Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/Z1v621cY_8V4JVAO-lmKbZzMnoA.roa
File: Z1v621cY_8V4JVAO-lmKbZzMnoA.roa (raw, json)
Hash identifier: Y+OOFwev9UdXCfYueslTKZxhRozi8DC2jMOFoB0Iz0M=
Subject key identifier: 67:5B:FA:DB:57:18:FF:C5:78:25:50:0E:FA:59:8A:6D:9C:CC:9E:80
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018AACD7AC2C57F4C9A124F7D5F84CB8420F
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/Z1v621cY_8V4JVAO-lmKbZzMnoA.roa
Signing time: Tue 19 Sep 2023 09:48:50 +0000
ROA not before: Tue 19 Sep 2023 09:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.13.226.0/24 maxlen: 24
185.13.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:d7:ac:2c:57:f4:c9:a1:24:f7:d5:f8:4c:b8:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Sep 19 09:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675bfadb5718ffc57825500efa598a6d9ccc9e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:e9:4f:18:4b:57:b5:30:e3:8a:8f:b0:0c:
9c:e1:09:71:ed:11:a3:98:40:ab:29:f0:8e:2d:aa:
e4:de:af:90:25:20:34:c4:71:99:34:55:29:26:3c:
a1:fa:77:cf:05:3e:50:d7:e8:b1:da:07:40:74:ca:
ec:7d:64:25:9a:a7:2d:68:d5:42:aa:74:1f:0b:0e:
21:de:c7:36:81:93:76:be:02:fd:d0:aa:0c:7d:58:
91:75:60:96:6f:7b:d2:49:63:61:f0:d2:bd:a9:e7:
7c:d9:f9:bf:75:ae:6f:fc:0f:f0:21:4d:ea:ea:ce:
4f:6b:93:52:68:26:aa:f5:d7:f6:78:6b:e8:1f:fa:
44:23:be:c8:6f:07:29:68:fd:fd:da:91:b1:6c:23:
e5:0a:1f:bc:38:68:d4:99:2b:c1:c5:d2:3a:e5:43:
ac:26:ca:8f:f4:3f:55:fd:24:95:a7:b6:78:98:35:
25:a7:80:bc:a6:8e:c9:8c:6c:c9:72:97:75:61:7d:
86:60:b9:76:51:9a:4d:f0:72:0a:b7:09:4f:04:71:
b4:4e:d9:3d:5c:ba:97:12:8f:46:78:a4:a5:9d:61:
0b:ad:58:85:9e:84:c3:4a:d9:a9:0f:d7:1a:5c:19:
a7:e6:f3:90:48:81:3d:d3:79:17:ae:74:0d:47:4f:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:FA:DB:57:18:FF:C5:78:25:50:0E:FA:59:8A:6D:9C:CC:9E:80
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/Z1v621cY_8V4JVAO-lmKbZzMnoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:be:6f:77:fb:0f:d1:95:3a:af:9e:a8:ae:da:d4:71:2f:04:
59:42:7f:72:02:9e:58:21:ae:ce:d1:37:65:69:00:2b:1f:aa:
11:49:07:9b:e9:ca:07:e6:a0:a9:99:ac:16:43:a7:0d:92:f7:
d5:d3:c8:61:49:dd:c5:95:03:40:ef:9a:1a:8f:c7:f4:65:a3:
22:f8:04:65:01:38:fe:4b:98:35:b1:ce:80:58:43:a2:2a:97:
a2:a2:6e:26:1c:ae:28:19:98:41:b2:e6:f6:14:e6:8c:3e:23:
cf:ec:a5:f4:10:1c:fd:51:a1:31:1f:46:b1:5a:f9:b2:31:90:
4b:3e:7d:6a:1a:99:11:2a:de:85:71:ca:e7:e9:e5:05:b1:8a:
f3:55:c9:96:9c:5f:22:55:c2:bd:ed:4d:b8:8d:af:5b:97:ea:
25:59:98:d0:67:b4:94:53:49:6b:38:f0:49:62:34:29:68:55:
9c:4c:53:3b:c3:d7:ae:65:5e:68:1a:04:b2:2b:be:21:7a:b4:
76:ab:f2:27:ea:62:13:87:35:66:cb:14:70:5d:37:ee:28:d7:
70:ae:0d:68:73:48:d2:c1:84:60:05:45:fd:a7:06:9c:4a:4a:
be:b5:15:23:b1:ed:80:ea:96:35:61:5c:9d:11:e5:1e:54:34:
e7:58:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:56 2025 by rpki-client