Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/ZTfX1eIYwu2teEKHLHrabIZkJWw.roa
File: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (raw, json)
Hash identifier: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=
Subject key identifier: 65:37:D7:D5:E2:18:C2:ED:AD:78:42:87:2C:7A:DA:6C:86:64:25:6C
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 0194266C4868B01A88331A96AB8F477E909C
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/ZTfX1eIYwu2teEKHLHrabIZkJWw.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9085
IP address blocks: 185.83.232.0/24 maxlen: 24
2a03:6e60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:68:b0:1a:88:33:1a:96:ab:8f:47:7e:90:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6537d7d5e218c2edad7842872c7ada6c8664256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:6c:81:0d:99:ec:24:2b:64:e9:ed:a5:2a:
3d:41:55:91:48:4a:5a:2f:e0:ec:71:18:7f:39:91:
8d:3f:0c:96:8a:f5:54:79:27:87:30:1e:40:19:f7:
f3:13:22:3b:12:c9:17:18:dd:e0:8d:de:95:d0:89:
09:42:ca:93:53:30:43:1b:e6:ca:e4:10:ee:41:2b:
a4:1c:e6:ba:e7:9a:c3:0e:4c:0c:ac:2c:fb:94:7b:
5e:c9:69:92:46:21:9a:21:02:b7:92:9c:3e:75:3b:
ea:d3:fd:17:4d:ad:08:44:f1:09:22:df:c8:1e:8a:
cd:c4:f3:76:b9:4f:04:db:24:cc:85:02:f7:05:83:
4b:7a:0a:25:7b:4a:50:a0:63:63:90:8c:e4:61:81:
3c:11:cb:34:23:15:35:b8:cf:f5:28:98:0d:01:dc:
dc:94:b2:aa:98:ce:6a:a3:2c:90:88:8c:63:bf:ec:
9c:aa:0f:3b:9e:83:51:94:f3:eb:c1:0c:37:ad:14:
ed:9c:22:9d:a2:3b:21:b6:15:49:fa:0a:4e:e9:61:
dd:ca:47:e5:45:33:50:1d:c4:f6:23:12:5c:c3:11:
30:bb:fe:fe:55:7c:2c:0c:21:8b:0d:4b:d6:40:40:
19:b6:05:fe:e4:0a:94:b0:c0:fa:d7:e3:ea:89:82:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:37:D7:D5:E2:18:C2:ED:AD:78:42:87:2C:7A:DA:6C:86:64:25:6C
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/ZTfX1eIYwu2teEKHLHrabIZkJWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.232.0/24
IPv6:
2a03:6e60::/48
Signature Algorithm: sha256WithRSAEncryption
51:23:03:c1:d7:51:76:56:b9:51:5f:6b:0c:19:b2:81:2f:18:
42:22:96:45:89:78:42:bc:49:c6:27:d8:e6:d6:67:20:2c:76:
d6:db:13:96:a0:30:18:30:14:ab:f9:57:c3:75:2c:96:8b:1c:
cc:81:22:fe:1f:fc:17:e8:d7:22:b6:49:2d:08:6d:15:02:85:
9d:f2:be:9d:1b:10:13:15:e4:75:d2:52:02:97:8f:33:73:f7:
8f:b1:27:66:a4:33:a4:17:e5:95:a2:16:50:df:23:78:2f:1e:
e4:14:86:df:40:77:5c:d8:2f:e0:ee:b6:24:6c:3b:b6:ef:54:
8f:51:52:b9:33:bd:f0:7e:ef:f7:2b:b7:ca:d1:37:95:ae:a5:
df:08:7a:18:28:36:9f:04:9d:4d:a9:1a:02:48:f4:ca:22:0c:
51:85:f1:ec:cf:c8:a1:95:d5:01:01:e0:22:71:99:b8:e3:be:
1b:c5:1e:ec:d2:12:15:68:03:83:36:1d:b1:17:b2:06:b7:23:
47:87:5d:c3:7b:6f:4e:84:1e:c4:5c:0a:bb:c4:fe:ca:50:e4:
a9:7e:3f:a2:5f:b9:40:4a:c4:a6:f6:92:66:5e:28:de:dd:1d:
08:0a:97:b2:5e:21:b1:50:77:f2:04:91:a1:df:d1:67:f0:92:
2b:8b:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:13 2025 by rpki-client