Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/zn5C8fAocAiuB2ZE1nzAyisylHk.roa
File: zn5C8fAocAiuB2ZE1nzAyisylHk.roa (raw, json)
Hash identifier: AAikGT90Pn2msY679R7PQpNXsSFlO6fo1qsXsGW4c7w=
Subject key identifier: CE:7E:42:F1:F0:28:70:08:AE:07:66:44:D6:7C:C0:CA:2B:32:94:79
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019554316BBECE2F60A8F5B9B202062EBAEF
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/zn5C8fAocAiuB2ZE1nzAyisylHk.roa
Signing time: Sun 02 Mar 2025 00:11:19 +0000
ROA not before: Sun 02 Mar 2025 00:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 185.84.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:31:6b:be:ce:2f:60:a8:f5:b9:b2:02:06:2e:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Mar 2 00:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7e42f1f0287008ae076644d67cc0ca2b329479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:ea:6f:23:59:42:66:f2:56:34:bc:20:b3:
01:bf:e4:c2:47:d4:ef:8d:0d:0d:95:22:ec:c2:92:
07:4e:3d:9c:03:d2:89:74:a4:ba:83:94:62:36:08:
e2:b2:cd:ac:65:e3:96:bd:29:6f:9b:fe:38:00:ab:
84:92:72:02:e2:71:95:b9:2c:5f:17:5c:5d:9c:35:
04:79:cd:2d:28:56:e7:79:5c:a2:e2:cc:4d:e3:4d:
97:d6:70:2d:47:c6:b3:b7:91:4f:4a:f6:d0:f5:7a:
62:f1:47:71:c0:ac:f7:c1:45:a2:38:c4:1f:28:c5:
2b:e4:81:69:e5:33:c6:d4:2b:a7:97:db:9f:3e:67:
f1:70:a1:6f:8a:9a:69:35:11:e1:d2:f1:e1:43:f1:
72:9c:0b:b0:89:87:d9:07:61:c4:27:60:c6:21:0d:
bd:ec:9c:e8:8e:e8:8d:9a:6b:64:69:70:3b:bd:59:
01:0d:cc:cb:e5:22:f0:e4:e3:83:3a:0c:ee:24:99:
f1:7f:db:63:a7:83:79:86:81:65:e2:2c:7b:7c:ee:
6e:d3:1e:3d:9d:3a:fb:71:6e:b6:7f:a3:56:13:42:
cf:d8:cb:65:5d:f9:87:e8:d2:35:3b:fe:78:ae:68:
95:ed:a4:10:4f:b6:f1:6e:4a:88:d0:4e:d6:5b:77:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:42:F1:F0:28:70:08:AE:07:66:44:D6:7C:C0:CA:2B:32:94:79
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/zn5C8fAocAiuB2ZE1nzAyisylHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ae:97:d6:25:f1:53:09:fc:37:8d:ee:af:6f:18:0c:d6:0e:
92:6f:4b:39:85:5c:58:c9:b3:59:71:7c:38:4c:d4:f2:63:3f:
12:6c:30:c2:f7:f7:f8:75:03:a4:d4:b8:fe:c4:1e:23:84:a8:
44:1c:b9:e3:4b:5f:04:aa:0b:91:2e:e0:75:12:3c:7c:6f:22:
41:37:07:21:04:4b:a1:c2:27:69:81:4f:df:4e:05:b8:a1:ac:
ab:af:bb:1e:20:7e:8e:53:81:ab:b6:4f:20:25:4e:c4:c9:c2:
b5:a2:28:a2:bb:33:6e:0f:e6:ad:f9:f4:23:9b:7c:62:57:79:
7e:8f:e1:ae:f6:9f:d2:82:b9:4a:0c:6a:c0:1f:6d:c9:28:38:
af:c6:64:3a:79:22:99:18:0a:e5:54:b5:ef:bd:25:a8:8a:df:
af:e9:3f:77:39:e7:31:d0:2a:bb:4a:51:88:00:26:db:ed:0e:
d5:33:87:a4:e1:45:9e:fd:71:5a:95:ad:5d:f7:78:05:ce:86:
37:d6:8c:fb:f1:d4:9d:4b:03:56:c0:20:da:c7:0c:05:01:4b:
5c:31:08:01:97:14:a8:c2:1b:14:b2:be:2a:24:70:8e:b1:53:
b4:49:ba:95:1c:e3:bb:a9:ba:aa:c8:c5:43:98:d4:05:a2:71:
e7:65:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:51 2025 by rpki-client