Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa
File: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (raw, json)
Hash identifier: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=
Subject key identifier: 66:C6:CF:C8:52:9F:0E:71:D2:6D:70:79:45:D7:F2:A2:7E:27:4D:B4
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019426D971560ACE5C7AFDD51A52376A32A2
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206492
IP address blocks: 5.154.170.0/24 maxlen: 24
185.185.32.0/22 maxlen: 22
185.185.32.0/24 maxlen: 24
194.148.52.0/22 maxlen: 22
2a0b:4d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:71:56:0a:ce:5c:7a:fd:d5:1a:52:37:6a:32:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66c6cfc8529f0e71d26d707945d7f2a27e274db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:9c:01:e6:cb:6f:fe:98:42:59:36:c2:6f:
2a:47:ca:81:92:a2:13:ec:bf:29:28:cf:2a:07:ff:
b0:38:d3:22:e9:90:4e:31:62:9d:03:58:1b:18:c5:
12:74:56:8f:b6:31:12:b8:9e:b1:23:90:44:07:63:
8c:46:3d:2f:68:72:ac:56:0d:d4:15:75:9b:42:65:
99:27:69:2d:29:71:81:3f:7f:44:0e:29:80:ac:92:
8a:db:ea:9b:e8:8a:6a:ac:d6:23:97:25:e7:ec:86:
4e:1c:3b:af:ce:69:9f:b0:ab:b9:69:d2:06:a2:02:
a9:4d:f4:58:4e:b1:2a:24:7f:01:99:0f:88:db:e8:
64:d9:aa:13:e1:1c:02:17:f6:5c:39:5b:4f:f0:8d:
91:65:cf:3a:55:1a:30:65:e3:50:e6:da:cb:7d:8c:
32:62:ae:0d:d5:8b:ed:3a:60:80:ff:96:81:9c:06:
9d:d8:87:31:c8:14:de:84:32:8f:a8:8f:2d:f4:5f:
db:87:c4:00:5c:40:59:b4:55:f2:2e:c5:01:e3:ec:
5f:4c:c9:67:43:87:a4:fb:e9:2b:80:28:3d:21:14:
f2:e5:3b:25:49:18:1b:a9:ea:e2:f6:44:bc:9a:1f:
b5:a5:2b:56:fa:39:27:9e:0d:46:04:23:3c:42:d0:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:CF:C8:52:9F:0E:71:D2:6D:70:79:45:D7:F2:A2:7E:27:4D:B4
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.170.0/24
185.185.32.0/22
194.148.52.0/22
IPv6:
2a0b:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:eb:15:3f:5d:01:54:c3:51:c0:39:1c:66:c8:2b:40:a6:0d:
22:b3:ac:83:6d:c4:b1:2f:a7:53:77:0c:00:9f:16:0a:a5:ef:
7a:22:19:45:95:de:92:74:39:35:cd:7f:fc:a3:3e:88:b2:08:
7d:56:65:ab:99:9d:60:e4:15:53:5e:01:50:15:cf:b0:46:ec:
08:0c:c0:75:50:41:af:5b:83:d0:0f:d5:af:35:13:48:c9:55:
1c:e6:d1:79:a9:84:31:42:f8:96:43:45:c8:0d:fc:30:31:e3:
01:2b:ea:31:7b:be:74:bc:05:0f:7c:f6:46:57:fa:09:b7:07:
c3:1b:a8:b4:56:f0:09:3f:c9:84:af:05:99:fb:45:e8:85:ea:
a6:8c:f8:b4:43:ac:a6:05:2d:99:13:45:91:1b:b6:09:be:bc:
ca:e4:92:f8:ea:6a:42:75:52:69:32:41:0b:87:56:a7:26:44:
16:68:eb:c8:7d:0a:5c:3f:a2:83:2e:7c:f4:61:35:84:9f:d1:
b5:0e:a1:d6:90:44:a7:a9:4f:73:85:3c:44:30:93:f4:c1:3f:
8e:ec:3a:55:57:04:dd:ec:28:a3:6e:01:2e:ff:16:a3:f6:b9:
e8:01:c3:f1:80:5e:3f:1f:82:ac:f0:60:52:d0:f5:7d:04:a8:
45:bd:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client