Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa
File: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (raw, json)
Hash identifier: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=
Subject key identifier: 64:F7:2C:DD:92:8A:C4:F5:10:6C:4B:B7:0C:4B:3B:1D:FB:FE:C1:83
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01941FFA53E2F0E9C7916B32DE9749435D07
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60819
IP address blocks: 188.241.145.0/24 maxlen: 24
2a00:a900:7afe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:e2:f0:e9:c7:91:6b:32:de:97:49:43:5d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f72cdd928ac4f5106c4bb70c4b3b1dfbfec183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:46:e7:96:ca:19:49:24:a9:c4:c0:59:ef:
50:ac:9e:df:f6:30:37:d2:21:54:2e:ca:f1:5c:4d:
6e:38:e9:88:ed:d5:d4:74:af:b0:2a:2e:70:27:12:
be:9a:24:01:2d:b8:a9:c0:12:2b:87:80:dd:6a:9d:
33:d4:8e:d5:ec:d5:47:ce:83:33:9e:a7:8f:25:39:
97:92:91:60:c7:03:a4:6b:73:e2:3f:a9:c1:f2:cc:
de:13:ef:8b:ec:4b:01:0a:34:12:5c:bb:64:f2:49:
1b:36:aa:9a:53:ba:38:e7:6c:57:c3:45:de:23:2e:
96:42:72:a7:4d:e0:e4:dd:97:60:83:55:86:30:6d:
db:99:d8:8d:ba:ea:db:44:35:3a:d8:4b:61:09:f4:
a0:c9:50:87:25:c3:ee:7d:4e:3d:4f:ea:54:83:2c:
4e:7c:9d:96:0d:73:d0:00:ab:51:d2:92:fb:85:69:
13:13:1c:63:5a:44:e9:8a:ec:42:12:2c:e1:2f:a0:
24:97:a6:8a:bc:8b:ad:b3:05:e1:e1:bc:37:71:49:
0c:bc:a9:9d:96:18:93:ee:31:f9:7f:22:d9:73:7f:
c0:1d:5e:01:d5:25:35:92:04:6a:06:a7:ed:0e:ee:
6a:ec:15:6e:f7:0f:d5:2e:23:b5:6f:fa:4d:97:e8:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:2C:DD:92:8A:C4:F5:10:6C:4B:B7:0C:4B:3B:1D:FB:FE:C1:83
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.145.0/24
IPv6:
2a00:a900:7afe::/48
Signature Algorithm: sha256WithRSAEncryption
72:14:53:ac:d2:04:b3:1d:bc:87:08:1f:01:0c:9f:9b:54:70:
01:22:00:b8:85:6c:05:45:8a:85:7e:a2:1c:58:e4:71:d0:b0:
00:91:5f:1e:de:48:0b:84:23:d8:68:04:3e:43:3a:e2:01:be:
ad:ac:f0:2b:ab:75:dd:89:de:02:e5:5e:6f:10:8f:50:64:c1:
ec:55:93:c3:20:e3:fe:d3:50:39:8d:78:ea:ff:ac:7b:79:ef:
53:a4:57:08:fa:d3:a0:28:bc:67:c9:81:27:c5:2b:ad:99:b7:
60:c8:77:0f:01:0d:43:44:21:db:05:a3:32:46:af:83:f7:94:
39:3f:3e:3e:df:82:e3:64:3a:77:5b:4c:b5:e1:8a:9a:51:fc:
e3:13:b8:1b:fe:01:d8:84:b5:2d:c9:15:7f:f5:fa:a2:34:e1:
3a:47:c7:08:fa:5e:ce:7c:64:5e:87:16:75:e4:41:ee:b6:f0:
0c:5a:e1:41:d0:cb:ca:2d:fe:9a:17:da:69:80:3b:86:98:84:
4b:ab:e8:98:22:93:8f:1e:6a:b5:bd:ef:5a:ae:26:cb:73:77:
d3:c6:31:f9:0b:0a:bf:2b:ba:f1:8f:f8:72:7b:19:9c:d4:b4:
64:29:eb:6d:57:95:0e:c2:8e:9b:85:d7:38:30:26:d9:d0:1e:
02:99:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:02 2025 by rpki-client