Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zkNSoRkbZZYie9nqVzltpxicH-s.roa
File: zkNSoRkbZZYie9nqVzltpxicH-s.roa (raw, json)
Hash identifier: 3wucji3XpC6v4cwHRUdYZVOYr6nwn6V4KMpHyfYRm34=
Subject key identifier: CE:43:52:A1:19:1B:65:96:22:7B:D9:EA:57:39:6D:A7:18:9C:1F:EB
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9AFB33832E4111602ECA88DAFABF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zkNSoRkbZZYie9nqVzltpxicH-s.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58955
IP address blocks: 92.63.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:fb:33:83:2e:41:11:60:2e:ca:88:da:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce4352a1191b6596227bd9ea57396da7189c1feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:34:d8:3c:58:e9:9b:84:95:20:14:38:d4:
30:a0:d3:ac:07:2b:f0:58:a7:1e:96:a5:c3:ce:d8:
e7:ba:af:10:51:00:89:7b:75:57:af:ed:b8:a2:86:
22:ed:fe:d2:c1:0b:05:69:ce:f7:a8:f6:28:56:0e:
96:68:c1:5d:97:ef:3e:be:e7:8a:d9:c0:5a:b6:27:
2b:b3:3f:ba:c1:f3:75:fe:b7:c2:c0:4e:37:c3:15:
f2:8d:1c:d3:11:cd:bd:19:cf:7c:55:da:a1:cf:50:
16:03:7c:60:d9:a9:c7:0d:a1:58:82:de:01:56:a2:
37:ef:ef:fd:c1:19:79:f8:7d:a9:78:73:c2:6d:9d:
15:e9:44:2f:7c:f2:02:e9:a3:01:2a:ec:98:05:82:
d2:60:aa:5d:95:78:07:ef:47:f4:fb:ef:57:8b:c8:
bd:1f:08:8b:5c:09:52:49:d9:91:91:de:df:68:9f:
3b:93:c2:20:d5:01:f4:ab:e2:2a:48:b7:a1:2d:e7:
b5:5f:87:af:18:5f:91:d7:85:ca:bb:5a:1c:c5:d0:
0a:2f:49:f1:b1:91:c4:32:95:ab:5d:1b:8e:d5:29:
e4:67:3e:58:40:e5:41:13:80:da:69:fa:79:b8:78:
e5:fd:0b:09:72:3a:9b:a2:3c:1c:33:25:3a:72:07:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:52:A1:19:1B:65:96:22:7B:D9:EA:57:39:6D:A7:18:9C:1F:EB
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zkNSoRkbZZYie9nqVzltpxicH-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.180.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cd:e4:0b:a1:35:d9:aa:7f:ff:a1:e0:3f:cf:52:ed:ea:a1:
64:59:5d:69:10:2c:07:61:bf:09:df:0d:70:f1:f9:60:64:7e:
28:64:63:cd:5c:66:76:86:ec:20:a6:09:04:a2:02:26:54:07:
58:f7:af:08:69:0c:18:d7:b1:f4:de:cd:5b:83:e1:1e:ee:d2:
84:bf:7f:f8:09:9f:7b:80:d8:31:3d:6e:fa:e0:f0:f2:3d:52:
77:72:15:8b:5c:f3:8c:44:ed:ee:4c:d4:f6:d5:7e:b4:80:91:
e9:be:e1:e4:af:bd:2e:64:08:af:18:7c:a2:90:e1:2c:de:0b:
86:e3:34:1d:3c:de:7b:d6:4b:ba:08:e2:20:8b:09:3c:4d:f6:
83:6d:1a:78:be:17:72:7a:6c:dd:a6:77:9a:4e:e2:6f:a4:ca:
3f:cb:bf:fd:ee:79:97:3c:e4:d9:a7:5e:39:6d:c2:41:18:00:
5d:68:62:6c:47:ca:12:6b:9b:fa:7f:7e:11:09:91:f8:43:d1:
d6:c2:78:79:3a:87:7b:a0:4d:e3:cc:17:0f:f0:05:fc:d2:76:
87:9b:2c:3a:0c:2b:95:44:3d:b7:03:1c:d8:78:dc:8b:72:3d:
10:36:ca:ac:18:55:57:64:02:c8:13:43:64:5d:6b:f1:6b:17:
66:b5:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:49:35 2025 by rpki-client