Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/ZlFlkPGjMKquCZpshPZPLE9dZqY.roa
File: ZlFlkPGjMKquCZpshPZPLE9dZqY.roa (raw, json)
Hash identifier: OT5vcn9QcYr6soVU5K6+QqBKwhhfuiSLz5SAeO9L1XI=
Subject key identifier: 66:51:65:90:F1:A3:30:AA:AE:09:9A:6C:84:F6:4F:2C:4F:5D:66:A6
Certificate issuer: /CN=13d35c057bdd5e8eca91a5752c7023bcc326ac2e
Certificate serial: 01856FCB807E8A45B79011F4140E7EE5086B
Authority key identifier: 13:D3:5C:05:7B:DD:5E:8E:CA:91:A5:75:2C:70:23:BC:C3:26:AC:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9NcBXvdXo7KkaV1LHAjvMMmrC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/ZlFlkPGjMKquCZpshPZPLE9dZqY.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 194.26.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:80:7e:8a:45:b7:90:11:f4:14:0e:7e:e5:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d35c057bdd5e8eca91a5752c7023bcc326ac2e
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66516590f1a330aaae099a6c84f64f2c4f5d66a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:7a:b7:44:4d:c6:31:43:7f:12:7f:24:53:
bf:01:03:f4:fd:1b:c5:69:80:d1:c8:75:b5:3a:b2:
83:15:5b:63:09:38:e3:85:ba:3e:4b:b1:29:c3:75:
71:04:d6:94:9d:5a:31:31:58:f1:9e:64:27:ee:58:
17:4a:93:6d:3b:d8:ef:f6:e5:8f:8f:50:6a:af:d9:
62:ed:6f:a0:0a:4f:35:c5:f8:15:7f:75:81:bd:c4:
4a:bd:94:bb:84:94:e4:56:a8:99:ec:5b:ed:cb:f2:
aa:b5:bd:77:3b:05:0b:cb:d0:f3:ca:d1:b6:70:a9:
42:fc:4b:ec:74:10:66:61:de:f3:b4:a3:5d:40:a1:
bd:c8:ab:7b:e1:41:b2:a2:03:18:8b:6b:a9:ce:cc:
59:bb:d6:03:a3:f5:dc:0d:0f:af:79:de:5d:45:a2:
6f:e8:4b:f9:44:87:0f:ad:39:6f:57:13:0f:eb:dd:
96:16:68:12:55:84:e0:d4:10:93:7d:eb:66:77:b6:
a7:2b:05:ae:7b:3f:2c:79:19:3d:66:81:38:d2:88:
f7:40:1b:96:93:be:97:c5:dc:a7:67:56:5b:55:95:
1c:ff:66:ae:91:c1:f1:34:90:54:34:0e:bf:5f:9f:
ce:c5:a1:b3:99:ec:58:92:af:56:a0:c0:e5:a7:d4:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:65:90:F1:A3:30:AA:AE:09:9A:6C:84:F6:4F:2C:4F:5D:66:A6
X509v3 Authority Key Identifier:
keyid:13:D3:5C:05:7B:DD:5E:8E:CA:91:A5:75:2C:70:23:BC:C3:26:AC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9NcBXvdXo7KkaV1LHAjvMMmrC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/ZlFlkPGjMKquCZpshPZPLE9dZqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/E9NcBXvdXo7KkaV1LHAjvMMmrC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.143.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7c:be:45:b9:b9:ef:1b:64:04:7c:5e:c1:27:ff:d2:59:16:
b3:a9:b8:1b:85:e4:17:9a:ca:a4:5a:ce:06:61:63:57:4e:73:
8e:dc:4a:60:f8:89:af:1a:43:fc:91:e3:67:d1:06:1a:27:b4:
ba:e9:56:e3:9b:6a:68:27:97:ae:6a:c1:da:d2:93:1b:66:79:
58:f0:b6:5d:db:a6:cf:c1:6e:d7:dd:33:fd:1a:15:62:46:a1:
e4:8b:cb:c3:d9:0b:2c:ca:70:26:0d:11:94:2a:10:90:e9:ec:
3a:c4:10:b0:c7:d9:06:f6:9e:cf:0a:5c:a3:e8:61:f4:14:c4:
0c:c7:29:8f:9c:58:05:2a:18:1a:ce:7b:da:86:32:f3:01:67:
e9:72:16:3f:5c:2e:02:92:37:a0:08:f3:7f:aa:d4:90:84:e0:
38:d3:d0:96:d4:19:2b:c4:21:c8:9a:7a:7f:23:55:43:b7:33:
6a:ef:e2:12:54:34:81:91:e8:17:44:c4:c1:b7:27:50:6d:31:
60:89:7c:42:cb:55:83:5f:19:ad:98:53:97:59:63:d9:c9:9d:
51:34:2b:33:06:fe:0c:a9:27:27:19:42:c8:50:70:fd:23:96:
57:05:9a:d0:40:f7:64:4a:e5:0c:fe:e5:e6:60:0b:b7:4f:c0:
82:84:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:45 2025 by rpki-client