Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa
File: Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa (raw, json)
Hash identifier: XWJcWE1rzuIso5eYLs4HCvXrfuUzFJEzGlhgGDogzw8=
Subject key identifier: 66:E7:38:9B:F6:2F:62:8F:5D:54:18:27:E3:FD:BC:B5:F7:92:DE:E0
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 019423D74AEC452067BA655AC5CCDB4A108C
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa
Signing time: Wed 01 Jan 2025 21:48:19 +0000
ROA not before: Wed 01 Jan 2025 21:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.142.0/24 maxlen: 24
185.166.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4a:ec:45:20:67:ba:65:5a:c5:cc:db:4a:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Jan 1 21:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e7389bf62f628f5d541827e3fdbcb5f792dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:d4:03:01:8c:cb:19:b4:4f:5b:22:96:a4:
5f:01:f9:db:5e:7d:78:35:1c:89:e2:a7:d3:5a:5d:
3a:22:46:2b:85:8a:ce:17:d6:63:02:6c:36:8f:a8:
1c:f7:ca:65:18:89:b9:24:e8:5f:a5:90:11:7f:51:
93:f0:5b:07:3e:62:e7:a6:cb:7b:60:52:f7:8a:f8:
c6:c8:db:44:63:5b:e6:8d:70:c8:79:dc:29:0b:35:
2b:a1:68:75:64:54:61:71:52:30:f1:ee:37:a4:f2:
f3:37:61:53:ed:55:d7:dc:b1:24:80:c6:19:ec:9c:
01:ea:5b:dd:5f:11:f2:43:20:33:62:bd:3c:53:3b:
cd:8a:af:e8:0b:b8:93:c1:d1:96:28:ff:0a:37:ca:
d8:a7:4f:e1:e1:6f:40:ec:de:cb:b8:ed:3c:f6:3c:
d1:3c:4b:41:45:6e:fd:f4:49:f0:64:c6:65:54:84:
7a:1b:80:12:0f:64:c3:7d:47:c0:25:2b:b1:b4:62:
9e:16:74:e0:55:ae:0e:fd:b7:d8:bb:08:5f:ef:3f:
e1:68:10:c3:ab:b9:b6:4b:fc:5a:1e:0f:73:cf:82:
2f:9a:c6:7d:61:14:58:ed:b0:eb:2c:d5:3b:ae:76:
43:f6:c9:f8:9e:43:b3:59:11:6f:2f:e0:35:6b:2f:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:38:9B:F6:2F:62:8F:5D:54:18:27:E3:FD:BC:B5:F7:92:DE:E0
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/Zuc4m_YvYo9dVBgn4_28tfeS3uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
07:74:07:4c:dc:7f:be:84:ed:48:b2:d1:de:a5:86:d7:30:74:
48:ea:ed:98:8b:e3:b4:7d:4d:07:94:83:93:a9:8d:f4:69:14:
25:b7:36:b6:a4:ed:7c:f5:92:16:9c:d4:cf:31:46:f7:5f:a4:
d4:1e:2d:ab:46:4c:11:cc:42:32:ec:9b:07:18:00:14:72:c9:
52:12:80:9c:54:ad:7c:c4:09:ca:16:e2:25:c2:3b:5b:00:52:
b6:25:3e:21:8b:25:97:9b:7d:62:ad:8f:5b:e2:24:9e:ae:06:
bf:2b:1d:ac:5f:dd:a5:f4:12:a1:41:9a:8a:52:46:a6:f0:85:
44:3d:f3:ac:4f:1a:2f:53:4c:1a:38:8f:d5:04:2b:b6:5b:c3:
88:e4:e8:1d:1c:48:ab:1c:de:66:da:10:42:82:ac:b1:8f:d9:
e6:08:16:0e:27:9d:47:0b:22:c3:e4:61:8a:15:6c:c5:55:e2:
14:1d:54:3a:70:d1:4f:de:ec:d4:12:4c:70:08:b9:15:49:2d:
9f:7f:e9:3e:05:1e:3b:e0:bd:d9:ba:dc:73:49:a7:1e:68:ed:
ec:93:71:f3:76:e6:13:9f:5e:a5:5a:cf:58:5e:c4:e9:85:16:
27:53:14:72:b9:df:66:bb:4d:74:c5:48:d0:73:0e:3c:5a:44:
f4:f7:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:11 2025 by rpki-client