Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZhJ5kdVgunlmo848w1nL5S4mr34.roa
File: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (raw, json)
Hash identifier: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=
Subject key identifier: 66:12:79:91:D5:60:BA:79:66:A3:CE:3C:C3:59:CB:E5:2E:26:AF:7E
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 01942521F60529F4E5F6F565BE53F725F993
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZhJ5kdVgunlmo848w1nL5S4mr34.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205002
IP address blocks: 185.233.20.0/22 maxlen: 32
2a0c:cf00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f6:05:29:f4:e5:f6:f5:65:be:53:f7:25:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66127991d560ba7966a3ce3cc359cbe52e26af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:dc:95:d7:e8:a1:b3:8d:d6:15:a2:f1:3e:
1e:83:8f:9c:2b:bc:06:51:70:55:d7:46:01:67:d8:
de:df:fe:87:59:75:30:9c:9a:d2:33:a5:cf:d8:5d:
bd:26:74:52:e1:09:5e:f9:1d:c5:7f:f8:41:95:35:
b9:ea:ce:ef:5e:d7:4f:fe:b0:ce:74:60:f2:0f:40:
e2:24:cf:81:81:68:81:e3:95:58:59:00:77:39:b8:
4e:4b:4b:6c:cc:2e:1a:17:1f:40:4b:f3:45:83:10:
9b:05:a6:da:fc:69:34:07:47:17:81:c1:32:6f:34:
0b:d1:14:3d:00:3d:b5:19:0f:4b:b6:75:e6:e3:0f:
9b:f0:ee:a5:27:95:0c:85:7b:a6:8d:1b:6a:47:94:
e5:47:2f:7c:c3:47:a1:20:14:43:ec:e8:ae:2a:83:
08:3f:43:b1:fc:e0:e5:9b:0f:4f:8b:ad:1f:1e:3b:
30:c4:19:1d:ca:0b:9b:fc:b1:c4:41:97:42:23:8e:
f6:b5:3d:20:72:d8:bd:0d:1d:df:27:d1:9b:30:57:
84:b3:2c:2f:32:7b:30:83:6f:9c:83:ad:71:87:ba:
b0:56:75:57:7e:0e:a1:39:7c:6c:76:14:a3:5a:00:
25:f8:02:c1:2b:3d:89:f1:e3:51:16:bd:8f:1c:20:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:12:79:91:D5:60:BA:79:66:A3:CE:3C:C3:59:CB:E5:2E:26:AF:7E
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/ZhJ5kdVgunlmo848w1nL5S4mr34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.20.0/22
IPv6:
2a0c:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
8c:c9:52:67:5c:0c:e1:d0:d6:f3:12:47:f2:d6:03:84:7e:5f:
53:9f:bf:b8:f2:79:d9:f0:82:0d:46:b2:53:c0:48:02:df:69:
c7:0e:89:39:97:5f:d6:3f:5d:42:76:4f:07:c7:6d:1a:7a:85:
2c:4d:f7:4e:eb:db:48:05:f3:1a:5d:48:e5:e1:93:7f:3e:25:
bc:bf:6e:30:ba:77:fa:ef:ea:56:f6:61:91:4c:4f:b9:cd:54:
58:52:d2:2a:89:fc:df:c2:97:62:1b:02:a3:87:a1:10:0b:53:
77:45:f0:af:d8:28:b8:58:e7:1f:84:8a:47:46:1c:f0:f8:82:
32:e2:d9:a7:0f:36:4e:fe:73:30:ce:cc:11:24:4c:c9:a0:2d:
e7:03:73:d3:6a:30:3f:4d:1f:f8:c3:cb:e9:ab:8a:03:ab:53:
a6:bc:56:a9:f7:70:be:76:c7:dc:68:4f:55:e8:0d:54:da:19:
54:94:8a:9b:62:81:e5:22:52:c9:b1:57:65:ce:13:2a:90:51:
45:5e:55:63:b7:07:9e:e7:e2:51:33:98:84:c6:01:9b:43:40:
8d:38:80:fd:ae:97:99:d0:62:3e:3f:03:5c:64:ee:16:c3:7d:
be:3c:5a:61:ac:f7:2c:a9:6a:a7:40:69:63:f9:3b:14:09:4b:
f6:e1:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:36 2025 by rpki-client