Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/4ZdC__6SVos2E90y8EHTiJ4hkSU.roa
File: 4ZdC__6SVos2E90y8EHTiJ4hkSU.roa (raw, json)
Hash identifier: jvbgY4UQUkwEOW21qcYqy5W3bNJZ0OnFgJjh4wKY1Bo=
Subject key identifier: E1:97:42:FF:FE:92:56:8B:36:13:DD:32:F0:41:D3:88:9E:21:91:25
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0185CBBDAEE30BEEFA6731D96C348FE5FD2E
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/4ZdC__6SVos2E90y8EHTiJ4hkSU.roa
Signing time: Thu 19 Jan 2023 20:34:43 +0000
ROA not before: Thu 19 Jan 2023 20:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209706
IP address blocks: 185.200.204.0/22 maxlen: 22
176.223.172.0/22 maxlen: 22
176.223.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:bd:ae:e3:0b:ee:fa:67:31:d9:6c:34:8f:e5:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 19 20:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19742fffe92568b3613dd32f041d3889e219125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:6d:74:f4:7c:d2:9a:dd:4a:13:bf:d2:e8:
61:1d:45:f4:0f:b5:75:25:f5:0f:02:27:70:35:44:
4e:53:34:34:65:7c:bd:e7:6d:08:c8:26:4a:51:72:
8e:50:1a:6b:3c:63:84:55:7f:d0:2c:f4:7b:25:30:
56:eb:66:50:c0:7e:ab:09:c2:10:6d:7a:2b:4d:dc:
d6:05:81:33:f9:8d:37:7a:70:46:16:d0:5b:52:15:
30:57:c5:4f:c3:63:45:25:59:ed:e4:09:9f:4e:ca:
06:91:b8:c7:9d:a2:76:af:72:24:df:08:fd:bf:6b:
68:4d:a5:b6:0f:83:f4:ce:bc:0b:10:3a:f6:af:6c:
2d:fa:20:71:86:4c:c0:bd:86:22:2a:fa:c6:38:07:
67:fc:42:45:82:ef:87:98:67:c6:da:78:92:cd:ed:
6c:b4:c5:fc:db:57:8f:4c:03:cc:23:be:12:5d:27:
73:75:32:b5:94:33:74:22:ff:b8:e2:9a:8f:a1:9d:
d0:fe:d5:76:86:49:16:23:26:9a:86:7d:28:66:23:
68:bc:90:ec:b5:36:1e:23:04:ce:00:c0:53:f6:11:
9e:08:f8:ea:1c:9e:a5:9b:22:5c:cd:e0:af:3e:73:
41:96:ed:a5:24:cf:06:e7:43:24:bb:65:57:52:42:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:42:FF:FE:92:56:8B:36:13:DD:32:F0:41:D3:88:9E:21:91:25
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/4ZdC__6SVos2E90y8EHTiJ4hkSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.172.0-176.223.179.255
185.200.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:e5:5c:2a:41:ad:f5:c4:99:de:80:ab:e9:4e:fb:f4:17:c4:
07:a1:fe:64:7c:0a:f1:d8:28:c9:03:9c:c7:ea:e6:37:60:83:
2b:64:49:ba:8f:c0:96:20:f2:4d:9b:b1:0a:15:d6:8c:ef:36:
af:a5:2a:10:23:f7:88:c5:3c:73:33:0b:f1:eb:66:cd:99:aa:
55:b9:d0:7c:9a:18:49:0b:7b:5b:58:c5:ad:32:fe:b9:72:d1:
ca:4a:d0:a8:dd:2e:c8:96:35:77:36:0b:25:25:33:f7:c9:59:
0c:f9:f4:1a:f0:43:f8:29:a8:09:7e:d3:d2:9f:ac:5a:04:c2:
36:a9:59:d7:2e:7f:8a:16:96:e5:52:06:8b:d6:16:8b:57:98:
97:a0:ee:09:d1:2d:e6:cd:47:b1:75:1a:54:af:69:77:de:7a:
6d:c3:ea:f5:47:d8:7a:92:07:06:ed:48:a2:9e:ca:f8:14:4a:
99:2c:c3:21:af:e9:6c:71:57:c5:48:21:09:c1:0b:2e:73:a4:
99:9d:a4:fd:a4:0d:6d:b6:6b:62:e6:8a:11:41:04:df:5e:6e:
f6:31:fb:12:cb:d7:c1:6f:40:a9:5a:d3:c7:de:49:a1:19:7e:
aa:ac:17:f8:cc:85:9c:64:bc:0a:7a:a8:6b:2c:01:38:02:bc:
03:fd:90:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 12 07:02:21 2025 by rpki-client