Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/ZQgVOtlKeyFC38M2101OMHMsXQE.roa
File: ZQgVOtlKeyFC38M2101OMHMsXQE.roa (raw, json)
Hash identifier: yhIhd3mmsJTwIKHcA4cRnEfn0qLPxogW2a77pLgopes=
Subject key identifier: 65:08:15:3A:D9:4A:7B:21:42:DF:C3:36:D7:4D:4E:30:73:2C:5D:01
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 019427B6261984C5086E01C581053AB51E5A
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/ZQgVOtlKeyFC38M2101OMHMsXQE.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:26:19:84:c5:08:6e:01:c5:81:05:3a:b5:1e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6508153ad94a7b2142dfc336d74d4e30732c5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:34:f0:39:2d:61:a1:b3:56:3f:d1:96:04:
d3:e1:ee:4b:0b:ba:6c:08:a1:d5:af:b7:4f:43:ae:
09:3f:53:37:c0:fd:3e:f7:b3:ba:3b:46:46:80:e5:
0e:02:cb:e9:90:b6:b5:54:09:b3:42:ee:e2:a4:03:
47:f2:00:df:9a:03:88:dd:8a:57:53:5f:3f:af:7f:
f7:89:be:69:7c:45:58:d7:fa:a2:bd:90:91:07:2a:
e8:4a:23:77:28:24:4e:c8:2c:f2:e2:94:d2:80:a9:
0a:92:fa:cb:7a:c7:ef:3c:6c:fc:33:ca:3c:fc:30:
51:df:75:59:9b:1f:c0:15:bd:24:ef:b7:e4:48:60:
03:ed:f5:95:46:8e:68:73:ce:08:bd:90:7d:a7:be:
0f:5b:0b:ca:af:44:cd:40:cb:37:79:9b:bb:da:cb:
91:33:07:6a:0c:0a:0d:77:48:68:18:66:f2:40:22:
57:ee:1f:35:21:ef:ec:53:22:29:bc:ad:73:4b:b0:
45:05:08:a3:60:97:df:ae:8a:e3:eb:64:bc:3c:1f:
cd:a9:70:34:3b:c4:a2:ff:72:32:c3:ee:5e:e1:3e:
10:2f:59:aa:43:63:fc:9c:86:87:8d:ef:65:c1:cc:
e4:1d:c7:03:dd:23:46:e6:ff:f6:fe:38:05:57:ca:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:15:3A:D9:4A:7B:21:42:DF:C3:36:D7:4D:4E:30:73:2C:5D:01
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/ZQgVOtlKeyFC38M2101OMHMsXQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1d:3e:0a:0d:2d:6c:71:30:79:24:19:ca:41:b0:90:6d:b0:
ee:63:e8:38:ee:e1:93:21:a9:90:9d:a2:29:2a:d5:85:b1:3c:
4d:4c:b0:e1:f7:11:7d:28:2e:34:83:10:03:d5:bb:0a:d2:06:
ec:da:ca:bb:4f:e9:aa:98:5d:cc:70:15:7c:f5:df:82:c1:c3:
57:40:9a:b9:84:71:9b:06:ce:42:2c:53:e3:f2:16:e8:aa:da:
9b:0b:a3:ee:59:7f:50:c7:db:dc:8d:b1:2e:c8:37:98:76:af:
03:fa:f2:83:de:d4:26:df:15:88:51:31:0f:63:93:b1:dc:4e:
5a:99:67:5f:34:2b:a3:06:49:18:eb:9d:fe:6d:bb:82:58:b6:
2b:5c:bd:09:58:b5:ef:c5:bc:30:bc:f7:99:f2:eb:4f:36:bc:
74:85:60:59:f6:1c:e4:a6:b3:a5:23:ab:72:7f:a8:91:25:68:
62:ea:86:d8:cf:66:d3:bd:04:08:5d:50:b7:7a:82:85:d4:9e:
4b:ba:56:b8:68:46:a2:17:a9:68:e1:ca:66:d9:64:c9:92:0e:
70:06:c1:af:fa:4f:83:5b:32:1b:e8:99:86:77:f9:58:38:45:
6f:a9:54:66:5a:4e:85:fc:19:91:31:97:0a:55:f4:13:da:f4:
2b:3f:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:34 2025 by rpki-client