Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/zSoi0zSs9jm361lSJvAsPlQrRG4.roa
File: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (raw, json)
Hash identifier: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=
Subject key identifier: CD:2A:22:D3:34:AC:F6:39:B7:EB:59:52:26:F0:2C:3E:54:2B:44:6E
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019420682A097CFADC83CA09A8DF9C47EDF5
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/zSoi0zSs9jm361lSJvAsPlQrRG4.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209138
IP address blocks: 185.167.104.0/22 maxlen: 22
185.167.104.0/24 maxlen: 24
185.167.105.0/24 maxlen: 24
185.167.106.0/24 maxlen: 24
185.167.107.0/24 maxlen: 24
2a0f:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2a:09:7c:fa:dc:83:ca:09:a8:df:9c:47:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2a22d334acf639b7eb595226f02c3e542b446e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:1a:f1:8d:b7:0f:69:f3:0d:ca:99:8e:34:
2f:11:5d:cb:e5:e9:7b:43:a3:ca:a4:67:bc:9b:a2:
15:0f:f9:d9:fb:74:9f:49:e2:f7:ad:35:60:c5:3b:
71:89:43:50:9b:e3:d3:11:cd:56:35:05:49:e4:84:
6b:2b:ac:51:59:86:9d:ec:80:52:3d:02:52:1b:ed:
da:62:25:2e:c9:cf:a1:2c:d5:08:dc:03:33:6c:91:
47:62:77:2f:92:19:fa:fd:f1:be:8c:87:01:bc:7b:
36:e7:72:bb:f6:1d:b3:f3:43:b1:9c:a2:16:08:6c:
e2:fc:ac:ea:9c:40:be:77:58:58:18:e9:9a:3b:24:
82:a3:2e:eb:39:80:19:59:5b:53:01:eb:a4:18:35:
f6:bb:83:41:db:af:d6:44:d0:5a:66:b5:7f:4a:21:
b9:d1:6d:b4:36:31:59:99:6f:9c:66:6e:5a:e0:56:
15:13:5b:da:e3:cd:5d:d7:85:72:dc:7b:16:d2:ef:
96:73:be:4b:ce:14:f3:c4:fa:c2:f8:a4:cb:f7:02:
5a:4a:4b:e9:b7:bf:8f:33:bc:0e:4c:54:76:e1:a4:
5d:38:be:bc:09:fc:07:5d:9c:31:e7:be:53:a4:ad:
74:ce:ab:f7:8d:8b:4a:67:a6:d9:35:3e:3c:46:98:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:22:D3:34:AC:F6:39:B7:EB:59:52:26:F0:2C:3E:54:2B:44:6E
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/zSoi0zSs9jm361lSJvAsPlQrRG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.104.0/22
IPv6:
2a0f:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:12:2d:ac:b5:d4:23:06:11:e5:d9:e0:5e:65:d5:f3:32:ca:
69:8c:35:b7:3c:90:0a:8c:69:34:a4:90:9c:63:99:8c:aa:86:
b9:14:08:bc:fb:a0:eb:2d:94:9c:79:ea:e1:91:cf:72:3e:12:
17:bb:a2:17:9c:64:f0:a6:3b:16:5c:aa:78:c9:90:41:ac:57:
9d:96:3c:9e:01:18:2f:71:17:92:9e:56:7b:78:66:c1:da:51:
28:b7:f4:e2:84:ab:1a:08:ed:9b:ed:f5:a1:e3:fa:b3:58:4a:
55:9e:e6:d4:a9:b9:2c:6c:5c:16:0a:fb:30:6c:36:0d:e5:4b:
b6:1f:8d:72:61:a3:eb:08:b2:fb:6c:22:10:ac:ed:c2:37:e1:
12:3f:32:4e:3a:a6:bc:ee:1a:f9:e5:98:a8:9c:9c:8b:4e:aa:
41:23:82:6f:28:9e:ad:64:0f:04:4c:7e:67:1f:3e:06:f1:77:
1e:01:f1:86:70:ff:9d:39:15:93:7b:42:06:24:f4:2c:b6:ce:
8f:39:d8:5f:5d:4d:16:1d:b9:ec:c9:e6:e4:a5:7d:11:05:2b:
cd:6b:ad:21:a8:f9:0b:0e:75:2c:df:e0:39:a4:c9:57:e1:c6:
84:64:30:d5:a4:57:90:d2:56:11:b3:00:f5:04:59:04:18:91:
b8:df:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:30 2025 by rpki-client