Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ZL3E7Adz2UxGlx__ehEXq17MBJk.roa
File: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (raw, json)
Hash identifier: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=
Subject key identifier: 64:BD:C4:EC:07:73:D9:4C:46:97:1F:FF:7A:11:17:AB:5E:CC:04:99
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 019425FC1CF4AB96685932A6B4E3719EEF0D
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ZL3E7Adz2UxGlx__ehEXq17MBJk.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203089
IP address blocks: 185.136.124.0/24 maxlen: 24
185.136.125.0/24 maxlen: 24
185.136.126.0/24 maxlen: 24
185.136.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1c:f4:ab:96:68:59:32:a6:b4:e3:71:9e:ef:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64bdc4ec0773d94c46971fff7a1117ab5ecc0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:dd:d3:49:29:b6:32:34:4f:a8:bd:25:32:
d7:94:e4:42:d9:34:ba:2e:fb:30:76:10:6f:c2:c1:
8b:39:f0:31:8d:59:fe:d1:f6:70:8d:7c:fd:d1:60:
c1:e1:48:17:a9:40:ef:50:6a:a0:7c:7b:38:de:51:
dc:06:1a:1b:d3:64:4c:15:d2:20:b4:cd:88:0c:d2:
47:cf:01:5c:fc:26:29:e8:1c:17:8a:b2:d1:bb:5a:
f8:7b:34:6e:57:be:a8:4b:a9:43:99:19:c3:b0:05:
a9:71:8a:36:8c:69:c3:68:9d:22:e1:ec:73:b3:95:
39:e8:ba:32:d2:6a:82:5a:88:a3:cd:12:a4:11:80:
35:a8:24:fc:d8:c1:40:a9:14:8f:4c:16:6c:f9:1c:
72:b2:5f:fa:85:96:06:0a:31:46:9f:01:81:b8:a8:
65:bb:70:58:d7:4b:4f:5f:43:87:dd:4c:95:a5:19:
74:d9:d8:b7:b9:b4:01:50:21:a6:e5:bc:8f:3f:b7:
b9:d0:45:4c:21:40:65:57:5a:f8:94:5b:2a:0e:48:
c8:55:be:c0:a2:ea:88:2b:1d:52:6c:95:de:c1:a2:
12:53:89:55:5b:07:60:e9:b7:9f:e3:93:9c:2a:f8:
6a:ee:70:28:92:27:f1:2e:60:78:19:bf:11:66:33:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:C4:EC:07:73:D9:4C:46:97:1F:FF:7A:11:17:AB:5E:CC:04:99
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ZL3E7Adz2UxGlx__ehEXq17MBJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
61:76:b3:11:39:98:33:5b:0c:c7:69:7e:18:a9:21:7a:bb:4d:
41:28:4b:de:5d:04:f9:68:5c:0b:bf:8e:fd:d5:dc:e9:dc:99:
6d:8c:6c:7b:c6:06:11:83:9a:da:a3:0c:33:d1:5f:54:e8:88:
cc:da:af:6c:25:aa:a9:f2:a8:a9:77:55:0e:fe:b9:2c:ed:fe:
58:43:6c:94:64:45:e5:2d:88:70:c3:94:0f:2a:8d:90:cd:1a:
f9:73:c0:e6:44:38:3d:6d:4b:8a:06:62:b5:99:e9:75:8c:9e:
30:46:5c:b9:c8:1f:a1:7f:65:d0:54:09:da:40:60:5b:11:73:
3c:65:20:cd:1e:23:82:19:ad:c1:69:87:38:d0:1d:05:cc:5d:
29:74:fa:ab:85:27:95:cc:85:2b:ca:b5:27:89:43:9b:40:39:
d5:56:96:d6:06:aa:92:ff:3b:22:ae:fc:93:cb:a3:9b:fa:90:
33:97:fc:17:f5:5a:f1:08:a4:eb:78:5f:40:d9:ea:1f:2b:97:
40:7b:66:35:5f:00:a9:27:1c:66:e4:bc:6c:6d:c2:f4:05:6e:
e8:f6:75:fb:56:d0:8d:ee:98:ef:a6:3b:08:8e:3f:df:f5:79:
67:3c:6d:2c:5a:92:e8:7b:96:76:1b:23:a7:91:c1:96:bc:68:
95:40:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:22 2025 by rpki-client