Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/zf6InO-rxqf5sR2RE4vL8PCK85E.roa
File: zf6InO-rxqf5sR2RE4vL8PCK85E.roa (raw, json)
Hash identifier: GofDtV2Yui6Kfp5uxlwV/sWgKtWgmSL2on672iGvPl0=
Subject key identifier: CD:FE:88:9C:EF:AB:C6:A7:F9:B1:1D:91:13:8B:CB:F0:F0:8A:F3:91
Certificate issuer: /CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Certificate serial: 01833C855B1F10F5DB9F6F4C1664A7DACAF4
Authority key identifier: 6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/zf6InO-rxqf5sR2RE4vL8PCK85E.roa
Signing time: Wed 14 Sep 2022 15:01:56 +0000
ROA not before: Wed 14 Sep 2022 15:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198668
IP address blocks: 176.119.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:85:5b:1f:10:f5:db:9f:6f:4c:16:64:a7:da:ca:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Validity
Not Before: Sep 14 15:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdfe889cefabc6a7f9b11d91138bcbf0f08af391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:1e:7a:c9:dc:40:48:21:78:61:5b:ce:37:
ea:9c:16:bf:21:ca:4d:be:85:77:f7:78:3d:65:fa:
ae:23:40:57:80:af:33:15:45:b8:4c:56:04:cd:6f:
8d:b6:63:1f:db:f9:ac:4b:59:ac:49:26:91:59:f4:
1b:1e:01:52:2d:db:f3:65:39:b4:58:58:67:93:a5:
d1:2b:ca:71:1b:0d:ec:ab:9e:a4:48:89:93:dd:2b:
cd:6e:8b:96:4c:c8:c3:e2:ba:ad:f7:8b:f8:fd:99:
56:15:9d:43:f1:0c:10:13:8d:4e:b3:dc:be:a3:81:
76:af:62:58:eb:69:02:e2:33:5c:85:84:1f:f0:aa:
88:32:e8:d9:f2:6d:54:24:1b:a5:29:75:49:06:f1:
69:7b:cc:1c:82:23:35:e6:9c:14:7f:4d:9d:0b:49:
dd:94:52:1e:98:07:0b:0f:6b:aa:98:82:88:4f:39:
62:f4:32:75:57:84:f5:4f:40:4f:d8:ed:b7:15:25:
49:05:cd:aa:d2:2a:72:8a:25:77:db:35:76:11:4d:
30:aa:e2:e5:53:b7:77:44:a8:52:da:de:08:b2:55:
98:93:f7:7b:bf:98:7c:70:55:9a:95:69:a4:89:40:
ff:26:5b:cb:a5:6e:cb:92:70:d4:bc:73:5e:09:74:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:88:9C:EF:AB:C6:A7:F9:B1:1D:91:13:8B:CB:F0:F0:8A:F3:91
X509v3 Authority Key Identifier:
keyid:6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/zf6InO-rxqf5sR2RE4vL8PCK85E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/bslGy0-fj7Q6bY_uz8J8HCE7GQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.192.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8b:5e:88:14:58:e9:b9:77:3b:fc:78:69:83:38:70:a1:18:
ba:51:a9:35:e7:9c:64:a9:ec:26:a6:f2:ab:0a:51:24:28:93:
f2:18:3e:2e:bb:a7:e8:e9:33:4a:55:4d:ed:57:f4:cb:c4:82:
2c:ce:bd:f6:18:8f:3f:ca:c5:ff:00:24:ee:20:0a:20:87:fb:
b9:bc:e4:ab:6d:a3:55:93:b2:8a:9b:2a:ac:ba:84:57:17:59:
6f:48:04:b2:1e:50:b8:96:f2:3c:fb:ae:5a:d2:61:02:46:8a:
a2:4e:0b:02:3d:61:b6:ba:9e:bc:eb:1f:c2:a2:cc:b9:b8:71:
32:b8:50:df:db:27:5f:e4:9e:96:a1:ee:a4:87:c0:76:6c:fe:
2d:04:e7:0e:46:ac:e2:dd:7a:17:cc:aa:df:bb:2c:90:1f:80:
f1:c6:a8:74:d0:6e:43:70:4f:7d:1f:68:41:d1:ef:1c:fb:2c:
b3:64:d0:ca:87:e8:c8:9d:11:31:45:08:dd:ee:e4:29:89:e3:
4c:68:ce:af:95:15:44:51:8d:5a:6a:99:80:c6:93:15:f7:a2:
46:02:a3:76:87:66:49:57:fc:e1:56:db:bc:8f:7a:a7:f6:ab:
9f:c6:1b:f4:7a:cf:ed:77:85:12:e5:f2:1f:0e:96:97:c9:2f:
5c:c1:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:09:49 2025 by rpki-client