Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/Zgc-Bdhjlke2w_tfXyl3MsEipXc.roa
File: Zgc-Bdhjlke2w_tfXyl3MsEipXc.roa (raw, json)
Hash identifier: AT2c0Spo4PZ85IGMZHOrkZHuumaXr6MO49zGUuv4CxE=
Subject key identifier: 66:07:3E:05:D8:63:96:47:B6:C3:FB:5F:5F:29:77:32:C1:22:A5:77
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 0194221FC1019AEABD64D8685EB2A8FBC8D1
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/Zgc-Bdhjlke2w_tfXyl3MsEipXc.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8244
IP address blocks: 195.230.192.0/22 maxlen: 22
195.230.200.0/21 maxlen: 21
2a01:ac40:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c1:01:9a:ea:bd:64:d8:68:5e:b2:a8:fb:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66073e05d8639647b6c3fb5f5f297732c122a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:1c:ba:e7:49:57:12:b5:ac:fb:b7:47:00:
9a:2f:ff:a9:5c:7c:22:29:06:b0:71:f0:db:e7:57:
ff:8c:15:06:68:a3:41:de:72:05:cd:79:41:db:39:
c5:67:dd:3e:d2:7f:b4:c3:16:c3:28:a6:12:c7:34:
b7:2c:9c:66:df:6f:7d:83:b4:05:49:ec:e1:79:55:
29:d4:7f:65:b1:af:fc:a5:e5:6d:76:91:b7:69:48:
d6:c5:01:e5:b3:e5:66:38:f9:6a:71:2f:5b:3d:f9:
40:9f:12:ec:54:b9:98:ae:b9:a7:95:6a:62:c2:a6:
11:60:56:2e:90:52:ee:9b:87:4d:2a:90:16:3e:f1:
24:00:f0:9f:d1:e8:a2:95:df:3b:d5:c7:39:2a:25:
98:00:b1:87:53:0a:e4:51:db:7b:49:fd:c6:fd:86:
f4:8a:72:70:7a:23:6a:9d:9a:b5:34:20:8f:43:84:
f8:7d:4e:8d:44:0f:3b:85:0e:ef:1d:6f:5b:80:85:
04:f1:1b:f8:5b:27:55:c3:c2:ba:86:c3:20:22:7b:
42:a4:f5:44:73:2c:56:5a:64:53:e4:c9:7b:69:62:
dd:0e:68:0f:fb:e1:e8:ba:46:04:2b:d8:ea:46:16:
e6:ad:17:7f:a8:5f:90:8d:f1:26:80:0e:c0:f9:d3:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:3E:05:D8:63:96:47:B6:C3:FB:5F:5F:29:77:32:C1:22:A5:77
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/Zgc-Bdhjlke2w_tfXyl3MsEipXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.192.0/22
195.230.200.0/21
IPv6:
2a01:ac40:2000::/36
Signature Algorithm: sha256WithRSAEncryption
15:c9:e5:f0:cb:37:51:9e:42:5c:74:86:f3:ec:2e:cf:b0:5c:
fa:20:5e:00:68:81:32:93:30:bf:b9:e7:5b:18:d9:af:f5:f2:
dc:05:0b:d2:7e:f0:94:a8:2f:87:dc:58:9d:61:c7:64:8d:32:
09:ce:f9:79:89:54:bf:fc:3a:3f:6c:2c:05:7c:e6:7d:98:f4:
57:b6:ca:79:c2:d3:d4:23:38:d3:53:7b:9f:4e:1a:32:1a:7c:
b0:ae:04:47:26:64:71:f8:64:ad:2c:eb:9e:ee:c1:c3:2f:53:
ba:ab:9f:b3:a5:b1:34:b1:8a:d7:8e:44:1a:67:1c:a7:f9:af:
fb:02:8f:a2:bd:1f:c4:3a:1a:25:da:a8:90:82:12:65:b0:fa:
9b:ba:26:2d:8c:47:c2:8d:0f:57:8c:9c:b4:d6:48:3e:14:4f:
ec:4f:36:9c:22:3e:74:fb:a5:79:fd:88:c9:9e:aa:36:3e:8b:
81:94:35:70:1e:38:28:ea:9e:71:ad:91:1e:93:fa:95:75:9b:
e7:b3:d0:85:51:12:b7:d9:4a:2f:58:e6:1c:fc:ad:f4:68:f1:
79:e9:7a:e5:ad:68:ad:90:1b:20:80:df:86:19:a9:89:cb:5e:
da:a8:d1:e3:e5:b1:f0:0f:c8:9d:26:f4:a4:22:8b:96:53:e0:
87:2b:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:12 2025 by rpki-client