Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa
File: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (raw, json)
Hash identifier: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=
Subject key identifier: 67:15:51:70:7E:A1:19:0B:38:80:22:B3:EF:35:E4:27:6F:F4:99:A0
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0194221FABF35B2E2702E554B3BAD0DB41E8
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 185.18.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ab:f3:5b:2e:27:02:e5:54:b3:ba:d0:db:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=671551707ea1190b388022b3ef35e4276ff499a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:97:8b:4b:29:a4:99:f7:28:53:df:21:02:
ea:3e:4f:bf:9a:21:4f:54:24:cb:4f:8f:d8:9e:f9:
2d:1b:4c:b1:45:fc:b5:4f:92:ac:5a:1f:b7:88:fe:
03:97:1b:f2:61:5f:3c:ae:29:7d:ff:d0:ee:78:b8:
82:ea:14:b8:63:a8:22:f7:ae:a0:69:b1:d0:17:e4:
85:44:37:cf:b9:80:01:b6:38:91:45:04:f7:35:c3:
34:94:f1:9f:ac:90:65:9e:4e:f9:fa:7d:5f:c7:25:
6b:76:e8:38:e8:db:c3:18:73:4e:83:07:74:56:dc:
47:d4:14:32:6c:67:1d:ec:e3:f1:a4:04:a1:59:dc:
cc:fa:4e:e3:4d:24:cd:b6:e1:e3:9a:b2:ab:89:8f:
f2:1d:35:4f:87:46:98:13:b9:06:77:fd:f3:7f:58:
23:85:43:13:74:68:d2:19:64:c9:b7:13:b9:e3:dc:
e2:fc:c5:2f:1b:7e:19:37:fb:c6:e9:70:b5:15:49:
5b:fa:d9:88:4d:45:ac:8b:5e:1e:cd:c7:1c:25:26:
54:75:eb:60:b7:fc:fd:63:0c:88:68:47:90:17:b1:
70:58:ca:38:41:7d:8e:3e:6b:fd:eb:27:a6:ad:ec:
3d:10:a0:f7:61:42:50:f9:40:1a:de:dc:cd:49:93:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:51:70:7E:A1:19:0B:38:80:22:B3:EF:35:E4:27:6F:F4:99:A0
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.250.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c9:33:72:50:8f:8a:a7:21:ec:fe:fd:7c:ee:71:c1:cd:ce:
f6:88:aa:3e:26:ec:1f:05:1b:04:33:86:7a:20:0b:a4:b7:61:
35:0c:5d:de:0b:20:a0:25:4e:ad:61:95:32:e2:d0:31:e5:a8:
54:c5:ec:9c:35:b5:46:39:44:9d:28:dc:d1:c3:1f:b8:cf:49:
d5:71:88:f0:ee:3e:fd:62:f4:9d:b8:2d:2e:36:cd:ff:03:65:
dc:09:cd:45:40:8b:85:c9:e3:99:56:0a:f2:4a:f8:89:06:1c:
54:c5:7d:af:08:d6:16:3d:03:f9:c0:20:36:ec:5b:03:72:90:
f9:0b:50:b3:70:b9:0c:f9:05:c8:81:86:ba:11:b6:c9:af:f1:
f4:38:c9:6d:9c:32:b0:ae:9c:d1:6c:b9:d2:3c:1c:5f:8a:35:
68:4a:f0:2f:6a:d9:17:47:5b:f4:b3:a5:43:eb:32:63:8e:55:
91:fe:ef:27:4b:1e:88:73:c3:69:7c:3d:ce:b4:30:94:8a:00:
1c:c4:28:fd:1e:74:9d:78:1b:76:84:5c:e7:b3:37:a2:dc:58:
16:29:33:ae:ab:50:33:3d:97:9e:2f:09:4c:d1:28:15:64:b5:
5a:21:66:e0:b0:da:56:71:21:0d:c2:ec:07:07:f4:a6:16:81:
5c:f0:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:33 2025 by rpki-client