Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/ZrBT-LTKncMhVmd9eNZtlw1O86k.roa
File: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (raw, json)
Hash identifier: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=
Subject key identifier: 66:B0:53:F8:B4:CA:9D:C3:21:56:67:7D:78:D6:6D:97:0D:4E:F3:A9
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 0194266AE8BA1FAACF64E191D52CAD8524ED
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/ZrBT-LTKncMhVmd9eNZtlw1O86k.roa
Signing time: Thu 02 Jan 2025 09:48:48 +0000
ROA not before: Thu 02 Jan 2025 09:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44478
IP address blocks: 194.48.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e8:ba:1f:aa:cf:64:e1:91:d5:2c:ad:85:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Jan 2 09:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b053f8b4ca9dc32156677d78d66d970d4ef3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:a4:95:af:6a:f8:00:b6:8a:02:07:b2:01:
4f:31:12:3c:4d:6f:be:8d:3d:8b:06:b3:b6:46:58:
c9:4e:fc:b0:67:39:1a:40:ed:83:08:d9:51:4a:ba:
35:3c:b0:84:47:a8:41:33:9c:7c:a9:ea:12:bc:a3:
b8:29:ed:c8:3c:2e:1f:5b:f3:fd:1c:fe:1a:1d:9e:
12:63:7f:f7:76:01:a6:79:ab:29:8e:09:ef:0e:79:
53:cd:00:09:aa:b7:23:52:e4:80:69:c7:91:3b:b7:
46:bf:b9:c7:fb:77:07:0e:d4:e7:30:fa:62:24:18:
0d:95:d4:04:d0:e9:33:6d:ff:c8:d6:42:55:8d:41:
e3:15:ec:6a:58:32:51:18:60:df:f8:d3:2c:f3:b8:
4b:d8:ed:6b:33:0c:53:cf:5b:1c:31:a7:ab:48:6f:
90:14:cc:8c:cf:71:ac:e8:22:68:62:41:90:12:2c:
1c:44:9f:7b:e6:2e:d9:ea:c8:d6:dd:e4:77:fd:c3:
84:71:d5:92:24:33:fa:ed:07:4d:86:a2:b6:c0:a5:
1c:ed:4e:64:86:07:07:77:d7:0c:46:93:d6:81:ad:
33:28:4a:c7:7e:b6:83:b2:d9:2e:9e:36:bc:57:31:
6f:c2:10:7e:c8:01:68:6e:24:a5:82:cb:59:e3:44:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:53:F8:B4:CA:9D:C3:21:56:67:7D:78:D6:6D:97:0D:4E:F3:A9
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/ZrBT-LTKncMhVmd9eNZtlw1O86k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.218.0/24
Signature Algorithm: sha256WithRSAEncryption
67:57:9f:29:fc:8f:db:bb:d2:07:df:7a:1a:65:d7:17:7b:79:
6b:44:a6:ad:e2:2e:3a:f2:63:74:95:79:8d:b1:6d:06:5b:74:
0c:eb:95:9d:41:ad:09:f7:7b:a5:72:e2:6e:c3:10:34:8c:b7:
11:30:d1:43:ed:6c:f5:cd:ec:98:eb:68:29:e0:f6:28:3c:c6:
9a:33:c0:a5:ea:b1:d1:6d:07:66:0f:c2:38:36:5c:ea:de:56:
9e:30:ef:00:da:1b:7d:0c:1b:93:d4:6d:c1:92:b8:e4:7b:b6:
b3:ef:b6:c5:ef:51:d5:af:2e:b1:3f:f3:2c:ad:80:ca:e6:76:
5b:9c:85:e4:fb:d2:ab:3e:77:fb:c8:c8:8e:fd:2c:bd:c1:99:
55:3a:fc:c7:52:8a:3e:a2:77:be:ba:ac:41:e8:33:70:83:17:
9b:c4:83:60:6d:7d:40:6f:42:6b:f4:92:5d:b6:14:ed:e4:5c:
0b:ac:c8:4e:58:c7:77:d3:cf:66:af:dc:c8:79:55:94:38:51:
01:1e:35:95:a1:06:f4:3d:90:0e:a7:69:2b:95:e3:85:c9:6c:
0d:64:b6:5c:22:2b:53:54:51:9b:5a:8b:db:34:a4:5c:a6:00:
af:95:37:6c:bf:89:57:48:5a:10:09:b9:03:9c:3e:db:8b:72:
d9:58:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:16 2025 by rpki-client