Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa
File: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (raw, json)
Hash identifier: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=
Subject key identifier: CD:3A:52:11:92:7B:66:8E:90:2C:FC:88:2C:C7:E1:05:90:15:39:BC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B7F6D756D45C4140540EE5BA6175
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212994
IP address blocks: 185.39.28.0/24 maxlen: 24
185.39.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b7:f6:d7:56:d4:5c:41:40:54:0e:e5:ba:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd3a5211927b668e902cfc882cc7e105901539bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:65:75:3e:25:9c:22:de:09:b8:26:fc:e8:
c1:66:93:60:41:f7:1f:4b:36:6c:f1:8d:c3:5f:34:
0c:bf:e2:45:2f:f3:95:f1:0d:9e:a1:bb:df:bf:ab:
32:5a:48:c8:51:4e:ff:a2:39:5e:03:dc:33:db:67:
6b:d8:79:ef:5c:dc:ff:29:94:16:8d:c3:82:ea:53:
01:1d:73:40:f8:c1:92:53:1b:06:00:70:9e:0e:26:
6d:ee:a0:a2:e5:bb:3a:54:c5:72:32:63:4e:0f:9b:
db:2d:d7:6c:9a:b5:9a:34:55:be:2a:b3:28:8e:45:
06:65:73:83:31:1b:73:e2:78:a9:70:6c:80:c9:67:
b4:16:bb:ec:bf:c1:3c:79:8c:26:05:bf:12:c8:11:
cf:15:8b:23:9a:1a:87:80:1f:63:96:56:a9:82:79:
37:b3:dd:78:ac:94:d1:3f:76:f8:9b:79:62:25:4c:
24:a2:4a:45:c9:94:cd:b8:2e:9e:91:57:a0:04:00:
bd:a6:b2:c3:d0:eb:b3:e9:20:5d:c8:2f:65:a4:7b:
c2:cb:80:13:4c:73:91:28:f3:f8:a2:f3:9b:5e:a8:
f6:58:a9:8a:48:e9:d4:7f:a9:32:75:b9:5f:96:e7:
3b:4b:cc:4d:22:6e:64:59:a0:a8:6a:60:66:fe:e0:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:52:11:92:7B:66:8E:90:2C:FC:88:2C:C7:E1:05:90:15:39:BC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.28.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:23:c3:e6:e3:0e:8e:57:5b:94:b3:78:c3:62:01:01:23:64:
30:e2:76:c8:a0:64:67:66:de:94:c2:74:2b:0d:e0:0a:98:c4:
59:93:3f:2a:03:4f:1e:f0:a0:8c:a9:ee:ab:53:13:ea:df:96:
0b:5a:03:d2:68:05:9c:f5:57:da:5c:2c:03:b6:a2:74:cd:dc:
20:90:f7:78:ae:23:85:b9:7b:4e:fb:19:b7:30:c7:2d:b4:c0:
5d:1b:3b:e0:5e:fb:be:3b:c3:59:3f:2f:0a:a9:37:de:c0:26:
a6:35:2a:93:a5:5a:44:87:5d:19:89:3b:b8:15:f9:e8:8f:1f:
92:3d:c5:3c:db:fc:b4:5c:ab:3d:d4:21:d8:ac:44:32:e9:e8:
82:c3:68:62:0f:71:2f:be:8b:a1:6a:76:e9:d3:76:c8:d2:a3:
f9:dc:56:e2:25:9b:03:37:76:5f:30:1e:b6:7f:0e:d5:1a:5a:
f0:71:56:09:19:04:57:ee:81:ed:49:11:e4:00:9c:c8:75:b7:
a2:4c:a2:15:59:43:64:15:42:f5:dc:26:e9:89:2f:1b:fc:37:
35:8d:59:2b:ea:c9:44:fa:a0:1a:63:26:df:f8:ee:89:8d:53:
a2:68:6b:31:35:01:5a:e3:6e:0e:94:89:ec:da:23:73:f9:81:
9e:a7:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:24 2025 by rpki-client