Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa
File: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (raw, json)
Hash identifier: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=
Subject key identifier: 67:AA:77:31:BD:D7:BB:1A:1F:CB:66:77:A7:7B:AE:02:06:1E:BE:FD
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 019422203BABFA9C2E96E59684434880BC69
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204389
IP address blocks: 178.218.192.0/24 maxlen: 24
185.250.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:ab:fa:9c:2e:96:e5:96:84:43:48:80:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67aa7731bdd7bb1a1fcb6677a77bae02061ebefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:c5:9b:bd:66:33:5e:50:84:26:84:c3:87:
d9:5d:99:df:9a:30:ba:3c:0a:37:40:8f:10:12:9a:
5a:2a:04:db:c1:1d:30:69:f3:00:0a:b8:dc:b6:98:
de:5e:98:30:d4:c8:dd:a9:91:6e:7d:77:fc:6b:ed:
87:a2:1a:a1:c5:16:9b:be:87:38:b3:87:40:6d:88:
f6:e4:1a:03:a4:87:69:13:96:e7:a1:5d:12:e7:6c:
36:08:84:b1:d4:90:1e:15:2d:cb:5b:44:ce:e0:70:
84:c3:8c:dd:37:55:f8:52:d7:74:bb:41:dc:ff:db:
07:85:94:ee:95:a2:0d:a5:9c:de:21:18:93:ed:12:
ad:31:35:68:08:2f:a0:f7:9f:7a:72:56:58:44:13:
18:5d:12:8f:73:fb:c2:51:35:d4:76:ec:31:11:1e:
d9:02:48:f8:69:6d:9a:b7:b3:4d:27:fd:0a:08:87:
fa:c3:c4:67:5f:69:69:d5:ab:b0:5a:7e:50:56:72:
70:b6:e0:9d:a6:59:11:a4:bd:de:5c:80:32:5b:f1:
ff:c4:df:26:51:3c:42:b7:00:74:9e:08:3a:49:7b:
a6:ad:20:bf:96:80:5e:8a:42:40:d6:5e:68:1f:d6:
49:7f:e9:fd:8c:5e:e3:2f:06:cb:84:45:44:9b:07:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:77:31:BD:D7:BB:1A:1F:CB:66:77:A7:7B:AE:02:06:1E:BE:FD
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.192.0/24
185.250.140.0/22
Signature Algorithm: sha256WithRSAEncryption
11:6c:12:4d:2c:01:07:4b:d5:97:36:5b:f7:c6:21:f4:8e:80:
d9:57:47:d6:6b:5e:6c:18:86:63:66:e6:7a:9b:89:d5:43:27:
ce:2c:f1:a8:61:ff:e7:e7:dc:43:63:8a:5e:21:d7:23:a3:b7:
49:df:d1:e9:e8:af:69:af:70:cb:bb:f5:35:4a:19:58:f1:9e:
17:56:2a:cd:ae:7d:37:f7:9e:99:cd:8a:9d:a7:73:3e:98:2e:
97:46:2f:5c:a3:d9:85:3e:ae:fb:23:74:84:82:d7:61:fc:35:
85:8a:d6:11:7c:94:b7:ca:57:f4:d4:ea:b6:e4:af:b7:71:10:
83:92:30:b6:34:0d:f9:e2:fa:84:17:35:7c:58:9b:0e:f6:24:
7c:80:7b:3d:34:28:64:7b:40:9b:6e:49:bb:e3:aa:4a:a6:bb:
f7:03:8c:f6:f0:36:c4:98:43:3f:1c:a9:b6:9a:3b:94:b4:d8:
44:d4:93:7d:d8:d3:9e:b3:fc:a9:d8:3c:71:86:0d:04:32:e2:
d2:7d:4f:36:c6:3b:04:b1:fc:6b:17:1a:80:2b:17:85:94:89:
77:4c:6c:83:73:ad:7f:13:3e:6e:ed:cb:a6:0d:f2:e6:fc:19:
11:0a:f1:2c:b1:ac:81:24:02:97:e3:3e:f6:ad:87:0c:e6:e9:
2e:89:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:09 2025 by rpki-client