Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZwAX8PbbUeMfj62dqx9511hwKws.roa
File: ZwAX8PbbUeMfj62dqx9511hwKws.roa (raw, json)
Hash identifier: z2kAdYz46vh8HVLUUQWdJyX0WFUbzHsMjXckxsTDgzg=
Subject key identifier: 67:00:17:F0:F6:DB:51:E3:1F:8F:AD:9D:AB:1F:79:D7:58:70:2B:0B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0195CDEB3E5576D67B165290D4C455429C4E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZwAX8PbbUeMfj62dqx9511hwKws.roa
Signing time: Tue 25 Mar 2025 15:28:20 +0000
ROA not before: Tue 25 Mar 2025 15:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62151
IP address blocks: 188.215.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:eb:3e:55:76:d6:7b:16:52:90:d4:c4:55:42:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 25 15:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670017f0f6db51e31f8fad9dab1f79d758702b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:f8:7a:58:61:f5:47:9e:23:d9:30:8b:b2:
94:ab:d0:e9:bc:9b:67:b4:72:33:3a:61:4f:61:0d:
7a:ce:16:f3:08:c5:55:77:04:bd:93:db:ca:25:71:
8d:40:aa:72:7d:fa:e0:ef:7a:7d:15:79:d2:9e:8c:
ac:9b:93:ed:63:c2:7e:d4:27:40:76:fb:bc:e1:0d:
c6:07:c1:18:32:af:fd:d4:58:f6:46:f6:a4:f5:7f:
41:61:db:6c:be:31:9b:88:3f:33:bf:dc:fa:08:ce:
36:83:cb:75:e0:2e:7e:78:a1:4f:2a:ab:9d:4d:18:
49:68:bb:84:a8:31:aa:b1:43:ff:d8:31:f4:08:85:
f7:16:50:3c:cb:0d:2a:41:17:61:fe:78:6a:9f:29:
9b:59:e1:b3:70:75:20:13:3e:8b:51:ea:3c:46:fc:
a9:36:ee:4b:18:54:47:6a:90:a9:b6:01:4d:95:4b:
95:50:84:e7:1d:8f:51:cb:76:3c:e3:1c:68:7e:75:
09:85:88:bc:d1:4d:d1:c4:a0:08:05:59:9e:40:cd:
82:97:d9:5b:26:01:13:b6:94:36:eb:a3:93:99:a3:
88:ee:82:37:e2:8b:bf:a8:a1:2a:38:a3:7e:1a:90:
7c:04:f1:25:fb:0d:81:e7:7e:07:b8:27:c3:93:08:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:17:F0:F6:DB:51:E3:1F:8F:AD:9D:AB:1F:79:D7:58:70:2B:0B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZwAX8PbbUeMfj62dqx9511hwKws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:15:b0:53:74:ed:af:33:6f:c4:83:57:5f:7b:63:00:78:44:
2a:17:32:66:5b:da:dd:fb:35:5f:5f:a0:08:48:07:2f:50:87:
a2:58:a4:4e:6c:f0:3f:c8:8f:07:42:24:47:65:4f:d5:97:ec:
35:b0:59:68:12:48:b6:8e:62:c7:46:5d:26:b9:f4:34:9e:fb:
57:b7:22:ad:ca:a6:32:f7:0b:31:1f:9b:30:c7:4c:af:29:9c:
28:b0:f0:b9:25:18:20:58:ef:f5:3d:29:c4:0b:2f:87:23:ff:
eb:54:92:b4:fe:74:cb:3f:72:37:20:33:db:be:41:7e:47:bd:
a3:bb:00:fc:ac:6c:31:86:4d:d7:89:b9:f2:e6:6f:9f:7e:99:
92:53:29:bb:2d:a6:2d:98:f0:8b:e8:a3:ae:a6:b6:06:9b:f2:
6e:8e:57:6f:4c:ce:e5:0b:20:b0:9a:51:e9:4a:f0:3a:d3:f2:
33:d8:e6:d5:4c:84:ce:de:d6:e8:ab:6f:cc:dd:1d:56:07:0b:
43:c2:04:de:94:6e:7a:7f:ed:ff:07:19:74:ca:79:b7:9e:e0:
6c:0a:5d:b0:98:56:f7:e5:3f:ee:66:c1:4d:5c:9a:75:80:51:
8b:f9:30:66:75:2d:83:2c:fe:1c:65:b5:08:18:cc:57:31:80:
96:4e:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:00:10 2025 by rpki-client