Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/ZuMY1XotbixRHp-2hF8zeuwVNac.roa
File: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (raw, json)
Hash identifier: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=
Subject key identifier: 66:E3:18:D5:7A:2D:6E:2C:51:1E:9F:B6:84:5F:33:7A:EC:15:35:A7
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 01941F8C2DE362B33596C389FEF9B27A1AA3
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/ZuMY1XotbixRHp-2hF8zeuwVNac.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60245
IP address blocks: 185.54.236.0/24 maxlen: 24
185.54.237.0/24 maxlen: 24
185.54.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2d:e3:62:b3:35:96:c3:89:fe:f9:b2:7a:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e318d57a2d6e2c511e9fb6845f337aec1535a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:1e:24:84:4f:c8:5a:ae:94:7d:9b:5f:a6:
34:38:79:65:08:05:d0:dd:9e:96:97:5b:65:9e:78:
b0:7c:07:a0:4b:59:70:9b:40:50:68:77:bf:3f:14:
15:77:f2:7d:fa:b8:6f:e6:84:2b:53:fc:84:12:a9:
14:53:cb:34:cc:94:4f:c3:94:cf:ba:82:8c:d6:e4:
94:92:7f:9b:2c:76:bd:89:44:29:90:72:b8:40:8b:
4c:3c:ac:06:18:66:17:9c:ec:df:04:32:7e:b8:98:
94:e0:f4:78:3a:52:2f:d1:f5:96:11:9b:7c:53:1c:
10:88:dc:e0:92:e3:b5:4a:ef:0a:c6:10:00:ea:b2:
b1:cd:1d:d5:28:06:e7:c4:6b:75:4e:27:21:56:09:
c1:bf:d9:9a:aa:36:8a:28:ef:53:85:35:e7:78:2e:
2c:2b:ec:ee:d5:71:91:9e:2c:46:2f:0a:03:8e:6f:
d2:37:d8:d5:9d:c4:ef:5e:5b:ef:b2:d6:4f:0c:24:
10:fe:e5:af:ea:e4:bf:4f:f5:23:c5:db:89:f1:06:
fa:47:73:83:ad:59:22:37:60:9c:a0:bd:ba:39:f2:
f2:7f:e0:22:be:f3:ce:de:7f:90:b2:a9:9f:76:32:
d1:4d:25:cf:ea:c9:72:c8:c3:cc:c6:76:c8:8f:94:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:18:D5:7A:2D:6E:2C:51:1E:9F:B6:84:5F:33:7A:EC:15:35:A7
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/ZuMY1XotbixRHp-2hF8zeuwVNac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.236.0/22
Signature Algorithm: sha256WithRSAEncryption
17:65:65:e2:b0:db:74:c2:cf:d7:15:77:5d:db:5c:23:3b:2f:
e3:9d:be:92:2f:d8:93:aa:ff:e6:8f:d8:ee:59:43:40:ae:c0:
9e:86:8a:8b:81:60:7c:81:5c:4b:02:67:b9:da:a6:49:e6:3f:
c9:64:93:54:5d:3d:d4:63:40:6d:fb:b5:de:69:5b:81:37:55:
fb:8d:9e:75:75:50:61:53:45:5c:b6:a4:72:0d:05:d5:16:18:
0c:c4:1f:db:dc:f1:ba:e6:49:74:f0:b4:86:c7:7e:9e:64:50:
c6:b5:70:c4:56:ce:b1:56:27:a8:02:6b:1e:05:be:57:6e:4d:
4a:87:4a:7a:65:81:85:3f:bb:4d:cb:ea:9a:54:c7:3f:56:1c:
96:e8:f9:cc:16:4b:a5:19:70:51:16:37:eb:c2:14:1a:1a:cb:
2d:0e:87:d6:a8:0d:21:6d:13:86:6c:2a:90:5b:a1:42:62:26:
d9:60:41:76:7f:7e:d5:1e:2e:cd:e2:f4:c8:f1:4d:cd:b1:17:
81:e7:0b:71:f1:cf:d1:df:4d:bf:86:80:6a:49:9e:dc:fb:53:
2f:4b:0f:bf:86:87:15:fc:c1:8a:4f:03:17:f5:4d:ad:df:85:
1f:48:fd:b2:59:1f:05:a4:aa:6d:18:c7:8b:da:cf:13:54:99:
1d:4a:24:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:07 2025 by rpki-client