Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/zYbNNn2pDjFT8gDS_6qFcvUdYos.roa
File: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (raw, json)
Hash identifier: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=
Subject key identifier: CD:86:CD:36:7D:A9:0E:31:53:F2:00:D2:FF:AA:85:72:F5:1D:62:8B
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0194228D8854657561A3D01F59AB77D70D7B
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/zYbNNn2pDjFT8gDS_6qFcvUdYos.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.26.231.0/24 maxlen: 24
192.80.20.0/24 maxlen: 24
192.107.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:88:54:65:75:61:a3:d0:1f:59:ab:77:d7:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd86cd367da90e3153f200d2ffaa8572f51d628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:43:ef:40:47:47:22:e6:04:d1:cc:53:0a:
c7:37:bb:3d:c1:a2:09:e3:ee:eb:a6:75:2f:da:db:
48:c9:93:b2:df:92:c0:70:94:1f:f6:47:e5:6a:55:
31:fd:f8:4a:90:91:66:f9:a1:5d:d4:28:63:c0:12:
f5:90:e2:22:c3:5d:d1:9a:bb:c0:de:06:20:3b:1c:
12:54:5b:8f:f9:0e:56:f9:fe:71:55:f1:2f:7f:1b:
e0:bd:0a:2e:ef:4d:52:97:5d:e6:12:d0:f6:49:f4:
4c:c9:47:c3:7c:d5:9f:dc:9e:06:8c:31:4a:9a:47:
7f:cf:cc:06:37:d3:ec:f7:e3:4d:f0:a2:f8:d3:67:
22:90:3c:f7:b1:c5:cd:fd:a2:70:bc:94:96:64:5f:
9d:2e:a3:32:ba:1b:ae:d7:51:bf:70:ab:1d:be:7d:
44:fd:6d:11:96:7d:dd:9f:54:75:a2:67:44:cd:59:
74:5d:57:d9:e6:13:23:06:fa:29:c7:7d:b7:18:07:
5c:f0:3c:59:ed:ce:f8:81:e0:31:65:e6:eb:05:e6:
9b:c8:14:77:e4:94:5d:d2:f9:94:3f:b7:21:c0:b4:
1a:4e:ec:0b:c0:92:3a:5e:78:91:ad:ab:f1:67:fd:
3a:83:19:58:24:73:c2:b0:cb:70:4d:9d:e5:a3:90:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:CD:36:7D:A9:0E:31:53:F2:00:D2:FF:AA:85:72:F5:1D:62:8B
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/zYbNNn2pDjFT8gDS_6qFcvUdYos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.26.231.0/24
192.80.20.0/24
192.107.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:ee:36:03:87:f2:ad:ad:cb:ed:c0:ab:4d:1a:28:44:98:
7c:69:5b:06:b6:e7:9a:73:95:ea:df:73:46:5e:9b:c9:49:87:
6d:95:9e:99:57:1c:86:df:1e:fd:f1:be:9a:0e:f0:8f:d1:f7:
3c:df:aa:98:a8:74:0c:01:48:91:6d:69:a0:14:49:37:f0:70:
0f:a3:f4:7a:7f:50:74:db:59:04:85:57:d8:17:ce:ef:77:1f:
ef:59:89:86:94:65:bc:15:8b:d4:9a:3d:f4:32:b8:bb:7f:d5:
ef:a1:75:4d:b1:ff:95:a4:24:70:3d:99:6e:6a:cd:97:83:2b:
9e:e8:9c:30:d4:88:83:74:a6:0e:94:a9:06:a3:ea:c1:c4:40:
69:9e:10:26:7e:3d:74:28:5b:41:79:34:50:ff:f9:1a:c1:58:
e4:12:04:14:36:19:18:a7:74:4d:26:67:4e:af:24:49:4c:75:
70:81:f2:36:d2:7c:0a:38:9f:5e:00:4d:46:9a:10:11:42:ef:
8e:41:e8:9b:30:2d:6a:7d:c9:60:50:8f:3e:07:78:77:c5:6f:
82:ce:e6:88:dc:82:bb:6a:8b:55:d1:37:b9:1f:21:d7:d5:e7:
19:0e:a7:93:6c:41:3b:c2:c8:2a:d9:46:56:d3:bc:a7:dc:75:
cf:49:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:32 2025 by rpki-client