Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/Zq0wQhBfexCATl78wMgEOyu6_sU.roa
File: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (raw, json)
Hash identifier: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=
Subject key identifier: 66:AD:30:42:10:5F:7B:10:80:4E:5E:FC:C0:C8:04:3B:2B:BA:FE:C5
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 019421B16691B9059B6F5EE64D6F429580FA
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/Zq0wQhBfexCATl78wMgEOyu6_sU.roa
Signing time: Wed 01 Jan 2025 11:47:41 +0000
ROA not before: Wed 01 Jan 2025 11:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.149.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:66:91:b9:05:9b:6f:5e:e6:4d:6f:42:95:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Jan 1 11:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ad3042105f7b10804e5efcc0c8043b2bbafec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:89:fc:f3:5a:e5:41:6e:14:ef:18:79:f4:
34:d3:5e:a6:fb:5c:50:17:1a:71:2d:ed:37:f1:2c:
c6:ff:97:fd:f2:b9:1f:8e:50:29:56:99:77:12:6d:
33:a2:8d:eb:e9:44:30:e9:39:19:ce:9f:45:2c:56:
73:4a:29:0f:0a:53:53:c4:33:2e:a1:c4:d8:30:0d:
1c:7a:ec:34:6b:5b:08:1e:2f:f0:b2:09:25:e5:0a:
da:3a:ff:c6:64:f1:9a:65:89:da:c7:1f:cf:ce:53:
51:a6:15:87:76:a0:3e:d2:04:e3:4b:5e:fb:09:a7:
12:58:9d:b6:cd:2a:43:50:88:f9:0d:35:14:98:d4:
a5:b2:e5:74:63:60:0e:44:b4:09:c1:de:cd:e4:a2:
f3:30:74:81:e6:88:1a:53:68:13:1a:54:be:b7:4f:
bb:c0:9a:51:90:30:0d:f8:a5:5b:89:36:42:f6:71:
27:49:d4:c2:c6:bd:61:f5:19:97:f0:29:e9:30:8b:
2a:06:39:8f:0a:61:e4:2e:e5:6e:56:2b:47:22:49:
ab:49:75:8d:b7:3b:a8:e5:6e:31:be:0e:ef:a6:44:
5d:c9:65:04:d9:fa:e4:84:4c:18:dd:c5:6c:88:0c:
80:a5:4e:4a:90:b7:52:74:3c:7c:24:ba:0a:ed:52:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:30:42:10:5F:7B:10:80:4E:5E:FC:C0:C8:04:3B:2B:BA:FE:C5
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/Zq0wQhBfexCATl78wMgEOyu6_sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.54.0/24
Signature Algorithm: sha256WithRSAEncryption
70:53:45:e4:ed:c5:3d:b0:86:b5:e3:5a:23:65:7f:b2:e2:c7:
56:15:47:32:3c:28:ba:ee:8f:b0:4e:74:73:67:de:39:6c:8a:
14:b8:77:99:f3:68:19:7e:e3:7b:03:50:94:62:60:fa:f3:c5:
6e:95:7e:d8:d0:44:ce:8d:53:90:d5:46:c3:00:1c:61:1d:c5:
ae:e0:22:ba:a9:a4:d3:c5:a6:69:c4:cf:39:f7:1f:92:0d:ce:
be:17:3b:bb:81:0d:c8:ea:06:44:a2:83:a5:db:de:4b:8d:60:
60:7f:c2:3f:fb:64:30:b2:cd:d2:17:cd:d6:93:ef:9f:ef:3b:
0f:e6:47:b4:3e:c6:b8:c5:99:83:07:78:11:a4:c0:1f:e4:88:
3b:df:da:59:d5:08:af:6f:6d:92:16:13:38:5d:ac:12:6e:61:
5e:a1:40:b9:48:8c:bd:62:ed:7a:0f:16:a1:e4:e0:2b:bc:81:
01:35:45:79:82:c2:65:9d:dc:5d:df:18:23:82:73:9b:e3:fa:
95:61:a0:b9:b8:99:86:b6:0a:95:b2:af:6f:e8:23:49:fc:c4:
df:d9:45:f6:1b:0d:45:af:7e:2a:23:34:a1:ea:59:4f:41:0f:
97:4f:d7:45:95:e6:bb:ff:67:19:8b:f9:ee:96:16:90:2c:b9:
12:d7:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:59 2025 by rpki-client