ee:84:
a9:47:2d:bf:79:62:34:58:82:a0:d4:f6:3b:ea:dc:9d:88:2e:
90:90:e4:d2:5a:d2:e4:97:60:5d:1f:8a:97:89:02:89:1e:03:
78:6c:c7:0d:b9:c9:8e:8d:76:02:00:8f:ca:25:56:9c:93:5a:
f6:4d:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:45 2025 by rpki-client