Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ZZQHimemT1Yqan2xZ5-h03SN2fg.roa
File: ZZQHimemT1Yqan2xZ5-h03SN2fg.roa (raw, json)
Hash identifier: 6foyLQXTh/VHEAP/zlvNZfav60Qqh/Jwfeou7E9KXFE=
Subject key identifier: 65:94:07:8A:67:A6:4F:56:2A:6A:7D:B1:67:9F:A1:D3:74:8D:D9:F8
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01942368F6E6DB596DF1110BA0393A3ECA25
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ZZQHimemT1Yqan2xZ5-h03SN2fg.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f6:e6:db:59:6d:f1:11:0b:a0:39:3a:3e:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6594078a67a64f562a6a7db1679fa1d3748dd9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:63:8b:df:8b:5a:96:4b:ed:b4:8f:21:d5:
af:70:db:fd:3d:50:4c:e2:74:1f:27:c9:11:b2:6e:
6b:95:f7:f0:ae:07:e0:fc:fc:a1:0c:30:b1:ad:19:
b7:9c:4d:06:1a:8c:50:b5:f7:48:f9:fa:a8:55:6a:
64:47:1f:6f:70:07:92:03:16:a6:72:1e:b3:92:a3:
88:06:71:f5:8e:a8:51:72:89:69:7d:75:5d:18:a9:
53:a4:69:38:a1:43:0b:08:79:bb:6a:d7:76:3f:39:
6d:f1:64:39:3e:e8:8d:20:0b:5b:3d:74:e8:1a:d6:
89:bd:bf:8a:24:9b:90:76:b6:d1:7d:de:90:45:12:
c5:f3:b0:51:f3:01:ce:3f:eb:d4:03:a8:85:27:4c:
ec:fd:fc:f1:e1:b9:90:c5:ed:b7:48:d9:65:d3:5f:
83:21:42:06:ae:32:12:f3:89:af:ab:69:9e:f2:04:
87:88:72:8f:07:ef:e8:06:44:61:de:8a:68:25:a2:
37:b1:a7:d4:87:d9:79:67:51:57:5b:1a:dd:5b:1a:
2c:b0:2a:45:36:80:1d:77:9b:f2:9a:f1:7d:0a:77:
9f:57:c9:a0:39:57:2f:8e:9c:d5:c0:85:1b:6b:66:
17:d8:d9:e2:43:f9:d1:0d:49:2e:2b:6f:8b:dd:04:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:07:8A:67:A6:4F:56:2A:6A:7D:B1:67:9F:A1:D3:74:8D:D9:F8
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ZZQHimemT1Yqan2xZ5-h03SN2fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6b:4a:f8:1a:78:97:92:21:47:de:cf:09:87:26:93:ca:fd:
ab:28:b3:58:a9:58:b9:8b:8e:57:e0:c6:3a:05:02:ca:f1:c0:
cd:73:3a:8d:a9:e7:ab:b0:37:74:36:27:a6:a0:48:08:cd:ec:
53:a4:8c:34:a0:4c:63:e1:a0:b2:0d:61:c2:d1:4f:f1:bc:26:
5e:8f:f4:53:5d:1d:dc:17:9c:dc:b6:0e:63:36:81:fa:73:16:
b5:58:6a:cd:e0:9e:83:48:d4:a5:c1:73:71:22:85:54:a1:de:
fd:37:4d:51:57:87:d4:b4:87:33:bd:1c:69:32:48:30:89:25:
8d:a5:f4:ca:22:89:7e:b8:e7:0d:5f:bd:d7:11:3b:4d:86:fd:
7f:3a:be:36:3a:88:5b:20:0d:12:a7:98:b5:ef:c9:59:b3:7d:
46:84:2c:e2:a6:07:98:80:ba:12:1a:94:08:fe:4f:5b:f4:ef:
44:e5:06:52:1e:e7:1e:6f:d8:7c:a1:5a:ae:f4:8e:0c:c6:ba:
aa:88:91:9d:16:de:24:6d:56:96:cd:d9:73:eb:f9:69:61:49:
db:a1:9b:90:ed:ba:9f:a7:cb:0a:7d:bb:2a:65:f0:31:a8:08:
be:92:c6:47:a2:13:81:4f:b4:af:82:69:4e:30:06:a9:59:be:
6b:a7:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:31:59 2025 by rpki-client