Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa
File: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (raw, json)
Hash identifier: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=
Subject key identifier: D5:9C:56:F2:EF:B9:3F:5B:78:50:CC:DE:E4:91:5B:97:43:A8:CA:EE
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019421B24D7338DE9B414E30A829FE2FEBCA
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204504
IP address blocks: 185.134.168.0/22 maxlen: 22
185.134.168.0/24 maxlen: 24
185.134.169.0/24 maxlen: 24
185.134.170.0/24 maxlen: 24
185.134.171.0/24 maxlen: 24
2a0e:3e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4d:73:38:de:9b:41:4e:30:a8:29:fe:2f:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59c56f2efb93f5b7850ccdee4915b9743a8caee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:b3:b4:d0:3a:4f:75:55:0b:97:57:6a:2b:
1b:e4:42:9b:03:5d:0d:de:64:77:13:e1:86:98:89:
65:bf:30:83:f9:be:1e:b1:5a:a6:55:20:3b:e5:f7:
88:e2:46:05:31:f7:1f:40:37:68:83:fa:a6:0f:aa:
93:4e:23:4c:d3:41:0b:ac:5d:64:be:5c:ad:37:84:
b1:5b:6f:ab:35:a4:f4:da:5b:36:38:9a:ec:67:dd:
db:5f:a8:6d:1e:8f:fe:94:2e:d3:0e:92:7d:c6:39:
9c:92:4b:09:fd:89:2d:ca:84:0e:3d:c0:7e:af:73:
31:41:fb:72:85:ea:ac:aa:f6:49:27:8b:c1:71:53:
6e:53:65:9c:71:07:fe:89:96:bd:8f:4a:43:7c:d2:
53:de:90:23:76:3d:fd:a5:b7:81:45:5b:5e:71:1c:
c5:c8:cc:ca:90:d5:32:32:dc:12:68:72:cd:b0:5d:
f3:d1:b2:25:39:ac:e1:0c:2e:b7:94:bb:c6:f9:f3:
53:87:f1:43:08:fd:d3:ca:74:53:4e:4c:00:b1:4f:
be:4e:e2:09:c0:99:a1:15:00:37:4a:7b:ec:b7:f7:
94:08:56:bf:9f:43:ee:d9:44:3a:d6:f8:58:93:cf:
dc:dd:c4:0e:a8:03:6a:1f:67:87:58:b3:c2:75:cb:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:56:F2:EF:B9:3F:5B:78:50:CC:DE:E4:91:5B:97:43:A8:CA:EE
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.168.0/22
IPv6:
2a0e:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
53:3b:d2:9b:8c:6d:c0:03:f1:90:b8:f9:8e:8e:df:6d:00:e3:
35:63:23:a0:8d:16:8a:5c:98:ed:b1:ef:4f:19:a2:77:db:22:
ed:e1:ea:9c:51:13:d4:c6:6b:a3:40:1d:cf:03:da:f9:26:94:
13:87:07:fc:1e:9f:b5:a6:7d:2a:7d:4b:fa:f0:b6:8f:34:cc:
09:a8:1f:31:5c:0b:4f:97:31:81:d1:a8:74:eb:9c:bf:e3:82:
0e:62:9b:18:97:50:b4:51:fe:26:48:91:94:53:39:10:f0:c3:
de:e0:5c:47:68:6a:95:46:d3:4d:b8:bf:b7:d0:83:f5:93:03:
56:37:39:04:f2:0d:19:a5:05:19:cb:77:9e:ed:aa:a0:c6:22:
37:f4:ee:de:45:73:42:a1:66:f2:47:d3:bc:e4:35:11:d5:7c:
a6:2d:51:b0:84:a1:3c:c8:ba:cb:7f:73:67:27:ab:31:44:a9:
ac:6b:ed:29:18:18:a0:e1:b3:c8:a0:75:43:9c:70:e0:92:5d:
eb:45:38:96:33:f6:59:40:38:dd:f8:02:df:03:c5:f6:c8:04:
9a:58:a3:f1:b8:8f:7e:b0:65:ac:95:83:66:4b:ea:19:bc:0d:
04:3d:fe:0b:de:e9:20:17:9c:7d:24:20:ee:e2:7c:08:4b:d6:
c6:1f:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:00:01 2025 by rpki-client