Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/ZBTvhiqTow3aNMb2aKed7aOmeLE.roa
File: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (raw, json)
Hash identifier: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=
Subject key identifier: 64:14:EF:86:2A:93:A3:0D:DA:34:C6:F6:68:A7:9D:ED:A3:A6:78:B1
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019426D9DBF0300040C63ED3BE3EB6F8F03E
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/ZBTvhiqTow3aNMb2aKed7aOmeLE.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205428
IP address blocks: 185.216.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:f0:30:00:40:c6:3e:d3:be:3e:b6:f8:f0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6414ef862a93a30dda34c6f668a79deda3a678b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:50:2e:9d:34:89:81:84:16:07:dd:4d:c2:
a4:51:d9:3b:55:56:cf:6a:fc:6f:70:8e:c7:c0:de:
e7:7b:6f:fd:70:58:da:7e:8c:c1:74:e2:49:12:c2:
4f:a5:e4:98:a4:cf:e0:de:32:e3:6c:63:81:ec:e8:
8a:76:75:f8:ee:d3:d1:af:f4:c6:63:e8:04:53:7b:
cd:91:5d:0c:64:78:de:b8:88:6b:74:7d:15:2c:56:
c1:60:26:16:58:ca:a8:81:bb:02:8c:1b:1d:e6:1f:
5b:e4:9f:0f:62:7a:d8:c3:a7:56:e7:d0:cd:be:64:
e4:aa:7c:37:76:30:e2:90:28:b2:e1:34:27:5f:f4:
42:48:12:e8:d9:b3:a0:c8:4b:3e:5b:d6:4c:cb:9b:
2e:ce:33:17:9b:c2:a2:d2:ee:ac:ab:ca:fd:06:bf:
53:20:ad:f1:03:c4:06:ce:6f:38:1b:f5:bd:32:3a:
72:8b:d0:06:ac:63:ed:5c:d4:10:2f:aa:66:42:e5:
90:00:5b:ed:7f:51:6e:2c:91:48:a3:c4:8d:14:75:
87:c6:72:c8:9b:e0:b8:b5:82:8f:02:88:fc:81:35:
6d:25:52:b7:7c:5a:6b:a3:f7:03:44:37:45:3a:0d:
d6:0a:f8:11:7e:b3:14:5f:1c:0e:54:f7:e5:1d:31:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:14:EF:86:2A:93:A3:0D:DA:34:C6:F6:68:A7:9D:ED:A3:A6:78:B1
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/ZBTvhiqTow3aNMb2aKed7aOmeLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.164.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b2:b8:42:97:35:54:a8:0a:67:cf:9e:9a:e3:8b:7d:88:14:
c1:6f:c0:02:fa:33:58:02:17:3e:86:48:b0:4f:5e:f8:3a:7d:
7b:a4:14:16:8c:98:76:7c:5d:1b:cb:ae:14:7c:4a:52:a2:6a:
c1:09:3f:02:df:0b:c3:23:ed:3e:f9:a4:48:13:c1:f8:18:17:
65:2c:36:fe:32:ca:48:13:80:12:f7:d8:ae:56:fb:05:af:ba:
ef:9e:66:44:8a:b8:62:3d:78:23:67:10:ff:32:29:28:b0:b7:
82:9b:be:30:3b:48:2c:a4:06:7f:70:cc:af:6d:02:a5:ab:8e:
1e:a5:1e:85:42:5a:9a:3a:24:a4:a1:70:ff:9b:ea:d6:03:ea:
4f:6c:50:ed:b0:e9:99:24:f5:79:88:04:91:39:98:cf:6f:f0:
46:f4:a5:b2:ff:60:ea:16:3c:ef:6f:f8:0b:3d:0d:31:c0:1d:
19:7f:e7:f9:fe:1f:bc:0e:d4:aa:8b:37:56:71:c6:2f:ef:9c:
a0:25:16:6f:c6:31:28:f9:e4:67:9d:cd:20:1e:46:8d:50:da:
af:41:56:e1:07:28:18:9c:4e:66:26:50:61:e3:0f:40:fd:9d:
70:85:17:63:fd:f3:4b:85:db:d3:c2:9f:e6:7b:57:6c:15:93:
22:4f:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:06 2025 by rpki-client