Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/zwB_NfcfrW5dDlELOTYJqzX4fyk.roa
File: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (raw, json)
Hash identifier: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=
Subject key identifier: CF:00:7F:35:F7:1F:AD:6E:5D:0E:51:0B:39:36:09:AB:35:F8:7F:29
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B10C268BAC821BEB10D0B8267DFF
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/zwB_NfcfrW5dDlELOTYJqzX4fyk.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 188.66.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:0c:26:8b:ac:82:1b:eb:10:d0:b8:26:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf007f35f71fad6e5d0e510b393609ab35f87f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:0c:de:ab:87:a7:e1:99:01:9a:7b:0d:ed:
b4:4c:80:26:1e:13:a5:0f:15:2c:e6:84:23:e8:41:
c6:2e:a8:94:6d:4e:79:ad:92:06:a8:90:de:75:4d:
98:72:09:a7:8e:d5:d4:04:42:4b:0f:17:68:7d:03:
a8:43:01:78:ed:c2:1a:39:eb:24:c1:66:2e:51:fe:
17:04:30:e6:12:a0:20:ff:54:cf:be:4c:1b:23:0b:
a8:8f:80:6d:10:96:80:05:f4:2c:7d:fa:e5:0a:6a:
22:6a:07:ba:8d:50:61:21:76:e5:c3:ab:24:20:55:
95:a6:c0:fa:41:68:7b:03:90:c2:b7:4d:86:89:38:
ae:5b:c8:b3:1e:51:b8:b7:58:a1:37:60:23:e3:33:
07:99:07:3c:6d:a5:13:02:78:80:4a:55:0e:a2:4c:
ee:34:11:dd:d9:f5:1b:f7:bf:23:5a:ff:ef:e3:cb:
ba:28:80:1f:56:16:92:c5:e7:f5:81:9c:8c:be:3b:
20:d6:45:4c:0f:f7:65:9e:47:fc:56:0c:ae:da:31:
a2:ad:57:10:be:26:af:b4:3e:8b:1d:46:86:8a:45:
31:91:40:bd:08:0a:b4:6f:7f:22:20:c4:d3:8e:6d:
d5:71:c8:73:13:8f:4b:d0:e3:55:24:e6:6c:a6:2f:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:7F:35:F7:1F:AD:6E:5D:0E:51:0B:39:36:09:AB:35:F8:7F:29
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/zwB_NfcfrW5dDlELOTYJqzX4fyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6f:f2:15:ee:29:3f:6c:76:40:17:d5:00:c2:04:a1:11:f5:
b7:4f:d0:77:ab:e2:1d:21:ce:2f:43:f6:2b:57:97:f7:58:b9:
42:5a:17:f2:36:f7:da:75:1f:e8:6c:22:7c:92:fc:09:56:b0:
0d:cb:3c:24:a6:91:40:f6:e8:f3:54:dd:9a:7e:fb:8c:9b:98:
e2:a9:15:fb:ea:9c:8f:c1:df:39:12:b2:50:39:b3:db:bb:72:
6b:2e:2a:32:92:79:97:80:fe:12:fe:0f:7e:24:7e:21:80:df:
f5:52:94:4c:0b:b6:23:3c:5c:7b:c6:19:c8:09:1c:35:27:ed:
56:e4:3e:a9:e3:1d:ff:87:23:95:61:f2:43:44:4e:70:9c:cf:
52:88:1f:5c:ba:7e:ed:fe:8f:d5:59:3c:f6:65:55:1c:b3:62:
c6:82:f6:0f:08:8f:25:d4:14:02:b2:b8:61:51:c0:ac:57:fd:
ce:dc:9f:a8:ed:f4:48:0b:a8:b1:45:e4:be:1c:bf:b5:a3:a9:
33:60:c7:36:dc:8c:18:13:14:f1:b0:06:40:0c:85:dc:ce:5f:
f2:4f:b1:fb:0e:23:f8:85:5f:0a:33:db:2a:1e:ec:f7:7d:02:
2d:69:e2:eb:02:ee:84:ed:0d:34:cf:60:57:6d:57:72:37:ae:
7a:a0:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:43 2025 by rpki-client