Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zwiEAg55TtHyIaM_PRVFnX4DSAo.roa
File: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (raw, json)
Hash identifier: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=
Subject key identifier: CF:08:84:02:0E:79:4E:D1:F2:21:A3:3F:3D:15:45:9D:7E:03:48:0A
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0194252094C76CED982848FFE2687F88E893
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zwiEAg55TtHyIaM_PRVFnX4DSAo.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61347
IP address blocks: 185.9.220.0/24 maxlen: 24
185.9.221.0/24 maxlen: 24
185.9.222.0/24 maxlen: 24
185.9.223.0/24 maxlen: 24
2a02:df40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:94:c7:6c:ed:98:28:48:ff:e2:68:7f:88:e8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf0884020e794ed1f221a33f3d15459d7e03480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:06:5b:28:2a:90:69:0e:63:19:41:96:9b:
27:d1:b9:1c:b9:d4:e3:24:3e:27:0c:69:7e:9f:74:
84:56:11:06:2b:07:cf:93:c0:42:d9:0f:e4:5e:82:
fe:33:bc:c6:b5:1b:94:01:ce:07:59:9e:c2:cd:a7:
df:04:df:df:a2:09:91:2f:c6:4b:85:79:49:9d:98:
9a:49:dc:0b:2a:12:9c:54:13:ad:99:09:3d:ec:38:
ec:35:23:30:d7:ad:9b:aa:86:7f:86:da:0a:0c:32:
0b:d4:af:29:66:c9:65:97:7b:96:a3:a4:06:89:50:
17:d6:87:73:6c:74:a8:06:a3:9d:ab:19:ee:c4:3c:
a3:04:eb:71:b4:3c:1c:4c:48:93:b2:06:a9:d6:7f:
ee:1b:36:d8:f6:cd:ae:f7:09:15:99:71:f6:06:20:
81:55:af:18:ee:a5:5b:5f:ab:62:d5:a2:6f:35:02:
6b:87:ff:3b:ce:e9:6d:30:52:84:6b:e4:ea:97:60:
c4:07:40:8a:8a:08:1b:f9:80:28:58:0a:fc:b5:38:
34:da:ef:91:ba:ae:15:ec:1b:3f:bc:8f:79:03:d6:
91:ab:40:9f:e3:03:6f:6d:46:a9:6a:0a:f9:d2:1e:
5a:54:9f:0a:cc:70:1a:9f:72:6b:57:4c:4c:f2:51:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:84:02:0E:79:4E:D1:F2:21:A3:3F:3D:15:45:9D:7E:03:48:0A
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zwiEAg55TtHyIaM_PRVFnX4DSAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.220.0/22
IPv6:
2a02:df40::/48
Signature Algorithm: sha256WithRSAEncryption
6e:61:02:6d:b9:ef:d4:0e:b2:44:a5:4b:3e:cf:a1:f4:7d:5b:
aa:84:2e:d8:5e:19:7f:60:9b:9a:c3:0b:68:5c:e7:d9:41:72:
bd:93:69:58:a2:e9:50:06:b9:3c:82:0e:81:3b:d7:43:cf:db:
ac:7e:6f:69:88:18:f0:66:c7:b0:9e:08:23:2f:04:3a:1e:e4:
5c:52:03:45:0d:51:ee:0e:54:0e:4c:5f:d5:a2:9f:31:90:5d:
aa:28:fd:f9:7d:f2:7e:e1:b4:29:ee:b0:f9:d3:e6:5a:c7:55:
28:e2:f6:7d:6e:93:6c:99:da:62:3b:ad:6c:aa:09:c0:8e:7a:
2d:d0:98:30:55:03:91:09:9f:8d:3e:8d:d0:4f:77:6d:86:ae:
d8:74:9c:5d:6f:68:c8:24:41:3e:d0:a8:6e:74:14:d4:bd:8d:
72:fd:98:b8:c6:ae:f1:92:42:3c:6e:15:f7:71:02:27:6c:df:
cf:b5:96:2e:7f:78:52:72:a8:d4:9e:6c:9c:c2:9a:87:37:dd:
41:f3:6e:5d:18:8a:60:80:39:8a:eb:b4:f6:b1:ef:33:ab:36:
46:2c:3b:db:62:2d:98:bd:2c:cb:55:0e:5b:3a:c4:fc:39:3d:
e2:ba:27:ca:02:6a:7f:5e:26:84:49:55:10:0d:6b:a4:2e:6c:
5c:f4:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:56 2025 by rpki-client