Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ZXngKU01a_kjXn9mpqf40kcafVA.roa
File: ZXngKU01a_kjXn9mpqf40kcafVA.roa (raw, json)
Hash identifier: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=
Subject key identifier: 65:79:E0:29:4D:35:6B:F9:23:5E:7F:66:A6:A7:F8:D2:47:1A:7D:50
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 019425FC27BFCA26C7B3151F4C65BD587E12
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ZXngKU01a_kjXn9mpqf40kcafVA.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.233.132.0/24 maxlen: 24
185.233.134.0/24 maxlen: 24
185.233.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:27:bf:ca:26:c7:b3:15:1f:4c:65:bd:58:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6579e0294d356bf9235e7f66a6a7f8d2471a7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:28:e3:90:17:00:3f:39:73:6c:50:95:03:4b:
8c:7a:6d:0e:2b:0c:84:15:6c:6c:15:cd:66:b5:49:
de:22:79:70:49:c7:a2:e5:3f:6f:39:35:d6:6b:da:
42:f3:27:15:6f:da:ba:fb:2b:f5:3b:e5:30:47:5f:
30:57:58:56:09:eb:25:0d:34:22:76:5d:07:03:9a:
fa:f2:38:26:25:eb:37:92:f2:c1:2c:f9:8c:18:1b:
28:fe:30:4c:57:72:4c:51:d5:5a:c1:83:7b:78:bf:
5f:ef:37:af:da:2e:cd:ec:47:2f:f4:3a:cb:2d:58:
03:3d:be:cb:94:24:c7:bb:2b:df:a6:e3:94:a1:65:
77:cb:6c:e3:13:5e:41:dc:d0:fc:f2:b1:b1:fe:46:
0e:98:16:1c:34:23:15:1b:b2:30:57:40:f3:88:66:
f8:1a:4d:83:75:c8:6f:96:50:85:47:34:e2:97:25:
bb:21:ef:c7:13:9b:75:71:e0:12:4b:42:53:cd:3d:
b9:5d:97:c0:19:6f:ce:50:c8:6e:2e:b6:0c:1f:44:
eb:ce:49:8c:ab:a5:73:80:00:15:3a:67:3d:cb:f9:
d2:94:6c:bd:15:a5:fb:1f:ff:84:a4:3e:ff:27:3b:
69:ed:18:b8:26:fc:04:b9:e2:77:99:97:03:a3:e4:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:E0:29:4D:35:6B:F9:23:5E:7F:66:A6:A7:F8:D2:47:1A:7D:50
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/ZXngKU01a_kjXn9mpqf40kcafVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.132.0/24
185.233.134.0/23
Signature Algorithm: sha256WithRSAEncryption
34:17:82:ed:a9:78:f8:0f:0e:34:ee:c4:74:23:9b:0d:38:05:
e9:55:e3:be:50:7e:2a:fe:d4:a0:52:1c:27:6c:f6:04:25:4e:
51:a3:c5:31:0d:52:49:87:3b:a6:16:3d:d7:a9:2d:81:a2:39:
23:dc:e0:18:ad:97:8d:9d:f9:4a:0b:ca:85:5d:0d:8d:99:55:
fd:41:57:96:d9:dc:79:60:7c:78:09:6a:51:a5:cc:c1:b4:ea:
cc:85:ef:4c:23:b2:e1:6b:9e:ff:5d:19:19:4a:45:35:88:35:
fc:e2:e5:33:5e:55:58:89:8b:ae:64:9c:70:62:92:2c:d7:d6:
0a:ad:dc:6a:4f:68:0d:88:e4:8e:b4:6f:f7:e0:4d:60:5b:e3:
ea:1f:99:44:25:68:2b:a2:01:36:ad:dd:9d:98:69:4e:c5:f5:
9e:af:e7:4d:d7:3c:ea:30:2f:39:fa:05:75:b6:3d:6f:91:c2:
ee:49:80:d0:69:93:0e:59:7d:4c:7b:82:72:d1:5d:a7:51:54:
56:ff:af:3f:11:64:6c:41:61:d6:6b:49:48:e5:24:a7:68:7e:
f4:ce:a3:3b:0e:48:b7:3d:5c:b0:db:db:b5:34:44:ad:de:4a:
90:5a:0c:31:ad:43:eb:84:c8:71:9d:2e:43:51:2f:e3:da:e3:
59:ef:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:30:37 2025 by rpki-client