Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/zhoAHh4wgcaK6VZRodYWCuN75nI.roa
File: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (raw, json)
Hash identifier: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=
Subject key identifier: CE:1A:00:1E:1E:30:81:C6:8A:E9:56:51:A1:D6:16:0A:E3:7B:E6:72
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 0194266B74856F540D5FF2ECD901F57CD6AF
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/zhoAHh4wgcaK6VZRodYWCuN75nI.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8544
IP address blocks: 66.205.95.0/24 maxlen: 24
185.42.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:74:85:6f:54:0d:5f:f2:ec:d9:01:f5:7c:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1a001e1e3081c68ae95651a1d6160ae37be672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:37:06:bb:8b:e8:43:37:02:58:af:d2:a5:
51:68:83:74:52:25:b0:8f:da:c7:0c:f2:e3:e9:1d:
16:99:aa:b9:4d:62:d0:cf:09:54:ee:0d:f3:33:55:
dd:a2:c9:d8:a4:27:ad:6c:82:47:14:26:03:96:36:
80:0a:db:80:03:ed:eb:0a:67:f1:78:6a:ae:cd:2b:
52:8a:ef:39:ca:d2:33:a9:56:9e:4d:94:98:72:6d:
36:9e:3a:30:66:e4:64:01:2b:01:30:f6:c8:b0:ed:
d5:66:77:d0:1b:a7:be:ab:f4:c3:7d:80:cf:6f:ca:
f2:7d:5a:40:3f:04:a3:b0:08:59:ba:72:3b:c9:60:
58:6e:ee:cd:8f:40:e5:c3:5f:25:a4:77:ff:5a:65:
3e:91:49:c6:4d:4a:44:3a:7f:c6:5e:a3:07:75:9d:
d2:94:d2:2e:90:3e:10:a6:4f:64:4a:bf:fb:53:6d:
d2:49:1a:ab:73:06:ab:2b:3d:4d:d1:78:eb:d8:42:
3d:bc:93:49:82:e7:2e:b4:05:9b:bf:f2:71:b9:c0:
0a:66:64:e9:5c:b2:50:c6:4c:fc:a5:c1:fa:8a:c7:
f6:10:04:e2:b2:9c:4f:93:78:8f:c5:d7:93:44:ee:
ec:a1:ba:05:66:77:2b:e8:60:d6:38:97:7e:fe:f9:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:00:1E:1E:30:81:C6:8A:E9:56:51:A1:D6:16:0A:E3:7B:E6:72
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/zhoAHh4wgcaK6VZRodYWCuN75nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.205.95.0/24
185.42.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8a:35:d3:e9:98:bb:d8:8b:a5:fd:fe:27:8c:87:93:96:51:
b8:fa:18:85:69:56:66:72:d3:dd:6c:e9:14:03:5f:30:55:05:
9f:89:4b:96:57:3c:88:e3:45:fc:3b:68:39:f9:58:44:7d:e6:
0a:53:01:48:7f:6b:25:63:12:40:6b:d4:6e:74:3e:8f:fc:a1:
b1:08:01:e4:65:8f:2a:4e:ed:ac:97:cf:5b:32:57:cb:7b:a8:
2b:7c:0c:97:a8:a4:d2:cf:c5:54:3c:ec:9c:d9:74:49:48:bc:
9f:61:93:37:d1:a0:2d:57:87:e7:24:0e:96:81:ad:ee:ab:bc:
6d:bf:43:df:57:31:32:65:32:de:e9:4c:b3:9a:9e:d1:7a:f2:
a8:3e:67:e1:fc:88:04:97:b8:88:b8:b4:37:ac:b1:89:41:b7:
f4:c7:b0:f0:87:cb:55:01:46:f4:e1:af:aa:b0:9b:86:08:bd:
7d:d0:aa:7b:75:ac:33:79:8a:57:2b:3b:f9:4a:f9:1d:1f:5c:
00:68:e1:ec:27:18:77:d4:a9:6d:e8:bc:41:86:45:3f:46:7e:
02:62:5c:e0:5e:a4:73:5f:b0:12:f8:a3:e7:53:4b:fb:12:a3:
b7:68:4a:f8:34:86:66:62:51:2f:18:bd:65:34:75:ed:b9:43:
e0:51:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:20 2025 by rpki-client