Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/zYg006i-1WUWweE30u-SYPbT9Pw.roa
File: zYg006i-1WUWweE30u-SYPbT9Pw.roa (raw, json)
Hash identifier: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=
Subject key identifier: CD:88:34:D3:A8:BE:D5:65:16:C1:E1:37:D2:EF:92:60:F6:D3:F4:FC
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0194228E43731AE6C303441BF963C258392C
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/zYg006i-1WUWweE30u-SYPbT9Pw.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215488
IP address blocks: 188.214.224.0/24 maxlen: 24
2a14:4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:73:1a:e6:c3:03:44:1b:f9:63:c2:58:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd8834d3a8bed56516c1e137d2ef9260f6d3f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:0d:f3:de:24:12:ac:fe:05:ec:02:98:ff:
81:ed:8a:f8:eb:68:81:ef:c4:1d:ca:ed:96:bf:d4:
47:7b:30:36:e4:f2:8b:c5:48:b5:ed:1e:f6:93:af:
ff:a3:ce:42:b1:95:26:50:85:67:e2:88:6b:6d:12:
89:ca:1e:0f:b2:fb:d6:08:85:14:2c:8b:03:80:54:
10:de:8a:67:e2:3e:9c:d9:9e:7c:46:00:c5:d2:de:
18:83:13:2a:32:9e:e5:02:f7:f8:0e:a4:9a:37:0a:
4c:a7:51:a0:8b:a7:e9:f0:c7:7b:ba:69:55:77:26:
cc:6b:8a:3f:51:62:1a:a2:ff:b9:56:68:dc:58:c5:
44:0e:aa:fb:2c:3e:da:54:e0:a6:43:8f:68:6e:09:
95:aa:1d:ba:ca:55:11:dc:5e:81:b1:50:1b:cb:2b:
73:f4:b7:2c:c9:1c:c1:5d:ba:2b:03:a9:51:e9:1c:
36:62:41:f2:3d:89:04:1a:15:5c:a7:ca:c3:ee:e6:
a6:6b:c6:87:48:21:fe:c8:42:ba:e2:eb:82:40:95:
24:80:8f:c7:27:fb:21:43:ce:57:84:61:15:fa:15:
c5:e3:97:c2:90:fb:dc:27:97:cd:6d:67:ab:85:44:
5a:14:3e:a9:fb:8e:51:fb:e4:13:37:91:27:ca:7d:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:34:D3:A8:BE:D5:65:16:C1:E1:37:D2:EF:92:60:F6:D3:F4:FC
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/zYg006i-1WUWweE30u-SYPbT9Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.224.0/24
IPv6:
2a14:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
51:bd:64:b5:7f:11:eb:be:e4:d5:94:af:1b:6e:de:e1:76:08:
18:9d:c4:70:b3:7c:5c:3c:d0:37:0c:1e:73:c6:05:48:f0:d2:
5a:a8:87:fc:cd:72:63:40:ee:bc:6c:88:ae:f8:3c:6a:f3:8d:
32:d4:fd:5c:a4:17:38:e6:4f:43:b3:86:da:cf:6e:19:ae:ce:
c8:cd:be:e1:0e:99:5c:85:62:e0:c9:b1:8c:f8:62:34:d5:f6:
dc:75:cd:39:e4:f5:6b:68:02:67:41:61:38:c2:26:b6:01:7a:
da:00:03:1f:4a:dd:50:17:dc:f0:7f:dd:cf:5e:09:68:21:62:
e9:84:8c:f0:47:a3:23:d8:34:aa:9d:2d:27:90:16:82:5e:38:
cf:42:81:d0:59:c8:a1:0a:c6:1a:b9:de:d3:8d:da:e0:a7:f6:
33:7d:9a:d1:d8:89:5e:08:93:08:3d:0f:7f:8e:31:2d:7e:33:
ce:79:ad:85:36:6c:a3:ff:b1:4a:69:36:e6:0c:eb:04:a1:5d:
be:f2:6a:fb:6e:4c:7d:15:17:f5:32:bc:37:af:42:a2:98:d4:
92:2f:96:b5:96:03:a5:73:c5:47:d8:8d:5e:3f:93:cd:cd:f1:
78:1c:ae:6a:8e:79:fe:12:1f:b4:90:c6:58:be:b1:d3:b5:99:
db:3a:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:25 2025 by rpki-client