Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa
File: zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa (raw, json)
Hash identifier: U60yO0QiVT0TF3gZ30RzvO8zoPaRPZA/6UejA6WGNuM=
Subject key identifier: CC:B4:81:6B:F2:E9:73:85:B7:5A:DC:2A:AF:88:D8:D2:C8:6A:37:CE
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 01941F8C78A7F901C08E8903967D96353CD9
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47787
IP address blocks: 176.221.32.0/21 maxlen: 32
185.99.232.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:78:a7:f9:01:c0:8e:89:03:96:7d:96:35:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb4816bf2e97385b75adc2aaf88d8d2c86a37ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:d7:19:df:56:2c:e9:67:4a:de:2f:73:38:
70:9f:f3:b6:ef:49:c2:b8:34:31:87:03:94:07:c2:
15:5d:f1:09:85:ef:2a:b5:8b:7f:6a:57:11:68:5f:
0f:6f:50:13:8c:dc:98:32:96:0a:51:0e:fd:37:b1:
40:6b:ef:93:71:68:ab:f5:00:6b:59:8c:34:bd:4e:
d7:2e:bf:13:6e:9c:c5:5e:e8:04:42:a7:2c:bc:5d:
ab:60:31:3e:39:cf:2b:f0:4f:a4:1c:ef:37:a5:2f:
5b:45:57:19:0b:4e:6c:4b:40:45:61:f9:06:4f:46:
8d:f0:22:8f:ec:33:b3:0c:d6:7f:54:9a:82:6a:15:
8b:dd:25:cb:9a:ee:84:b7:b8:4c:ee:f2:20:6e:c1:
8c:c4:c6:5e:d6:b4:93:9e:39:dc:86:64:cf:42:da:
44:ab:66:ac:1e:30:6b:ec:da:27:92:eb:8d:71:77:
23:ae:07:97:bb:a8:e3:d0:39:03:44:ac:68:0b:a9:
a3:bb:f1:69:3b:8f:d5:d6:0c:73:d7:29:60:5c:ed:
31:39:96:6d:3b:e7:ea:8f:8f:da:99:a5:88:5b:65:
b0:d0:0e:37:f1:4c:a2:13:b9:5c:2d:d0:08:4e:c4:
c9:6e:36:7d:48:a8:20:95:88:4c:54:44:77:2d:42:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B4:81:6B:F2:E9:73:85:B7:5A:DC:2A:AF:88:D8:D2:C8:6A:37:CE
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.32.0/21
185.99.232.0/22
Signature Algorithm: sha256WithRSAEncryption
77:38:09:42:88:83:86:42:41:1b:14:b2:db:4f:c4:a5:74:27:
29:73:87:2e:4e:26:37:0e:15:07:fc:1c:83:d0:b2:4e:15:41:
96:14:b4:08:87:ba:14:29:60:41:a9:dd:0f:7e:db:cc:1f:6c:
12:2c:3a:4f:58:44:56:52:8b:0f:55:5f:96:28:2f:ad:cd:66:
2c:bf:d5:f5:9d:28:24:90:b1:2a:18:13:1e:be:8a:0c:f0:08:
20:19:5f:8f:9d:bb:b9:92:c0:69:24:60:4e:2a:07:39:8a:5c:
04:55:c3:61:27:d0:ad:b6:87:af:93:bd:5a:1e:43:e5:78:b3:
9f:8a:a6:0e:af:59:9d:c1:b8:e3:84:5d:53:df:e7:54:b6:41:
26:a5:c8:d1:0a:74:7a:a0:67:82:ef:c2:20:98:fe:b7:8f:de:
c8:61:0c:03:a4:5f:39:51:c5:8b:c1:bc:5f:f4:e1:db:56:7b:
df:91:5c:ff:db:f2:4f:6f:d1:0f:6b:8b:76:5b:2d:2e:9d:05:
f1:c5:11:f1:c9:85:30:6b:1c:54:43:be:b3:9f:c8:f6:ce:c2:
d0:ff:38:8c:49:4c:12:3e:42:10:b8:38:ea:e3:ac:34:72:a9:
ac:aa:a5:be:cd:96:da:77:0b:8d:23:2e:f0:b8:72:b0:a0:41:
ce:f3:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:29 2025 by rpki-client