Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa
File: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (raw, json)
Hash identifier: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=
Subject key identifier: 03:6A:59:E0:64:98:4B:79:0C:C0:4A:34:F9:3D:0D:46:99:02:B8:79
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019420D63EEA7AF56422AECD22D65F8C056C
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33011
IP address blocks: 185.235.236.0/22 maxlen: 24
2a0d:8100::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3e:ea:7a:f5:64:22:ae:cd:22:d6:5f:8c:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036a59e064984b790cc04a34f93d0d469902b879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:08:72:33:93:1c:58:d9:54:38:03:c3:e7:
a3:7e:2c:9b:0b:c9:8c:53:30:cd:05:d1:1e:ed:75:
e3:23:3c:d4:21:fc:e5:3f:1d:74:8f:f2:e0:25:3d:
e7:6c:88:0d:98:6c:f8:f7:56:38:17:4e:bc:b3:4a:
f8:87:2e:b2:7f:f1:49:73:53:0b:79:fe:f4:8a:be:
6e:fa:ab:0c:72:a5:ef:16:a2:ef:81:c8:42:4b:e9:
09:db:72:77:4d:08:cc:21:71:c5:8d:f1:b0:bb:60:
f1:74:3c:86:41:5b:ea:6a:98:53:b6:a8:2c:1d:5d:
42:58:39:5f:bc:8a:7d:94:c2:15:5d:6f:c6:ff:4f:
21:3b:60:c5:3c:8e:0f:f5:0b:4a:cb:17:c1:1c:95:
c3:46:8c:28:ba:31:c7:87:20:b8:cf:9e:30:c7:33:
bc:63:de:1f:d2:c9:fc:02:16:d1:cf:ab:f6:70:91:
6a:dd:2e:aa:87:f5:b2:c6:f9:b2:d5:0c:63:d7:36:
96:d3:66:60:4b:b3:e1:41:48:d5:bc:9c:d8:30:c7:
58:59:6c:7e:9d:1c:70:3a:da:9d:b0:b3:f9:f6:05:
be:45:be:24:17:b5:a0:45:c4:00:d0:03:ab:47:8a:
39:c5:3a:a9:45:60:8d:48:55:2b:f0:a2:69:24:92:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:59:E0:64:98:4B:79:0C:C0:4A:34:F9:3D:0D:46:99:02:B8:79
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
IPv6:
2a0d:8100::/32
Signature Algorithm: sha256WithRSAEncryption
12:1c:19:1c:e4:f7:91:8b:03:ce:6f:bf:50:a5:8e:84:0b:ba:
65:36:36:c3:d3:69:55:af:d8:2a:8c:89:76:8b:b1:08:94:88:
77:ee:4e:21:d8:8e:ae:c5:20:51:89:18:a5:34:e6:1e:7e:10:
2b:78:9c:3a:e2:66:cd:93:75:90:c5:1b:f4:ca:11:bd:52:fa:
d3:ce:92:c4:c1:b6:90:18:cb:74:ce:a7:f7:7c:01:16:47:64:
74:11:6b:0b:e0:28:37:fa:e4:46:c7:1e:7f:21:5f:9f:4b:ac:
ee:52:33:f6:90:6d:1d:a8:b1:c1:80:05:a7:d3:0a:b9:e7:97:
bd:7d:f7:6c:d5:cc:c6:48:07:c1:f0:f9:fb:94:52:6b:78:64:
db:74:4b:28:ba:98:76:d8:c8:b0:3f:dc:99:1e:46:6f:c0:32:
a5:61:e8:31:7b:06:38:fa:1b:3e:2f:8e:ba:78:13:55:a8:fa:
29:87:cc:3d:53:68:2e:a5:9d:06:df:0b:5a:21:1d:54:f1:a6:
79:6b:78:59:24:3d:91:2e:d8:61:3b:85:c4:97:5f:45:11:bd:
ff:75:48:49:3a:55:84:c0:ce:83:94:fd:22:89:69:8f:fe:73:
2f:3b:30:66:ca:f0:d3:e7:40:69:30:93:7b:71:be:68:d7:90:
45:45:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:56:22 2025 by rpki-client