Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa
File: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (raw, json)
Hash identifier: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=
Subject key identifier: 64:59:44:E0:2C:06:57:9A:17:BF:6F:28:EA:7B:2F:A2:56:65:23:F6
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019421439CAB3C49308AA5B5810B0FA429AF
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa
Signing time: Wed 01 Jan 2025 09:47:46 +0000
ROA not before: Wed 01 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.88.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9c:ab:3c:49:30:8a:a5:b5:81:0b:0f:a4:29:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=645944e02c06579a17bf6f28ea7b2fa2566523f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:75:94:85:51:7f:13:de:35:5f:02:d1:5f:
70:5a:21:ff:91:7e:16:63:80:67:29:3a:90:ce:d7:
61:5c:c8:35:17:6e:9e:93:d8:b2:0d:86:d5:52:8e:
d4:06:1d:65:b0:35:c6:75:fb:d7:bf:be:69:70:a4:
3b:f2:51:17:45:02:f1:de:a0:2b:8f:ee:ba:20:d3:
19:a5:b9:1c:8f:06:6c:ae:35:a8:41:bb:c5:17:15:
8d:7a:4e:e2:50:12:1b:63:32:f6:43:7e:e1:99:e8:
49:60:4f:22:b7:31:bb:78:1f:05:3d:04:85:56:9f:
22:f1:8d:ca:ff:2f:ea:5b:f9:d7:1a:e8:2f:7c:80:
9f:e1:22:16:a5:d7:55:65:d1:2f:5d:80:d8:88:ae:
53:ba:1f:58:fd:e2:40:77:86:41:83:52:89:fb:1f:
14:01:6d:ef:1e:1f:38:c7:e5:31:a7:6a:53:4c:8c:
16:38:a4:4b:25:c0:90:29:a4:29:f5:db:d2:ee:d0:
76:ca:56:fd:57:09:4d:5b:71:fc:37:a1:73:1f:29:
73:fb:8b:de:27:6d:9d:ac:3e:1b:2d:ae:17:f9:79:
a7:d0:a4:a8:31:ca:11:cc:55:e9:be:a8:ad:f7:d4:
19:35:1a:f6:83:87:11:59:fd:ba:5b:1a:80:28:f6:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:44:E0:2C:06:57:9A:17:BF:6F:28:EA:7B:2F:A2:56:65:23:F6
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
Signature Algorithm: sha256WithRSAEncryption
45:94:c4:db:34:58:13:72:38:07:dc:f2:19:15:d5:ee:9a:e9:
8a:c3:eb:db:cf:ef:02:c9:ac:32:7a:78:6e:39:bf:1c:79:92:
c9:4d:31:44:a5:41:1c:18:40:a3:3d:05:79:4d:64:3b:16:75:
91:a6:3f:1d:c8:dc:b1:d9:be:a5:3d:86:52:45:e6:3f:7d:8f:
01:a6:0c:1e:2b:b8:27:d3:8b:33:7c:ad:f4:a1:32:9b:06:70:
90:76:56:bd:0b:76:60:55:97:18:60:c5:f7:bd:ee:c4:0b:93:
c7:31:f3:a2:19:2e:07:6f:b0:fd:6b:1e:6a:09:be:07:ac:5a:
4e:11:ba:c2:15:7c:74:9e:99:30:06:2d:45:20:90:c7:a8:a8:
b0:ad:18:d0:fe:ab:6c:08:36:95:e9:dc:09:00:c7:5e:db:f0:
98:6e:c7:8d:dc:e6:ba:75:4a:ad:c2:d9:96:b3:68:ad:2f:7b:
03:9b:3b:f8:ed:70:d9:d5:8a:a7:85:dc:81:2b:86:8e:33:ce:
3a:89:f9:de:65:b4:d8:91:86:14:98:ff:0f:e3:0a:f5:16:db:
0c:52:19:aa:7c:d3:1b:37:5f:bf:c7:18:d1:b8:64:d8:a7:28:
49:b6:c2:1b:1a:de:89:c8:b7:5e:3c:be:0e:fa:1a:17:b0:b0:
61:d4:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:08 2025 by rpki-client