Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZX0WX4b-Hjh4YnYfKoIc4bGhvOs.roa
File: ZX0WX4b-Hjh4YnYfKoIc4bGhvOs.roa (raw, json)
Hash identifier: ZH5LyfYG15z5SMHgGgUurmey9pWhdccJC1ZbVfs/kF4=
Subject key identifier: 65:7D:16:5F:86:FE:1E:38:78:62:76:1F:2A:82:1C:E1:B1:A1:BC:EB
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FDF5B35F2562E27FFE608B3A8BAE
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZX0WX4b-Hjh4YnYfKoIc4bGhvOs.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 92.243.74.0/24 maxlen: 24
92.243.75.0/24 maxlen: 24
109.120.153.0/24 maxlen: 24
176.98.190.0/24 maxlen: 24
176.98.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:f5:b3:5f:25:62:e2:7f:fe:60:8b:3a:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=657d165f86fe1e387862761f2a821ce1b1a1bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:2f:8f:22:6d:fe:a9:11:28:f5:83:1e:4b:
22:53:30:b4:4d:e8:e4:3d:4c:ba:70:ce:93:4f:08:
1a:52:08:c6:ad:d2:45:46:3f:44:aa:9d:da:f0:30:
7d:53:af:10:23:8c:e3:56:6f:3d:eb:3b:63:87:a2:
00:a1:49:c1:5e:8c:7b:05:90:4d:fb:a5:6c:00:21:
4e:ee:58:b0:04:b6:33:01:0a:d7:ef:8a:66:f0:e5:
f1:25:68:ee:33:cb:bd:d5:32:c7:c7:64:ec:e8:74:
eb:2e:5e:93:56:47:b6:07:ac:c1:02:f3:fd:b4:f8:
f2:c2:8b:b2:96:ea:e4:41:e9:a9:9e:cd:58:57:bf:
1d:3a:90:be:db:4a:27:67:50:e3:9e:ef:b7:f9:a8:
0d:cc:08:98:ab:73:04:dc:dc:17:b6:2a:56:05:a9:
c0:97:40:eb:7a:70:e3:e3:41:9d:02:ff:1e:ae:9f:
68:1b:31:33:c2:11:eb:79:d8:7b:9a:9b:a7:4e:ba:
af:38:65:79:2e:ed:b3:e7:39:00:ff:c6:1d:cd:30:
3f:0c:72:95:89:10:59:27:ec:ed:59:a1:82:31:c3:
f6:14:d5:c3:f1:73:e8:f2:2b:ae:95:4d:4c:2d:8f:
78:1c:5c:88:8e:b7:cb:69:87:df:65:7d:fd:5f:39:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:16:5F:86:FE:1E:38:78:62:76:1F:2A:82:1C:E1:B1:A1:BC:EB
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZX0WX4b-Hjh4YnYfKoIc4bGhvOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.74.0/23
109.120.153.0/24
176.98.190.0/23
Signature Algorithm: sha256WithRSAEncryption
80:7f:4e:05:b9:c4:10:58:d4:2e:f2:ad:d8:44:4e:ef:52:83:
f5:c3:49:58:71:71:81:84:ed:83:92:3d:41:e9:a0:8a:a2:0c:
53:46:de:6d:d8:d1:09:2e:02:fb:ea:b9:9e:cf:7d:c0:7c:77:
8b:06:24:a0:a1:6d:37:5e:b4:fa:64:47:12:07:5f:b3:8c:1c:
b4:53:c4:e0:53:26:ae:e7:99:cb:0c:fc:25:c8:91:95:3d:41:
2d:31:8f:b0:02:e5:47:69:b8:a9:be:fe:03:80:eb:2f:06:bb:
b1:9d:06:00:21:e7:9d:33:86:5a:4b:21:57:70:e9:c4:9c:f3:
1a:79:29:32:af:22:95:f6:bb:52:89:e3:b5:3f:7a:38:e8:5b:
e5:ba:67:22:39:0e:f4:6d:5f:6e:a8:22:52:18:d7:60:e7:35:
16:c7:64:40:5e:9b:04:bc:d0:a5:c0:4a:05:3f:2f:b7:b5:09:
76:08:98:26:46:2e:8e:ad:f2:34:03:9d:31:05:7b:16:6e:c1:
44:48:c2:44:db:90:c9:ed:81:4c:0a:32:03:1c:d6:8a:0e:b5:
0b:d7:9d:0d:29:6e:e8:15:48:1b:fc:53:55:0b:e2:ed:01:f7:
c8:ce:70:ed:71:87:43:f9:f9:fe:1e:76:b9:e2:f8:6d:a4:3b:
c4:31:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:31 2025 by rpki-client