Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/zzJiEA9OQiotmK-6chwppb9bfAg.roa
File: zzJiEA9OQiotmK-6chwppb9bfAg.roa (raw, json)
Hash identifier: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=
Subject key identifier: CF:32:62:10:0F:4E:42:2A:2D:98:AF:BA:72:1C:29:A5:BF:5B:7C:08
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D65F353A5D34240B74F65C391885C
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/zzJiEA9OQiotmK-6chwppb9bfAg.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 188.116.20.0/24 maxlen: 24
2a02:c6c1:e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:65:f3:53:a5:d3:42:40:b7:4f:65:c3:91:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf3262100f4e422a2d98afba721c29a5bf5b7c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:19:a7:eb:33:47:9b:e2:e0:de:0a:c8:f2:
d7:60:72:c9:c2:f6:21:28:36:90:4a:b8:53:7b:1c:
28:39:19:6e:58:8d:91:1b:b5:3d:b4:85:2c:18:db:
7b:8e:56:64:60:98:07:a0:b6:d5:ad:cd:79:78:a0:
ef:54:01:04:dd:1f:28:bd:ed:a0:f5:86:c9:5b:0d:
42:2f:fa:9c:aa:38:74:dd:3c:d9:78:06:84:35:6f:
70:dc:3b:67:b9:00:3d:5d:47:cf:fc:03:d8:ae:65:
de:fc:8e:f5:03:9e:2b:82:9f:96:12:5e:ff:1b:82:
1a:28:eb:33:0b:5e:78:97:31:db:9b:43:fc:21:87:
05:98:f8:fc:9c:38:48:51:3d:5f:d1:64:ce:6a:9f:
f1:0f:8c:b1:48:ac:20:89:31:a6:f6:3e:63:35:39:
7a:0c:e3:02:8d:95:3a:59:ec:c9:a4:f4:07:02:98:
a2:b7:ce:99:c9:fa:2c:e0:c8:b2:5f:1a:1c:a7:89:
b3:cf:69:21:c7:57:9e:2c:68:23:46:60:ad:fa:4f:
f1:4d:08:9d:cb:28:6b:17:d3:d8:85:66:2f:9a:68:
46:97:f7:26:fe:e2:29:89:c7:d8:e1:43:0d:94:8e:
09:5c:e3:e8:3e:05:f4:f9:da:ac:bc:ed:63:9f:aa:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:62:10:0F:4E:42:2A:2D:98:AF:BA:72:1C:29:A5:BF:5B:7C:08
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/zzJiEA9OQiotmK-6chwppb9bfAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.20.0/24
IPv6:
2a02:c6c1:e::/48
Signature Algorithm: sha256WithRSAEncryption
94:7f:cf:99:67:24:24:18:7c:b6:1c:7d:65:f7:24:69:33:ce:
d2:7d:3d:cc:92:18:9d:c7:ed:0e:99:18:3b:9c:65:cb:b6:ef:
32:dd:37:99:7e:59:f1:d5:b7:b2:80:75:f3:b6:5c:c1:e2:9c:
a8:4f:c4:ff:3c:47:37:3f:61:71:6d:e5:00:a7:5b:09:ea:20:
58:f8:09:6f:07:cb:cb:49:86:7e:50:c7:30:d2:14:19:32:8d:
cf:0d:fe:14:ff:8d:39:86:0c:e3:84:81:5a:bb:07:c1:68:c1:
ae:3a:f3:f9:8c:08:9a:b0:ae:0e:81:9b:23:b5:ee:bf:b1:75:
3d:ae:2d:3b:a3:7a:76:bf:f1:73:f8:60:5a:be:c2:86:b2:d4:
1f:34:13:13:a0:80:1f:29:76:90:e0:51:db:8e:f9:57:23:10:
37:11:4d:ca:fc:9e:36:12:a1:9a:8f:95:1c:58:d6:fb:17:b3:
e4:cd:9a:ce:74:d1:b3:72:da:aa:00:f4:64:23:91:0d:b4:be:
93:af:0e:2a:50:64:ef:e4:a2:c1:88:13:de:98:2b:ff:c8:4d:
58:38:77:ab:51:cf:85:ac:14:99:f1:3e:5e:5c:a1:92:46:18:
d2:6a:e2:cc:7d:97:f4:dd:4a:f0:52:85:1d:a8:45:ac:ee:ca:
7b:15:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:48 2025 by rpki-client