Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/v_ZP4zccXOYnzl5j950p6kJJ-r0.roa
File: v_ZP4zccXOYnzl5j950p6kJJ-r0.roa (raw, json)
Hash identifier: B81nkLZXDhMsggf8iAJBtIzVj5VwuA7+ktcBXzR516Y=
Subject key identifier: BF:F6:4F:E3:37:1C:5C:E6:27:CE:5E:63:F7:9D:29:EA:42:49:FA:BD
Certificate issuer: /CN=bb7436808a737c5edc65256c74578be35ec41009
Certificate serial: 018682CFFF7F56D12DF2165B1E3A015EB76C
Authority key identifier: BB:74:36:80:8A:73:7C:5E:DC:65:25:6C:74:57:8B:E3:5E:C4:10:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3Q2gIpzfF7cZSVsdFeL417EEAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/v_ZP4zccXOYnzl5j950p6kJJ-r0.roa
Signing time: Fri 24 Feb 2023 09:45:14 +0000
ROA not before: Fri 24 Feb 2023 09:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 194.62.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:cf:ff:7f:56:d1:2d:f2:16:5b:1e:3a:01:5e:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7436808a737c5edc65256c74578be35ec41009
Validity
Not Before: Feb 24 09:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff64fe3371c5ce627ce5e63f79d29ea4249fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:34:3c:bc:6c:e0:72:b3:73:bd:9d:4c:7c:
5b:28:59:58:26:0d:b4:b3:3b:ce:e3:2c:b9:a3:70:
2a:d7:ac:8e:c5:0c:b2:3b:7d:62:8b:a1:0a:5c:f1:
e9:f8:31:98:db:48:e9:c4:4d:75:ca:32:ae:1d:18:
41:e0:25:d9:bf:50:80:d3:52:53:d6:a9:bf:ec:c8:
93:32:bb:90:0f:ef:70:f7:6a:02:1a:5e:4f:db:eb:
86:32:3a:06:db:41:76:80:c8:f3:ae:52:2e:88:c6:
1c:3a:21:4a:df:31:10:78:c1:c5:0b:21:64:1d:0f:
cf:11:3d:bf:64:e1:c5:e9:98:56:f5:f4:43:fe:e5:
61:26:fc:98:ee:0a:21:1f:90:59:4f:1c:06:8f:db:
80:7e:e1:53:25:4f:40:f0:19:66:bb:57:74:f0:77:
50:2d:ac:a0:f7:12:90:0e:f0:ca:95:86:a3:3c:a1:
75:b2:35:80:73:99:11:6b:3d:46:60:28:96:2a:bf:
02:c8:c7:3b:a9:ef:77:81:a7:ad:90:1e:9d:7f:7a:
a3:33:46:49:8b:5e:e5:27:94:e0:c3:98:f0:9d:b2:
e0:8e:26:e9:e6:b4:79:46:fe:1d:8c:41:f5:32:3b:
f1:2a:ab:28:e1:7e:9b:d8:5b:51:bb:e8:ab:f4:de:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:4F:E3:37:1C:5C:E6:27:CE:5E:63:F7:9D:29:EA:42:49:FA:BD
X509v3 Authority Key Identifier:
keyid:BB:74:36:80:8A:73:7C:5E:DC:65:25:6C:74:57:8B:E3:5E:C4:10:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3Q2gIpzfF7cZSVsdFeL417EEAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/v_ZP4zccXOYnzl5j950p6kJJ-r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/u3Q2gIpzfF7cZSVsdFeL417EEAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.16.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:73:92:07:eb:4e:4a:6c:5c:0e:61:e8:35:6b:8e:01:b1:
c7:3c:eb:0e:08:13:7d:50:ac:6c:77:b3:53:06:4e:a0:04:a3:
6a:32:9c:04:7a:d8:7f:a2:ce:2f:55:d6:4c:ad:79:9d:03:61:
6a:69:01:ec:3a:8a:d6:ff:07:79:9f:78:ec:d8:6e:1c:0e:4c:
5c:25:a2:54:b3:24:c8:ea:c4:fa:bf:07:0f:ce:84:ec:97:f6:
63:f3:29:af:f4:4c:a8:ca:98:30:5e:87:f2:fd:c7:06:97:ef:
39:68:1a:4a:fe:d7:cf:e9:44:d8:f8:42:f0:1f:4f:c5:ee:7d:
5a:ab:81:44:ff:ec:d1:66:ff:63:c2:e2:6b:6d:e3:53:53:2e:
06:55:bd:23:88:00:59:33:bd:e0:77:61:b9:fd:ed:56:03:33:
8d:33:e3:4a:8d:95:82:98:a8:69:bf:c4:43:f7:2a:b5:f2:2f:
af:63:c7:b5:d0:b2:a0:4a:7d:05:03:a4:39:3a:e8:0c:cb:64:
e1:96:27:0c:64:5a:56:f0:7d:5c:a2:64:3d:25:fa:41:48:91:
b9:f7:73:19:0f:f5:33:99:50:03:34:8a:e7:cc:3b:a4:9e:de:
ce:ab:38:76:ee:63:e7:49:0b:80:10:b8:4b:de:f3:30:e6:40:
a3:bd:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:59 2025 by rpki-client