Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa
File: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (raw, json)
Hash identifier: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=
Subject key identifier: 65:50:7B:C8:88:33:F6:96:CF:41:30:55:A6:CA:F0:A9:5D:D9:9C:48
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 0194252238AAE8E7F43E859787E45BB004ED
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214798
IP address blocks: 178.208.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:aa:e8:e7:f4:3e:85:97:87:e4:5b:b0:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65507bc88833f696cf413055a6caf0a95dd99c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:fd:7d:9d:f0:15:1c:32:f1:76:eb:2f:ce:
5c:6b:5f:f8:1a:42:d6:11:ce:93:ef:5b:e0:32:65:
33:95:24:29:71:62:c9:1e:6c:bb:f9:f4:9e:3c:56:
b0:98:d9:56:74:66:d7:47:8e:b9:95:48:35:8d:31:
9c:a2:bc:08:31:0c:0b:b0:f4:de:cf:b9:27:81:38:
18:85:bd:b1:a8:bc:35:93:73:07:4e:cc:a5:c2:d7:
84:84:96:39:10:ea:e4:e4:51:1f:1b:94:14:48:70:
e9:dd:e5:69:ad:59:93:7f:37:7e:4e:41:27:e5:0d:
ae:61:48:ca:c2:6e:d3:6d:93:a4:fc:66:b1:72:eb:
da:d3:3c:56:7a:14:e9:e5:b5:12:dc:49:fa:de:83:
08:d4:0b:69:68:2d:20:d2:07:3c:1c:6a:c9:64:37:
cf:cc:0e:10:98:c3:66:0a:9a:e6:6c:87:b6:b4:2a:
1b:b8:b2:91:29:a2:df:18:e4:43:29:0d:40:17:29:
99:07:68:b0:a2:d1:f7:e1:95:59:80:b5:b6:7d:98:
b3:f4:33:49:19:4c:97:16:c4:53:1f:02:72:4a:92:
dd:22:6d:d0:a5:81:53:e5:03:72:62:30:8d:8b:d2:
be:43:a1:28:36:cf:cf:41:4b:2e:10:ce:92:7b:63:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:7B:C8:88:33:F6:96:CF:41:30:55:A6:CA:F0:A9:5D:D9:9C:48
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:be:6e:c5:73:b2:35:d1:55:c5:73:70:be:92:6d:11:6b:98:
2e:db:81:70:de:ea:15:2a:5f:cd:80:03:62:b1:68:e5:dc:2f:
8f:74:da:4a:c0:2c:8f:26:fd:10:5d:fb:40:1f:2a:db:52:43:
d2:c3:68:d5:8f:55:f4:ed:f7:76:5a:83:32:53:4f:9d:f8:91:
97:5d:e7:09:65:1e:c6:d1:26:18:8e:9c:aa:45:1a:ac:3d:77:
53:53:1f:7e:5e:e3:46:17:ea:dd:e3:74:bd:f4:99:ab:5c:ea:
54:a7:58:e6:e5:27:53:1c:68:97:5a:6f:80:48:21:6c:5f:83:
aa:55:24:01:13:ad:f1:e4:0c:79:4a:d4:a8:6a:96:5c:52:90:
b2:dc:f3:e0:0b:f1:27:7a:35:98:f6:3c:c5:ae:5d:6c:8b:20:
d0:6f:65:11:1c:1a:0c:14:6d:44:6d:c5:f5:20:b7:43:9d:46:
18:41:b5:42:a7:e4:2e:5e:fa:1a:b3:f1:a4:56:3c:49:33:21:
31:cf:b8:3d:81:98:7c:d8:70:3a:46:29:cd:c0:dd:96:a7:37:
20:02:52:7f:c9:24:4b:0c:09:97:6a:8b:30:ff:b1:4c:c0:39:
c6:c7:20:eb:58:7b:c0:cd:5b:f7:1b:e9:e4:c9:d0:be:cb:d2:
d6:d2:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:40 2025 by rpki-client