Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa
File: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (raw, json)
Hash identifier: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=
Subject key identifier: D1:E5:F4:CB:50:72:66:8C:C5:CA:FA:86:CF:41:1F:9B:33:27:E9:04
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01942143C25BD5FA9C3CBC004D25FE3E6E42
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41354
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c2:5b:d5:fa:9c:3c:bc:00:4d:25:fe:3e:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e5f4cb5072668cc5cafa86cf411f9b3327e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:cd:2a:f0:7f:b7:17:2e:f9:39:b2:43:2e:
f7:53:e2:f8:b4:4b:d4:ff:09:4d:09:bc:15:7c:68:
a8:b1:86:c9:50:12:5c:d3:ad:8a:1f:6e:47:c6:4a:
da:a6:02:52:de:6b:13:96:eb:96:02:9e:05:73:f9:
6a:9c:a9:c7:82:c7:17:f8:44:a7:08:e6:f2:65:4d:
0e:86:91:00:d2:f7:33:fd:5b:24:cb:a2:9c:42:cb:
9b:54:9a:39:e1:dc:b2:6b:c8:22:d6:b4:df:07:c0:
b0:08:46:c8:19:94:10:bc:39:b6:1b:04:6f:00:08:
b2:f4:1a:e2:3d:43:e6:84:2e:2d:90:fe:05:ac:46:
7a:87:0b:27:87:aa:4b:52:64:cf:74:bd:e9:74:29:
e8:9c:4e:5d:33:ff:68:2d:e7:09:f4:2a:77:3c:c0:
5c:0b:e0:b0:71:61:d9:50:e2:3c:c3:bc:65:d1:a2:
72:67:6b:23:34:3e:e1:19:66:cb:97:9b:8f:a0:00:
5e:31:94:02:3f:68:3a:26:d5:76:8d:18:d3:c7:1f:
58:53:4b:96:8d:8b:90:e0:da:1d:b1:04:94:38:4b:
ea:5e:25:81:87:64:3c:81:b9:a7:89:75:28:4a:33:
b3:d3:03:9d:53:8d:07:cd:59:f4:46:55:5b:06:12:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:F4:CB:50:72:66:8C:C5:CA:FA:86:CF:41:1F:9B:33:27:E9:04
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:2d:a4:56:8b:f6:31:9a:cd:8b:e0:c5:03:3d:5a:da:2e:99:
62:4e:07:fe:fe:0b:24:24:30:da:37:61:01:9a:25:60:39:89:
9c:dd:4e:4f:78:89:e6:06:a8:84:63:18:30:5d:4b:1f:99:dd:
aa:49:64:71:89:84:bd:8d:60:1b:1a:9e:32:ed:7f:b5:ba:f4:
5c:4c:8a:29:75:e6:0b:73:2c:9d:51:8d:91:99:bd:c0:ba:ec:
69:13:61:42:10:80:66:14:ca:52:64:7d:bb:1a:0f:10:0e:0f:
82:75:0c:af:9a:c3:e1:fb:e2:e0:4b:df:51:ac:a9:19:45:ef:
5f:10:00:fe:49:9c:d3:b5:20:eb:9c:2e:3c:a6:8f:00:08:23:
e4:ae:55:01:e9:a0:de:99:f0:3f:14:dc:76:06:d1:65:ea:5c:
72:fd:d2:9d:3f:1d:bf:db:a3:34:09:a2:14:0d:db:9d:57:4f:
c1:cd:ca:e1:08:89:94:e4:51:73:0b:b2:52:d4:6a:37:48:b3:
a3:85:a3:cf:6d:d3:c0:86:22:c4:d0:49:06:33:e0:d1:5a:7d:
aa:26:62:ee:d3:ba:2d:e0:8d:58:9f:14:99:f2:d0:0d:49:f2:
c2:08:25:6f:f1:3d:0d:19:f9:b8:71:78:30:fa:e0:dc:c9:f7:
4b:83:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:52 2025 by rpki-client