Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/zsRmW1SMW76xpMrjkRPHHLCgQBE.roa
File: zsRmW1SMW76xpMrjkRPHHLCgQBE.roa (raw, json)
Hash identifier: MZkYa8dBiu7LITXTBE7M7lIxqnOlqMlb9UqnJ+9Gc+I=
Subject key identifier: CE:C4:66:5B:54:8C:5B:BE:B1:A4:CA:E3:91:13:C7:1C:B0:A0:40:11
Certificate issuer: /CN=b420d25656835a10bebb08d66a40227a50e6acb4
Certificate serial: 0A0D5AD1
Authority key identifier: B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/zsRmW1SMW76xpMrjkRPHHLCgQBE.roa
Signing time: Mon 21 Feb 2022 12:37:06 +0000
ROA not before: Mon 21 Feb 2022 12:37:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49402
IP address blocks: 193.169.48.0/23 maxlen: 23
185.56.221.0/24 maxlen: 24
185.56.222.0/24 maxlen: 24
185.56.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168647377 (0xa0d5ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b420d25656835a10bebb08d66a40227a50e6acb4
Validity
Not Before: Feb 21 12:37:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cec4665b548c5bbeb1a4cae39113c71cb0a04011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:51:ce:a3:07:a0:ad:1a:5e:f1:9f:15:43:
75:ec:9d:1a:17:e5:71:88:74:c9:a9:7d:3a:8d:58:
41:82:9c:da:02:87:9f:24:60:8b:10:20:7c:87:6f:
15:36:aa:76:cb:66:ef:77:ae:dc:b7:2e:d1:fe:31:
ff:91:68:01:cf:bc:06:ab:b0:94:f0:67:46:39:e1:
df:26:e3:37:b9:27:54:dd:38:19:3f:b8:dd:ad:78:
4d:d3:f3:47:1c:67:cd:cb:e2:a9:23:89:c6:66:4b:
f8:58:4d:31:03:a2:84:d2:9a:97:c0:98:51:da:d7:
30:61:1c:86:7b:8d:5a:29:7e:6c:41:3f:53:62:34:
49:81:36:72:ff:dc:ee:5b:dc:cf:64:44:02:a8:ac:
48:28:a4:a7:7a:47:cf:43:71:d8:0f:30:51:bb:d6:
fd:81:fc:65:22:54:d6:86:8a:e5:de:56:51:c1:8c:
e8:ba:3d:79:58:da:60:4f:dd:b3:50:28:67:4b:04:
5a:29:96:ff:25:eb:1c:d0:70:03:ab:3d:1d:be:4d:
b5:d9:ce:38:27:e7:40:4a:24:4c:01:7b:3a:25:67:
ca:ac:be:18:e6:5e:02:c0:28:c9:6d:30:10:6b:98:
77:e4:b7:a4:06:fb:18:71:49:a1:c5:08:16:3c:1f:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:66:5B:54:8C:5B:BE:B1:A4:CA:E3:91:13:C7:1C:B0:A0:40:11
X509v3 Authority Key Identifier:
keyid:B4:20:D2:56:56:83:5A:10:BE:BB:08:D6:6A:40:22:7A:50:E6:AC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCDSVlaDWhC-uwjWakAielDmrLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/zsRmW1SMW76xpMrjkRPHHLCgQBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/95bcba-611a-4b3d-a705-e4b014791726/1/tCDSVlaDWhC-uwjWakAielDmrLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.220.0-185.56.222.255
193.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
57:07:f8:9e:76:6b:3b:d6:61:dd:7c:67:03:7f:e8:5f:51:49:
30:c4:2f:18:6b:98:2b:a5:68:f6:aa:c1:01:01:98:3e:18:81:
1b:cb:ad:a3:fe:aa:16:d0:5d:d1:04:d8:ce:e8:f6:28:07:ab:
93:2d:ed:8f:3c:9c:82:7d:66:92:35:cf:b4:3a:77:7c:35:af:
a9:07:5c:5e:ff:c6:b7:4d:64:30:eb:43:a3:a4:34:34:43:dc:
32:7b:7c:84:ab:82:2c:78:42:68:8e:18:25:53:38:d6:eb:84:
64:38:28:45:8a:6f:b5:5b:c5:ea:90:5f:8d:7f:5c:c3:6a:97:
50:03:fc:bd:07:bb:f7:bc:97:36:eb:06:78:67:bb:9d:00:5b:
ad:ca:78:cd:cd:e1:7e:f9:bc:32:fd:ea:92:8d:b8:ad:6d:c2:
4f:59:d2:8f:63:00:5c:73:59:10:fc:8f:eb:a1:b0:24:6c:7c:
c5:07:db:d8:9f:c4:69:31:b4:44:75:d4:76:47:bc:de:0b:5d:
09:cd:46:a7:1e:0f:f5:94:a5:53:28:76:a8:f9:39:72:5e:ba:
78:48:2e:1d:95:c6:8e:ab:28:73:6b:76:5f:33:a7:be:9f:df:
a4:34:53:c0:d1:ec:4f:7c:14:f0:c3:ef:99:05:8c:26:bd:24:
ac:48:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:32 2025 by rpki-client