Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa
File: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (raw, json)
Hash identifier: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=
Subject key identifier: 66:B1:AD:0A:A2:82:2B:A0:F4:84:8D:E1:3E:D5:F3:A1:47:A8:3D:67
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019420D5F4E223CA79AF2E1AB22BCF6ED821
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203184
IP address blocks: 185.142.150.0/24 maxlen: 24
185.142.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f4:e2:23:ca:79:af:2e:1a:b2:2b:cf:6e:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b1ad0aa2822ba0f4848de13ed5f3a147a83d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:d0:45:27:4b:22:da:86:85:a9:58:fb:aa:
f9:ca:ef:a9:73:b1:53:0b:4d:cb:75:1b:76:e3:f6:
5c:27:e5:8d:9a:c6:a5:ed:0c:51:09:50:cf:d4:50:
79:e4:fe:5d:65:a3:c6:ce:b5:ce:73:50:32:a2:86:
84:f8:dd:ee:78:b1:da:81:ac:d5:05:22:f0:6a:7b:
10:ff:7b:22:cf:b9:06:a6:80:97:a7:88:b7:62:95:
bb:fd:00:2b:16:67:46:90:a5:9c:a5:b0:b4:e8:6c:
d8:e3:48:95:83:03:75:49:3c:18:ab:a5:5d:44:3d:
7d:5a:cb:51:82:1c:6b:58:c8:eb:68:80:e4:50:29:
df:37:b4:d0:7d:50:97:47:28:d1:9e:89:81:9d:57:
19:38:0a:5c:17:c9:02:f6:f8:b1:67:81:96:b4:5d:
d5:ae:30:ef:b2:8b:26:a8:42:ec:2e:c2:4e:b9:74:
fd:cb:51:ef:2f:f8:d9:43:56:f8:24:25:02:10:ee:
83:03:c0:3e:91:b7:3f:26:b8:b8:92:8f:cf:01:d8:
ca:08:73:ed:08:1d:9f:5f:f8:57:ec:93:79:87:e7:
77:ce:8e:cd:64:72:a0:11:5e:71:60:70:43:6c:aa:
41:79:e6:75:2e:2e:df:5d:82:53:6b:17:e3:5c:9f:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:AD:0A:A2:82:2B:A0:F4:84:8D:E1:3E:D5:F3:A1:47:A8:3D:67
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.150.0/23
Signature Algorithm: sha256WithRSAEncryption
53:09:7a:49:92:c8:be:46:7a:37:ac:8b:2e:f2:46:cd:0e:bc:
84:1e:01:37:89:cb:7b:f6:11:82:7d:6d:b4:f1:08:dd:eb:8e:
b0:38:15:0a:02:42:81:01:5d:69:c9:96:d5:da:57:23:a4:95:
18:60:8f:80:52:b1:7b:e1:bb:36:80:7b:07:04:42:ef:92:39:
35:dc:7d:3b:ea:a2:f7:69:1a:2e:2c:a5:1b:05:c6:3d:8c:0f:
41:0e:e6:47:99:59:0a:88:09:82:56:26:8a:1b:85:4a:62:30:
91:aa:ce:74:1c:6a:7e:45:56:e8:8f:5e:db:70:86:fa:33:a9:
74:01:55:64:18:a3:4b:60:e1:be:29:6f:a2:43:51:86:75:fd:
a9:a6:a6:57:dd:5c:bb:dc:3d:02:ce:de:a3:e1:14:de:b7:a7:
93:60:d1:30:03:c4:37:22:b7:30:47:fd:75:60:c2:4d:c3:3c:
d3:ff:33:d7:b3:3b:a9:00:d1:9d:65:d3:9e:eb:d3:d0:21:76:
de:61:a8:65:0e:0a:99:2e:96:e4:cd:38:2d:90:07:bc:74:a1:
60:7e:b5:e3:d4:ba:84:48:c1:4d:a3:bd:9c:9b:20:1b:10:b2:
a6:c7:7d:05:f1:5c:6f:1c:f1:e7:ba:a8:c9:62:d8:00:5e:d4:
b3:36:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:37:48 2025 by rpki-client