Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa
File: Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa (raw, json)
Hash identifier: Hd3GHtUQTqMRi7qf1gZPAx94+btgVUkFfnwpTbzv+nY=
Subject key identifier: 66:0B:3D:FB:33:B3:67:56:D5:72:6C:3F:84:9F:9A:2D:DE:8B:4B:0D
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01951FA9E613F59A3F3D5293498C377AAA5E
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa
Signing time: Wed 19 Feb 2025 19:23:02 +0000
ROA not before: Wed 19 Feb 2025 19:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200202
IP address blocks: 195.216.162.0/23 maxlen: 23
195.216.180.0/24 maxlen: 24
195.216.187.0/24 maxlen: 24
195.216.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:a9:e6:13:f5:9a:3f:3d:52:93:49:8c:37:7a:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Feb 19 19:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660b3dfb33b36756d5726c3f849f9a2dde8b4b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:32:c9:8e:7b:30:61:a4:7b:2f:b4:bb:65:
df:eb:84:6b:51:29:9b:dd:34:a5:02:b9:89:40:ac:
3e:4a:ed:5b:d0:94:42:a0:5d:9f:5d:3b:3a:6a:dc:
cc:d4:2e:12:1c:92:86:84:09:8c:ad:bc:21:40:5e:
ce:56:4f:c2:36:36:b1:77:e2:79:70:09:3c:63:1b:
9a:46:43:e1:55:fc:fa:9a:4f:36:52:66:b8:a2:d9:
29:e5:3e:ce:e3:88:fd:f3:39:1a:65:69:d4:13:54:
6f:1c:10:94:0f:7c:8d:e5:e2:1d:5d:bd:79:d0:07:
db:55:56:c4:b4:26:8f:66:e8:6e:a0:7b:66:f6:95:
3e:7b:ea:74:2e:fd:ad:1c:3e:67:f0:f2:11:4d:e9:
f3:9a:06:d0:81:81:19:fb:60:be:fd:f7:85:6d:66:
5c:81:36:40:17:c0:1b:18:a3:3a:41:2e:cd:46:f0:
c6:41:5b:0b:23:40:18:70:0d:12:19:66:c0:d0:fc:
e9:e5:19:06:fc:c5:ed:a2:5b:56:36:8b:42:c4:8b:
4f:20:9c:b0:f3:6e:61:ea:9a:63:c7:ad:29:2e:2f:
e1:b8:1e:b0:af:a3:74:d4:ae:00:30:ac:ae:79:e8:
09:13:51:4d:de:16:ea:8e:c2:b9:73:e4:93:05:81:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:3D:FB:33:B3:67:56:D5:72:6C:3F:84:9F:9A:2D:DE:8B:4B:0D
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.162.0/23
195.216.180.0/24
195.216.187.0/24
195.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d7:20:70:52:90:e2:f7:9f:10:48:b5:ff:87:13:0e:21:89:
9b:5e:4a:b9:b0:f0:fc:3f:ed:11:fc:35:8f:47:05:87:8f:37:
65:5e:2d:e9:9f:f7:69:a1:4e:08:31:94:0a:e6:0c:00:3c:8b:
2c:0b:3e:8d:71:65:ba:44:48:65:7f:93:e4:b6:ed:1a:e7:19:
12:72:cd:2a:70:d8:95:db:9f:d4:dc:a6:ed:a8:87:68:37:61:
58:5e:41:e5:9a:c0:8b:0d:92:74:a6:69:19:a2:d0:04:90:65:
3d:40:40:f5:26:2f:22:50:b7:ee:0f:50:29:db:58:c0:ff:e3:
a1:be:51:b4:ff:51:91:f6:cf:83:0d:f0:bf:8a:8f:05:32:b5:
d8:55:d7:07:c4:1d:06:b1:39:b3:1a:59:6b:88:c3:ad:bd:4c:
90:70:60:29:ee:a5:83:fa:cc:5a:2d:fd:1e:15:99:62:0e:d2:
4a:6a:b9:e2:9b:f6:3e:8a:40:cc:fe:eb:5f:03:79:ca:bd:6e:
a6:20:2f:86:6b:cc:1b:04:85:fe:27:bd:70:8f:f6:bb:eb:22:
a8:35:0e:90:30:62:ea:c1:7f:36:e1:67:f4:31:4c:84:a6:9c:
37:6d:86:af:14:1a:ee:13:cd:eb:3c:06:52:df:88:a8:94:51:
76:04:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:47 2025 by rpki-client