Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zBB80tlDlWdUGM0XNThH3proqVk.roa
File: zBB80tlDlWdUGM0XNThH3proqVk.roa (raw, json)
Hash identifier: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=
Subject key identifier: CC:10:7C:D2:D9:43:95:67:54:18:CD:17:35:38:47:DE:9A:E8:A9:59
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6EA54AFF278B317A383767B18A61
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zBB80tlDlWdUGM0XNThH3proqVk.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 185.179.218.0/23 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6e:a5:4a:ff:27:8b:31:7a:38:37:67:b1:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc107cd2d94395675418cd17353847de9ae8a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:e9:65:1a:0b:f5:45:6c:d2:5e:6e:f3:2b:
f1:5a:3f:f2:1e:51:37:6c:8c:12:dc:0e:a2:f0:56:
c2:32:f1:df:50:df:f0:25:c3:a3:43:84:12:7f:6e:
07:0b:69:ab:f3:bc:ac:7c:19:c7:da:0d:66:e9:77:
8f:53:2e:32:6b:f5:e9:36:e5:2b:58:f7:67:70:48:
4e:ab:5f:1b:3f:9e:42:b4:76:41:77:1e:a1:78:fb:
f1:15:df:1e:d4:1d:2d:dd:62:f7:6e:49:15:74:06:
c8:41:fd:dc:d4:6b:fd:3b:7e:74:5f:1d:27:9a:35:
30:29:c3:54:f5:1a:7f:a9:c8:52:99:d5:d9:94:f6:
c3:b1:59:70:ba:09:77:c8:6a:c2:38:b0:9f:d0:4d:
2b:24:0d:4a:71:83:01:66:de:11:f3:59:d8:e3:50:
2e:a2:ee:de:cc:0c:97:36:04:b8:da:0f:28:d9:53:
06:d7:4c:1c:64:7b:89:5e:e0:1e:c4:55:0b:3f:4e:
64:97:89:a2:6b:13:ca:1a:51:8f:ae:b5:a8:a4:67:
ee:74:ec:80:77:b6:c1:e7:20:f7:24:d4:36:e2:7d:
57:78:8a:d6:71:48:b2:56:ee:d0:04:c2:dd:32:2c:
3e:36:cc:37:02:7b:44:7b:6a:4b:0f:da:14:bc:a0:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:7C:D2:D9:43:95:67:54:18:CD:17:35:38:47:DE:9A:E8:A9:59
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zBB80tlDlWdUGM0XNThH3proqVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d8:f1:8e:e9:8c:7e:0c:4e:ed:6f:54:69:98:6a:73:10:dc:
71:3d:ed:27:8c:12:0d:a4:41:0f:fe:7a:10:1a:e0:5a:e2:c7:
30:1f:8c:09:de:04:f8:d4:41:fd:69:3a:e3:2b:cc:7d:a8:4e:
93:32:2c:81:8a:7a:22:c0:9a:58:45:c3:ae:94:f0:fc:48:7c:
3a:ee:29:d1:43:b5:2a:62:09:86:be:db:9d:b9:9d:c0:f4:58:
7e:44:80:7c:88:b5:cc:eb:b8:20:cb:39:4c:aa:16:c1:27:23:
4d:73:1b:3e:d9:bb:d2:8c:8e:05:b0:dc:14:a9:5e:36:31:00:
7f:67:27:05:18:2c:d6:a1:85:1a:5e:51:43:5f:34:22:08:49:
6f:29:d0:b3:3c:a1:ba:f1:d6:ea:36:cb:c4:16:77:b1:43:46:
ae:23:18:6b:e5:8b:61:e3:e6:01:fd:7d:a2:f3:90:74:05:c9:
e7:11:3c:96:2c:c9:52:fc:61:cd:b4:d6:3a:8c:22:80:bf:85:
2f:69:cd:50:17:e6:71:34:42:83:5e:8a:70:bc:fa:e5:2f:f5:
8e:1a:1c:b9:ff:99:37:37:1b:40:19:13:be:31:9e:bd:07:4f:
07:1e:bc:fa:03:7b:b0:08:37:82:2c:b3:2b:8a:ca:db:96:f2:
78:df:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:14:54 2025 by rpki-client