Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa
File: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (raw, json)
Hash identifier: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=
Subject key identifier: CF:A6:55:4A:72:16:2C:E7:01:C6:C0:08:D5:13:F7:C6:EB:01:98:32
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019423D7CB5C29F9FCED00B11CD7C970FAAE
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa
Signing time: Wed 01 Jan 2025 21:48:52 +0000
ROA not before: Wed 01 Jan 2025 21:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202341
IP address blocks: 185.229.60.0/22 maxlen: 22
2a0d:7200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cb:5c:29:f9:fc:ed:00:b1:1c:d7:c9:70:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jan 1 21:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa6554a72162ce701c6c008d513f7c6eb019832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:fd:54:98:4d:31:a6:aa:4f:95:e3:bc:63:
ab:37:ea:98:ba:fa:bb:17:62:c4:c1:a4:ce:8c:fa:
7b:19:ce:d8:a0:e1:42:32:44:44:17:fc:d0:0a:52:
49:5c:f7:6a:f5:39:bb:33:09:4b:f1:5e:b0:0b:21:
d8:a3:b9:70:bf:d9:77:c0:f9:78:62:f1:4e:10:9c:
f6:84:01:80:b7:07:51:80:c8:bb:99:46:55:10:e7:
13:01:e0:0b:de:a9:ea:a1:8f:71:92:51:1f:7e:8f:
d3:a5:ec:9b:72:af:0b:6c:10:23:b2:af:a2:ab:a7:
e1:50:fe:f6:43:e6:d5:b0:89:f0:f9:b0:1d:f2:e1:
7a:41:2a:20:24:94:32:93:58:b4:5c:2d:84:be:65:
ac:58:86:3c:23:9c:e8:c3:c1:bc:2c:07:e8:6c:88:
bb:77:a1:6f:81:d6:39:24:f7:c4:0a:f5:19:d8:78:
2e:15:ae:9a:4f:a9:09:35:0f:16:83:9a:4b:51:18:
60:b1:1b:b8:11:2d:5b:39:80:c4:92:85:a8:a3:16:
e6:10:2b:dc:45:29:9d:2e:17:24:98:bd:24:e3:fe:
a5:34:34:7d:a0:30:db:f6:f3:fe:b8:d3:26:2b:00:
6c:ca:51:49:85:8d:83:ef:8d:1a:cb:6f:9e:0b:30:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A6:55:4A:72:16:2C:E7:01:C6:C0:08:D5:13:F7:C6:EB:01:98:32
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.60.0/22
IPv6:
2a0d:7200::/29
Signature Algorithm: sha256WithRSAEncryption
74:a8:6d:1e:bb:a2:c4:14:0f:47:02:75:9b:f9:57:49:00:75:
58:67:63:8a:aa:82:df:aa:e2:00:31:89:c7:4c:0b:97:d7:49:
70:47:0a:27:5d:ce:f4:77:41:63:f0:83:19:e3:75:33:3f:33:
f5:c9:57:66:c2:f2:13:be:99:d7:42:7a:3c:83:c4:99:ef:d8:
0c:c0:3a:81:05:d8:64:26:c7:08:49:8c:8a:0a:56:07:5c:ea:
c4:1c:13:64:d7:6e:25:5a:a6:c7:d4:17:0a:6b:01:83:54:94:
ec:63:96:49:51:8c:7d:0b:ba:ac:8a:3a:8b:e5:57:66:47:dc:
17:b3:9c:53:c6:66:ac:89:dd:f7:70:6e:d8:e5:f3:93:d7:5e:
34:92:28:35:27:86:ef:ad:21:92:f2:aa:c9:d8:0c:8b:df:32:
87:fa:7e:d9:5a:e3:89:4a:bf:82:9d:39:6a:28:64:8e:db:a1:
2f:e0:04:c9:a8:60:aa:61:f1:ca:ae:5b:93:71:d7:30:0b:4f:
c0:83:28:cd:f6:c1:9a:d3:27:1c:40:4a:bb:6e:c6:77:3e:37:
39:10:f1:0a:d1:27:ad:35:cd:e9:e0:2c:ce:c9:9c:cb:c8:05:
d7:d3:30:08:2f:cb:29:a3:dd:00:a0:48:5d:63:15:77:4f:98:
96:d2:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:54 2025 by rpki-client