Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa
File: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (raw, json)
Hash identifier: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=
Subject key identifier: CF:44:37:BF:FB:96:19:04:47:5B:70:D6:4A:F4:A3:8E:5F:2A:1B:60
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 019426D9D564C02AB591E3AC0DA44D815A0E
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205250
IP address blocks: 185.224.72.0/23 maxlen: 23
185.224.74.0/23 maxlen: 23
2a0c:fc00::/32 maxlen: 32
2a0c:fc01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d5:64:c0:2a:b5:91:e3:ac:0d:a4:4d:81:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf4437bffb961904475b70d64af4a38e5f2a1b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:f7:ba:2b:4b:0a:1f:2d:05:9d:8c:03:67:
e4:ea:7b:6f:d8:2b:ed:7d:a1:d5:98:c3:b6:40:e1:
db:5f:f4:11:13:84:e3:00:9d:2e:d0:3a:a7:99:ee:
70:60:5e:ee:2a:88:87:d0:5b:31:2e:b8:1f:e4:f3:
b2:4a:49:61:77:fe:db:23:31:2a:08:76:07:d7:54:
76:a8:1c:0c:1d:f5:31:33:10:93:78:11:4d:8f:3c:
c6:67:47:49:0c:23:c3:06:f5:86:80:2a:d6:43:b3:
45:6d:d1:28:2d:b6:19:81:e6:93:da:dd:4f:81:3f:
c0:48:47:6d:f4:53:b7:4f:d1:fe:bf:6b:c2:7d:4a:
44:69:3e:6b:2e:ad:ff:17:04:5e:ba:08:7b:f1:e3:
42:1a:ec:3b:90:2e:92:52:2e:ac:a5:96:9d:07:27:
53:48:36:4b:ba:34:88:cd:00:1e:fd:34:da:23:eb:
6b:be:8d:1e:57:4e:9d:01:36:77:d4:10:73:cb:5d:
08:17:34:88:16:46:ad:c1:b1:9a:c3:99:4f:59:c5:
5b:30:a0:58:c6:8d:0d:29:65:b5:18:2d:cd:c1:a0:
9c:03:60:3c:cb:59:f6:36:96:ee:da:f5:10:3c:e4:
e7:9f:1b:92:9e:83:3d:e5:58:ba:0d:7d:4c:83:dc:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:37:BF:FB:96:19:04:47:5B:70:D6:4A:F4:A3:8E:5F:2A:1B:60
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.72.0/22
IPv6:
2a0c:fc00::/31
Signature Algorithm: sha256WithRSAEncryption
0b:af:e7:e1:09:7c:d7:f5:25:12:7a:04:b0:c7:d0:a0:6d:57:
5c:ad:3f:28:28:9b:ea:db:44:8c:2d:8b:55:cd:0f:b2:9e:cb:
ca:aa:43:f1:43:07:ce:4e:73:68:6b:b2:09:c9:5c:9a:fb:76:
75:55:e2:c1:3e:6c:4b:f0:7b:56:bd:5e:08:f6:d4:af:87:fb:
f1:57:6d:03:6e:cf:df:5d:9a:7d:14:75:a7:e2:d2:c4:4d:0d:
d3:bf:32:ba:ed:b3:25:91:57:83:67:5a:34:de:ae:b4:d9:ae:
16:7a:7d:cd:a4:e6:f6:1e:a6:01:ac:f1:00:50:9a:ef:49:a8:
22:70:cf:97:5f:a1:da:42:88:18:dc:69:b9:8c:02:f2:41:28:
5f:ab:7e:00:6e:b8:87:82:a9:66:c9:ff:e2:53:a2:10:a8:43:
98:55:a5:06:95:f6:1b:4c:b9:b0:8b:88:7c:7a:e9:b2:73:93:
eb:15:c1:79:85:f5:7e:b6:ec:ff:9f:27:85:4c:ac:b6:07:1b:
8a:99:a9:ae:2a:0b:89:3f:e4:f1:b1:4f:01:95:0c:c3:b5:67:
16:8e:24:5f:bf:35:e4:52:4a:b5:c5:b1:0e:18:c9:f4:36:5d:
27:3f:bc:d2:5a:b3:4e:08:2d:21:ef:c9:10:1a:c8:0e:31:a3:
22:03:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:25 2025 by rpki-client