Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQ_s-4xVAZYR7V7_4Ku_Xnvph3A.roa
File: ZQ_s-4xVAZYR7V7_4Ku_Xnvph3A.roa (raw, json)
Hash identifier: GdKfBEtkdzGceGUMFDB5SB39ZOCzNW7Vm1VyniaHTes=
Subject key identifier: 65:0F:EC:FB:8C:55:01:96:11:ED:5E:FF:E0:AB:BF:5E:7B:E9:87:70
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D6724383454AC8767D0D830861C4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQ_s-4xVAZYR7V7_4Ku_Xnvph3A.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29058
IP address blocks: 194.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d6:72:43:83:45:4a:c8:76:7d:0d:83:08:61:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650fecfb8c55019611ed5effe0abbf5e7be98770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:b4:d0:54:6f:cd:53:1b:67:6a:b5:2a:0a:
11:39:1d:6d:45:cb:96:ad:84:06:3d:1e:4c:89:a7:
ab:6c:27:ff:cf:f2:35:61:19:00:36:b3:e2:89:21:
af:78:93:0f:c2:f8:81:a2:79:54:4a:7a:7f:ca:e3:
14:9f:b1:5a:c9:5f:32:2c:11:b3:eb:ee:21:97:fe:
4f:18:9d:99:3a:68:6f:1c:76:8c:82:26:5f:1f:db:
ad:2a:07:6e:c0:1f:64:28:c9:52:36:d6:91:3f:e4:
1f:2e:65:72:7e:b2:19:e2:7a:56:64:eb:93:39:c3:
bc:92:e4:ee:18:2c:db:62:58:8f:a1:cc:74:f5:d5:
3e:fc:79:8d:a2:10:52:cc:38:da:f5:0b:01:73:17:
1a:b7:26:3b:9c:30:a7:d5:9b:b9:34:4f:c1:0b:5d:
a1:e7:c2:6c:06:55:36:a3:65:d4:1b:cc:5b:e6:9c:
d1:03:1f:e5:ea:7c:96:34:1e:7d:61:5a:c0:ca:62:
a3:5c:21:20:1d:57:6b:6c:7c:58:47:a8:05:32:f0:
53:e0:00:f1:29:1d:e2:64:4f:8a:1f:84:a9:f0:bf:
49:1e:3c:af:b0:81:40:68:e4:d8:c2:39:d2:10:55:
e0:a3:86:76:0a:17:cb:f6:8a:a7:ba:78:14:93:a9:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:EC:FB:8C:55:01:96:11:ED:5E:FF:E0:AB:BF:5E:7B:E9:87:70
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQ_s-4xVAZYR7V7_4Ku_Xnvph3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7f:02:d5:34:22:34:a6:47:c2:88:30:68:eb:f1:fc:78:89:
8d:4c:ab:10:4c:02:e3:2d:a2:96:d6:ab:f8:1a:e9:7d:f6:6d:
33:4f:9f:7b:15:37:98:e5:36:ac:06:24:af:e4:70:b8:d9:b9:
f6:a5:6a:77:d2:c5:60:8d:04:81:72:58:91:8e:6c:c2:7c:39:
3a:53:47:82:08:53:49:33:29:50:c9:8f:04:1d:14:2f:d8:4b:
61:aa:f2:76:00:81:8f:15:84:30:5e:9d:90:98:d0:aa:22:23:
35:89:9d:ae:7b:a5:fc:ca:58:cc:cc:4c:7d:a9:17:47:ef:0f:
29:99:19:41:69:83:8b:e7:51:7d:87:41:98:94:29:be:9d:fc:
b1:6c:bb:8e:47:97:e5:8c:91:b4:76:fd:b2:92:36:75:1f:c7:
6c:68:c9:e7:b8:58:20:c7:43:8d:70:ec:dd:97:17:27:e1:50:
98:ac:4f:04:73:d7:e7:30:c9:36:e8:58:9b:e0:c5:cc:0c:ee:
6a:89:80:4d:1b:46:5e:6b:99:65:ce:96:05:30:16:17:ee:ee:
67:b3:8b:15:26:48:7d:a0:87:28:e3:6e:4a:d4:19:ea:9f:fd:
cd:b3:a3:7a:6a:f5:f6:53:ab:34:10:ed:4f:0f:d2:b9:5b:9a:
cc:dc:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:54:03 2025 by rpki-client