Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/zQrSyIjUHwJboP1xxZbE_ExqSB4.roa
File: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (raw, json)
Hash identifier: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=
Subject key identifier: CD:0A:D2:C8:88:D4:1F:02:5B:A0:FD:71:C5:96:C4:FC:4C:6A:48:1E
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019423D6AF30CF1BA25E8D4E25815122B592
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/zQrSyIjUHwJboP1xxZbE_ExqSB4.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43108
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:30:cf:1b:a2:5e:8d:4e:25:81:51:22:b5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0ad2c888d41f025ba0fd71c596c4fc4c6a481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:da:cc:ec:d0:73:8e:eb:c3:8c:dc:63:09:
52:1e:56:a9:4e:da:97:42:71:9a:f8:ff:96:a0:d1:
89:0d:c7:b7:67:ea:78:b5:3b:e1:56:05:90:0a:38:
f6:12:e0:bf:67:2b:a2:40:91:df:8c:c0:c3:c2:3d:
8b:e2:4d:16:d2:a6:3e:30:1b:d0:d0:73:22:91:31:
12:76:c3:23:3c:1d:cd:70:79:00:79:9d:2f:80:0d:
23:53:59:0c:22:7f:7a:aa:db:a7:b1:82:72:2f:f0:
c8:0a:25:67:56:72:3d:52:8c:1d:bd:20:35:ae:3f:
1b:23:25:ed:34:7e:4b:ea:08:f3:2f:ba:50:67:11:
59:a1:f2:13:c4:21:8f:ba:2a:a2:11:67:57:64:57:
36:1a:2a:26:95:6e:73:5b:52:01:41:6b:1e:d5:05:
ae:98:ba:f5:56:35:7e:df:d6:3d:99:35:b9:76:37:
61:d9:dc:3d:08:c3:25:06:e4:2f:73:fb:1f:8e:dc:
5e:55:5a:87:6d:ec:7f:c4:d5:8f:0c:27:52:25:50:
a1:90:c3:51:bc:8d:3b:82:31:d1:5f:6d:84:52:29:
d7:87:0c:06:08:56:50:f8:0a:ea:34:60:3b:a0:0e:
4b:85:20:a2:2a:28:5b:81:62:bf:b7:73:f2:81:1d:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:D2:C8:88:D4:1F:02:5B:A0:FD:71:C5:96:C4:FC:4C:6A:48:1E
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/zQrSyIjUHwJboP1xxZbE_ExqSB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
90:df:43:6c:a5:3b:67:1f:f6:79:2f:59:27:48:1a:dc:dd:11:
8b:27:4a:69:d9:22:15:af:cf:42:4d:f0:8e:17:39:b8:40:eb:
e2:c9:79:57:4e:ba:67:71:d1:6f:17:78:f1:2d:14:4e:74:06:
f1:80:a9:a1:0f:ef:b2:96:7b:ad:3d:8d:49:2a:2e:61:98:0e:
6f:9b:41:6a:cf:38:65:25:16:8c:26:79:90:a9:40:60:8e:01:
96:0c:72:78:ff:51:dc:85:e7:bf:31:1b:27:f4:f1:0e:fc:5b:
b1:6f:3d:5d:c2:cf:3b:49:78:a8:34:7c:90:92:d0:ca:dc:7a:
fe:dd:4c:db:a2:8a:0b:e0:88:d2:c5:e1:77:93:ed:40:ee:00:
13:3b:91:d3:49:7b:0c:71:ff:ca:b4:0a:b0:21:b4:b7:57:2b:
1a:1f:dc:7b:35:d3:17:16:bc:fb:e6:a0:5e:90:d1:08:5a:4e:
38:c5:67:d7:5f:9b:4c:d3:55:04:6c:a6:f2:d1:aa:ba:78:ab:
55:cc:c9:fd:22:15:4d:80:48:7f:5b:e5:fb:30:41:31:60:14:
27:ea:f0:42:68:80:c2:bd:87:31:44:ad:be:11:ea:ba:e3:ab:
6a:33:53:fd:c5:3c:cf:1e:d4:8a:87:e7:99:1a:89:69:ee:f2:
01:83:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:47 2025 by rpki-client