Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/z6ZchbUwtdpz1UJIozdf3Vyzbas.roa
File: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (raw, json)
Hash identifier: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=
Subject key identifier: CF:A6:5C:85:B5:30:B5:DA:73:D5:42:48:A3:37:5F:DD:5C:B3:6D:AB
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 019427478BB638C1C87290A10EB25620AAF2
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/z6ZchbUwtdpz1UJIozdf3Vyzbas.roa
Signing time: Thu 02 Jan 2025 13:49:47 +0000
ROA not before: Thu 02 Jan 2025 13:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396362
IP address blocks: 185.129.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8b:b6:38:c1:c8:72:90:a1:0e:b2:56:20:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 2 13:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa65c85b530b5da73d54248a3375fdd5cb36dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:2d:b7:a7:d6:63:8b:55:c3:fa:53:a9:e8:
66:50:43:e9:b8:cf:a5:88:da:9b:4f:0e:80:3d:68:
c0:7a:74:92:0d:a1:28:37:d4:bb:58:66:ca:a5:8c:
52:ab:fc:c5:39:08:ab:57:58:a2:4b:f5:cb:e2:5f:
5e:96:d9:87:b6:fa:2e:31:bb:14:ff:9f:e2:47:bc:
57:2d:fa:ed:19:9f:c8:87:4b:ca:28:09:a8:d3:64:
7d:b6:34:ea:3e:b7:4d:5d:fa:9a:e1:d6:7f:9f:0e:
ef:b5:bb:1b:a7:d1:50:f1:18:59:77:7d:b5:0d:b9:
cf:a4:72:93:f9:2a:34:b8:d0:15:d7:03:e7:74:e8:
59:08:00:0e:81:99:e6:fd:d8:f7:4a:e5:83:00:9c:
6c:25:a5:e4:0d:2a:27:12:ac:56:ba:fe:4b:56:43:
bd:7c:70:11:59:5e:0d:46:bc:c0:ec:d3:cf:11:be:
63:08:5e:ff:6a:c3:f5:ae:4d:f6:c4:e9:ef:b5:d0:
ad:a4:2a:77:72:fc:7f:b9:b3:a6:ed:f2:da:04:6a:
a1:41:a8:d8:2a:1d:f6:10:5a:96:a9:9e:72:49:73:
96:b8:5e:8d:b8:88:a3:9b:c5:bb:d5:f3:ec:86:69:
52:dc:73:66:b9:df:87:4d:4a:4a:ec:55:73:28:91:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A6:5C:85:B5:30:B5:DA:73:D5:42:48:A3:37:5F:DD:5C:B3:6D:AB
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/z6ZchbUwtdpz1UJIozdf3Vyzbas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:21:5c:93:fa:67:38:99:f9:b7:48:52:9d:dd:75:ac:19:50:
f5:7e:2a:1e:39:06:da:7a:65:ee:fc:c0:d7:a0:70:a0:21:51:
af:c5:a4:62:0c:62:de:92:f1:d0:22:ea:0b:fb:ce:09:e0:f0:
b8:d3:82:16:f3:e8:7d:af:6b:27:2f:af:ab:61:03:71:dc:39:
88:cc:e9:71:79:7f:81:31:5a:cf:d5:6e:7e:4b:9a:a4:f3:48:
b9:0e:9f:56:48:2f:90:d6:63:d5:40:af:1b:b2:19:ca:50:83:
aa:4b:1e:0f:c9:83:73:11:86:aa:bc:fe:ad:c4:b0:51:d2:4e:
17:c9:1f:5c:16:21:83:15:d1:aa:a4:19:24:8c:7f:ab:04:9d:
cf:51:c5:e8:f5:58:c8:05:36:85:89:8a:01:77:b1:3d:ed:4c:
52:ec:90:10:5e:14:70:c2:6b:6b:1e:6a:cc:9b:c0:56:9d:74:
96:af:8a:9a:15:20:a8:74:5c:d0:35:73:92:5b:8c:d4:fb:eb:
ce:7e:8d:68:75:2e:22:cc:22:ce:0c:50:af:4d:8d:72:d0:50:
3d:9c:7b:ee:ca:e0:9e:3e:98:b4:cf:b6:24:34:00:19:42:da:
1e:3e:37:e8:ee:0d:71:85:e4:a0:3d:0c:e8:bb:ce:f4:5f:1a:
91:f8:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:51 2025 by rpki-client