Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/Z259DsTig8t3A9cd7HAu8mMPpR0.roa
File: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (raw, json)
Hash identifier: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=
Subject key identifier: 67:6E:7D:0E:C4:E2:83:CB:77:03:D7:1D:EC:70:2E:F2:63:0F:A5:1D
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019425FDAAB76EFF5EB7B8C22B2784F06D80
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/Z259DsTig8t3A9cd7HAu8mMPpR0.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12349
IP address blocks: 164.59.128.0/23 maxlen: 24
164.59.130.0/24 maxlen: 24
164.59.144.0/23 maxlen: 24
212.64.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:aa:b7:6e:ff:5e:b7:b8:c2:2b:27:84:f0:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676e7d0ec4e283cb7703d71dec702ef2630fa51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:1d:ce:e2:fd:b9:50:c2:52:1b:2d:aa:13:
b9:c0:d3:a3:78:b2:02:22:9d:3a:c9:5e:ef:81:57:
f3:92:60:b0:50:3f:48:66:bf:a9:50:91:ef:f4:06:
e2:cc:2d:39:e9:af:71:d8:08:91:e7:18:68:08:59:
ca:03:50:60:56:94:39:e6:91:18:75:f4:b8:c6:23:
77:42:5a:c2:ee:dc:1c:dd:1f:38:cb:a5:af:2d:69:
ed:fa:cf:96:d0:0f:9b:5c:3c:f3:29:8e:1a:19:86:
df:b2:8e:8a:14:3b:c8:8d:54:d5:44:a9:15:25:46:
96:31:62:50:b9:89:7f:02:14:9f:7a:94:81:0b:eb:
df:d4:bb:5a:22:1b:31:a3:ed:5a:d5:82:96:6c:41:
6e:0f:b4:c2:89:5c:10:86:5f:b6:a2:ac:12:99:0b:
9f:f4:1a:a2:5b:ff:7c:53:d5:fe:ca:86:1d:e3:ff:
4e:41:fe:73:88:44:8a:4b:49:d3:0f:a7:1d:0d:5e:
cc:e3:c8:b5:c8:57:6d:b7:4f:11:a9:49:1b:b2:42:
20:7e:36:04:38:46:97:a0:17:c7:02:68:2c:2a:74:
a0:63:cb:21:0f:69:a0:0a:c2:54:39:e3:eb:ac:2b:
9d:f5:0c:4d:2a:a8:36:59:7b:e7:a3:d6:73:25:45:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:7D:0E:C4:E2:83:CB:77:03:D7:1D:EC:70:2E:F2:63:0F:A5:1D
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/Z259DsTig8t3A9cd7HAu8mMPpR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.59.128.0-164.59.130.255
164.59.144.0/23
212.64.225.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6f:06:8f:2d:02:14:d4:a5:47:d7:3e:a3:68:d2:52:ce:e2:
6f:61:95:99:49:df:94:71:3d:e0:46:0b:a0:b6:32:c2:0e:9e:
01:55:97:7a:a3:91:53:ad:a2:7f:d6:97:a7:77:2b:d4:f0:05:
f9:38:5c:d1:66:0d:35:cd:72:1a:30:2f:ac:12:2a:07:33:da:
a2:a7:04:69:d4:04:27:cc:6d:65:d4:47:bf:24:56:ea:f1:e2:
43:b9:4e:d0:77:90:ec:00:c7:ca:d5:3d:8d:41:a0:ac:d9:2d:
02:04:48:e0:f3:33:4c:e7:9b:a3:f2:83:5f:e0:0f:3f:3e:0a:
8d:54:f3:62:89:a6:10:f7:06:f9:53:9a:39:65:05:ca:2d:52:
bb:53:23:47:fe:9b:59:a5:a7:cc:66:a6:61:07:93:fe:a8:69:
c6:ca:4d:a2:9b:26:b2:dd:f9:41:16:8f:33:3c:5c:02:68:37:
3e:5f:c3:bc:09:51:57:5f:91:34:91:5a:d9:5a:8c:11:55:ab:
69:58:a1:03:ba:47:9f:e7:fc:3c:a8:86:96:b3:9b:f1:00:a9:
86:ca:ed:40:6e:45:39:5d:33:24:d5:22:c1:5c:51:90:29:69:
6e:aa:33:9c:9b:c5:d8:1e:44:0f:11:31:35:08:d6:e0:48:23:
b3:22:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:17 2025 by rpki-client