Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ZyqTjyCtzerTQNsHFwElsgCZLPw.roa
File: ZyqTjyCtzerTQNsHFwElsgCZLPw.roa (raw, json)
Hash identifier: oCyrt1uDZ70xQ9blwIu/rOZUYWNWNLnhbCSU2kzNgII=
Subject key identifier: 67:2A:93:8F:20:AD:CD:EA:D3:40:DB:07:17:01:25:B2:00:99:2C:FC
Certificate issuer: /CN=b420d25656835a10bebb08d66a40227a50e6acb4
Certificate serial: 01856F4B62768D8DD941447F8F8742E6487E
Authority key identifier: B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ZyqTjyCtzerTQNsHFwElsgCZLPw.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49402
IP address blocks: 193.169.48.0/23 maxlen: 23
185.56.221.0/24 maxlen: 24
185.56.222.0/24 maxlen: 24
185.56.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:62:76:8d:8d:d9:41:44:7f:8f:87:42:e6:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b420d25656835a10bebb08d66a40227a50e6acb4
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=672a938f20adcdead340db07170125b200992cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:42:a7:b9:23:b4:0b:cf:26:37:34:9d:82:
b6:83:43:7d:f6:af:1b:1d:12:c2:45:c6:0f:fa:56:
36:1e:b1:01:0b:a8:63:94:1c:4f:e5:cd:c2:b0:ee:
33:70:63:a1:be:f2:77:15:ec:f1:e8:99:a8:d5:2e:
dc:4e:a1:05:09:13:6d:d5:ac:11:96:26:1b:8b:05:
da:ab:7d:1e:99:2b:26:1c:af:0f:36:04:51:26:b7:
a7:1f:d2:70:03:b2:cb:27:b3:13:a3:c2:f8:4d:3c:
41:6a:09:33:19:c5:72:d3:ed:ce:50:10:54:cb:b6:
2f:9e:5c:a9:d9:e7:bc:6f:4d:55:f5:63:c8:a5:33:
a4:ce:18:3b:bb:93:e3:5f:04:d2:3b:e9:f3:54:a2:
a1:94:41:57:b8:9d:0f:0c:cf:0f:82:b3:34:9f:07:
9c:ed:bf:94:12:91:e2:5b:02:cc:ef:d9:65:89:f3:
b7:5c:a6:16:86:10:59:f2:e0:0a:0f:ce:3b:fd:6f:
7b:d7:67:b7:74:48:0c:5b:10:3f:cb:b7:7e:5f:d0:
7c:03:f6:f7:a6:2e:a3:fc:67:e7:ca:57:b1:b8:cb:
3b:db:d8:9e:2b:f2:9d:06:3a:df:8c:6b:63:a3:16:
f7:9a:e3:59:23:12:be:be:0b:97:1b:ee:3f:89:d6:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:93:8F:20:AD:CD:EA:D3:40:DB:07:17:01:25:B2:00:99:2C:FC
X509v3 Authority Key Identifier:
keyid:B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/ZyqTjyCtzerTQNsHFwElsgCZLPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/tCDSVlaDWhC-uwjWakAielDmrLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.220.0-185.56.222.255
193.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:03:1e:56:56:f9:2a:5c:7d:a5:2a:a2:4c:e2:66:a7:75:de:
06:af:58:da:51:c7:10:38:7e:df:67:9c:97:10:de:f9:e8:51:
9d:2b:ef:e3:7f:da:18:bb:0b:61:81:a9:f3:03:82:0f:2c:d5:
ae:b8:bf:5a:e0:80:e8:d9:af:5a:2f:02:3f:5b:fc:e2:15:f7:
bd:0d:a4:f9:c0:da:07:ee:5c:c6:70:49:c8:a1:c9:71:0b:0f:
34:d5:13:1d:05:4e:62:6f:0f:6e:64:40:18:3f:8d:c0:38:fd:
4c:9f:dc:d0:d8:2c:56:26:7e:09:c1:48:f5:c5:4d:5e:bf:75:
7c:36:5e:a7:aa:80:42:7f:59:64:be:b3:4e:1c:6e:f5:d2:4f:
6a:36:d6:c4:51:23:4e:f1:5d:66:d8:24:b9:2a:d3:4f:18:9e:
13:dd:6d:07:30:c2:e8:cf:06:98:08:77:66:98:8e:e7:8c:a2:
bd:0c:12:5d:86:8c:7f:a5:7e:cb:0a:bb:c5:67:d8:f8:02:0b:
58:44:ae:cf:b9:ff:21:73:61:a6:64:ef:78:f2:5d:81:e0:ef:
70:6d:d4:c5:ca:91:a5:9f:1c:7f:7c:09:5f:1c:b2:df:18:13:
a3:b1:48:a2:fb:28:00:e5:1c:67:1e:99:ca:01:ee:cb:74:cf:
cf:e8:48:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:43:42 2025 by rpki-client