Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/zexQv7MMnSMTcRcSk7PaXdu5bh4.roa
File: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (raw, json)
Hash identifier: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=
Subject key identifier: CD:EC:50:BF:B3:0C:9D:23:13:71:17:12:93:B3:DA:5D:DB:B9:6E:1E
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 01942368FCBB41A8805CE242AC0BD4328DD3
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/zexQv7MMnSMTcRcSk7PaXdu5bh4.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 91.138.0.0/18 maxlen: 24
185.90.108.0/22 maxlen: 22
2a05:dcc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fc:bb:41:a8:80:5c:e2:42:ac:0b:d4:32:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdec50bfb30c9d231371171293b3da5ddbb96e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:ba:70:5a:7f:f7:2f:7c:d5:a6:5b:67:5b:
54:ea:2a:c2:71:fc:ba:cf:32:31:4b:27:7b:79:7d:
4b:06:e9:a8:bc:f0:60:18:6f:00:c3:63:dc:74:17:
0d:86:21:24:27:ad:c8:8b:bb:dc:d1:92:bd:8a:39:
be:d8:48:ff:b3:8d:9c:87:77:9d:0a:3b:3c:41:e3:
22:16:b8:e1:cb:2f:2e:ef:4c:cc:be:44:e8:dd:5e:
67:44:01:40:66:47:93:1e:1d:43:2f:e0:6e:5c:52:
c5:c9:42:3f:19:a8:ec:22:6f:47:8e:38:e5:0a:06:
36:5f:03:9b:50:a0:31:db:a3:d9:67:e2:05:50:3c:
3f:2a:a1:89:ea:34:33:ef:36:b8:4f:e3:c3:af:c9:
59:06:fe:2e:1e:dc:d6:d9:17:42:e5:8d:e9:76:39:
3a:1a:6a:5b:68:1f:4f:fa:59:7a:6d:55:37:9a:f6:
71:7f:5f:b8:82:42:38:f4:71:5c:21:c8:d3:14:65:
fc:ff:91:9b:df:d6:72:66:ea:2d:94:2f:8b:16:60:
3c:e4:f0:86:d8:42:49:da:e4:82:0d:ab:1f:e6:49:
8d:65:39:3c:bd:64:d9:d6:88:1b:15:94:c0:67:87:
04:28:83:8c:3f:9d:60:ee:e3:9a:e4:19:31:41:c8:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:50:BF:B3:0C:9D:23:13:71:17:12:93:B3:DA:5D:DB:B9:6E:1E
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/zexQv7MMnSMTcRcSk7PaXdu5bh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.138.0.0/18
185.90.108.0/22
IPv6:
2a05:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
61:c8:47:29:bd:97:c5:10:5f:dd:19:4e:a4:b6:59:44:4c:c3:
8a:35:eb:b1:fa:1a:b3:13:7d:9b:da:49:d2:7f:ad:83:72:67:
cc:2f:72:36:3e:a0:bd:24:51:c5:aa:e2:8d:23:8a:17:2f:ae:
57:93:b1:e0:00:f7:fd:6c:f6:99:51:57:91:a5:71:01:d4:be:
d5:18:93:0f:da:a3:93:91:d9:1c:9d:05:3d:ea:50:32:e7:45:
b1:bb:44:57:ab:84:f6:9c:b0:29:9e:a6:36:39:cb:4f:c5:c1:
5a:22:25:e8:34:5d:84:4f:61:9e:d9:9d:7e:a3:26:89:82:a5:
c7:64:27:cb:6b:be:0b:f5:58:0a:77:31:2e:23:58:33:e5:3f:
ce:3e:01:34:07:16:30:20:8d:e9:b6:5d:c4:0d:11:b2:cf:d7:
7e:fc:b4:92:87:1d:18:1d:52:46:78:6b:41:79:23:70:9d:7f:
09:9b:9b:bb:4f:38:ef:fe:3e:84:5c:66:d3:f3:8d:21:f4:35:
2c:8f:a6:b9:39:42:4d:6c:de:c9:1d:88:18:51:19:17:68:41:
70:02:e5:77:17:fa:b5:af:d4:f3:05:12:68:43:d2:6c:6c:9d:
87:d4:77:9c:ec:4a:a5:0b:d9:32:69:06:85:24:da:d3:0c:9f:
f7:64:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:55 2025 by rpki-client