Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJHWv6GaY3XNW8bbw6KhM9QKw3g.roa
File: ZJHWv6GaY3XNW8bbw6KhM9QKw3g.roa (raw, json)
Hash identifier: XzlCkRkRE5R9gs2ixpO8Y054w16VxleEnuaZn9vbfZc=
Subject key identifier: 64:91:D6:BF:A1:9A:63:75:CD:5B:C6:DB:C3:A2:A1:33:D4:0A:C3:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282494338D5605DE60CB3C116C57D46F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJHWv6GaY3XNW8bbw6KhM9QKw3g.roa
Signing time: Thu 02 Jan 2025 17:51:13 +0000
ROA not before: Thu 02 Jan 2025 17:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60859
IP address blocks: 87.120.110.0/24 maxlen: 32
94.156.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:94:33:8d:56:05:de:60:cb:3c:11:6c:57:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6491d6bfa19a6375cd5bc6dbc3a2a133d40ac378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:04:87:92:63:dc:46:12:53:55:c8:8a:3d:
c5:50:a5:b9:fd:de:da:8d:b0:78:36:7a:90:b3:69:
82:f5:40:d7:08:0b:a2:58:9b:f0:ad:fa:3f:ee:06:
a6:61:bc:17:04:52:4b:1f:8b:1a:39:75:82:b5:a0:
8c:0b:a4:eb:34:bd:27:87:9f:54:0f:0d:c8:38:e9:
86:45:e3:da:29:fe:92:62:68:70:6d:db:54:e5:d9:
6a:f0:5c:c4:39:9c:d8:58:4b:38:57:13:4c:88:57:
bd:a4:c4:43:d5:01:16:e7:d9:92:44:da:d6:ad:da:
54:ff:71:fb:26:eb:83:83:7d:70:60:e8:e3:fc:b8:
93:a2:8d:d3:02:c8:5c:dd:25:d0:72:84:99:71:0d:
fe:2d:79:94:93:15:cd:a8:93:9c:20:0b:d2:13:89:
31:ee:bb:1d:49:28:1a:04:24:b5:71:6a:95:dd:de:
c0:b6:c4:02:b6:c8:4f:16:fd:9c:e2:00:a3:54:58:
b2:14:0a:f1:b5:b5:cc:61:f1:9c:68:8e:b9:fa:6e:
40:9f:4d:4b:cf:ee:1a:fe:2f:3e:a9:9d:0b:7d:2c:
4d:b0:25:41:87:46:de:c6:5e:5b:24:7d:d0:e9:e7:
8f:56:82:12:73:e9:3c:84:05:e9:92:b0:35:6c:c1:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:D6:BF:A1:9A:63:75:CD:5B:C6:DB:C3:A2:A1:33:D4:0A:C3:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZJHWv6GaY3XNW8bbw6KhM9QKw3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.110.0/24
94.156.34.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4e:d6:2f:e7:4d:6d:fd:c6:8f:8a:aa:20:25:48:61:ba:2d:
11:c7:a8:e8:cc:35:59:72:bd:d9:4a:21:c8:54:85:78:e2:f6:
83:18:2b:07:e7:8c:74:96:63:23:5a:04:d7:8e:53:e7:14:58:
b5:c5:f5:17:2d:50:83:d9:1f:ff:68:5b:66:1a:99:b8:da:09:
41:ab:fe:5e:a2:cb:d3:ac:e3:26:0c:b0:f8:ca:2d:1a:27:38:
c5:ad:74:11:85:9c:00:25:dc:69:25:ca:38:59:04:63:05:1b:
98:85:99:63:2c:f2:e1:30:78:e8:20:67:45:16:19:26:97:38:
cb:fa:54:34:82:1b:60:fb:fc:b2:7c:64:a2:a2:76:15:10:09:
4b:3d:eb:99:d5:19:3c:d3:7a:86:af:7e:aa:e0:0a:bf:49:87:
05:1e:6b:42:21:04:fe:3a:79:c0:98:a9:f5:04:73:1e:8c:22:
f5:a1:bb:67:85:e6:87:af:ef:c5:60:c9:79:fa:60:8a:27:8d:
62:2e:f3:ad:77:9f:3d:ac:ef:d0:bb:f4:2a:c4:f8:15:48:c7:
0b:24:b2:8b:94:cf:4e:d8:8e:7e:20:2f:73:ae:de:02:f7:de:
6c:64:15:7f:31:be:fa:92:71:9b:d0:d5:9e:a6:9d:b2:a3:d4:
79:11:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:45 2025 by rpki-client