Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/vzi2ND9ZHZxuU7DOjrTynq5BjcA.roa
File: vzi2ND9ZHZxuU7DOjrTynq5BjcA.roa (raw, json)
Hash identifier: qk3ii9Wx3KAVkAnNyeGB7Kxtq54tZ1A04A7fq6ABagI=
Subject key identifier: BF:38:B6:34:3F:59:1D:9C:6E:53:B0:CE:8E:B4:F2:9E:AE:41:8D:C0
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018CE0DA8CC92D03E693513791E655780108
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/vzi2ND9ZHZxuU7DOjrTynq5BjcA.roa
Signing time: Sat 06 Jan 2024 22:17:48 +0000
ROA not before: Sat 06 Jan 2024 22:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216091
IP address blocks: 185.21.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e0:da:8c:c9:2d:03:e6:93:51:37:91:e6:55:78:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 6 22:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf38b6343f591d9c6e53b0ce8eb4f29eae418dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:34:ce:5a:3f:96:a3:53:4e:3e:8a:10:37:
31:b9:25:9c:d4:4e:36:bc:1d:a6:e7:45:ac:73:cd:
96:3a:8d:ae:f8:9b:bb:62:1f:13:91:67:08:95:77:
df:16:56:9a:04:a4:ce:b9:cd:66:0f:d0:ba:23:3e:
e5:7a:73:f2:ed:08:3b:05:a7:b1:ab:f5:c8:58:6d:
69:69:58:1b:c7:2a:6f:43:73:41:35:d1:a5:8e:3f:
41:cf:07:aa:b4:e2:ba:a1:a5:60:14:b6:42:0f:e4:
23:5c:e0:a2:1b:57:25:9b:12:a8:d8:96:71:eb:f7:
7d:2e:5a:30:81:04:9b:4c:b8:3a:d6:9e:56:b6:77:
6a:be:9e:56:54:5e:7e:50:0b:e7:f8:97:87:fe:f2:
71:45:6a:88:19:13:67:33:a3:14:9e:db:b9:3a:19:
c1:ed:cd:c4:86:80:54:df:5e:24:42:ad:a1:c8:fb:
12:cf:f4:af:cc:de:f3:c1:a4:f1:64:83:88:bb:6c:
c8:e0:7f:f1:20:84:e0:a9:e6:ca:43:9f:5e:76:1f:
3e:42:ca:9d:1b:10:f9:df:09:f6:a2:96:ed:f5:58:
a5:59:16:d4:51:c2:14:c9:e8:81:8d:b6:77:d4:e3:
7c:51:77:f4:43:0e:38:0b:2e:2d:90:a8:ca:42:dd:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:B6:34:3F:59:1D:9C:6E:53:B0:CE:8E:B4:F2:9E:AE:41:8D:C0
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/vzi2ND9ZHZxuU7DOjrTynq5BjcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d5:34:dc:5d:9b:85:cf:00:38:06:bb:bd:6b:e6:5b:f3:8b:
3b:12:41:46:39:aa:84:55:4f:d0:4f:a6:63:ca:91:88:7f:bc:
e7:c0:8c:49:2f:35:1d:aa:eb:f8:c8:44:c7:91:3d:d9:97:e6:
41:44:83:fd:36:d1:8e:a6:a6:87:f0:d1:5b:73:5f:13:a1:63:
a3:be:d8:5d:40:1f:20:43:ce:91:6f:8e:63:e4:0c:f9:cb:30:
e9:26:b1:92:60:59:e0:37:f0:e7:62:26:e4:7e:14:af:a2:76:
12:53:4b:9b:38:3d:de:4a:91:22:46:29:82:68:b3:a6:6b:d9:
07:ad:9c:be:8c:c6:2d:8d:d2:d8:bf:54:25:70:67:b5:f7:c7:
4f:54:36:ba:d8:e3:e5:c9:12:2d:b3:38:4d:2b:9b:93:89:0a:
e0:8e:19:8e:60:00:ab:70:24:4b:26:ef:bc:3e:59:ba:ee:12:
9a:74:53:24:9f:77:3b:00:10:13:58:1c:08:5c:d8:25:dc:02:
25:5c:11:d1:78:f3:a0:b5:66:d7:8d:29:ae:ea:51:bf:97:af:
cc:a2:86:9d:a4:83:b3:e6:84:ce:fb:3a:dd:aa:86:7d:e1:cd:
49:88:f5:b0:51:36:46:40:a5:10:72:fe:2d:91:6c:c9:34:be:
e4:12:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:53 2025 by rpki-client