Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/JZnjiyqwkx_CxEPoSVlUa9g7NIw.roa
File: JZnjiyqwkx_CxEPoSVlUa9g7NIw.roa (raw, json)
Hash identifier: edSiQZJode6VwxF5YpPYb1iZqjINHZ2xmmqVgZbkUQI=
Subject key identifier: 25:99:E3:8B:2A:B0:93:1F:C2:C4:43:E8:49:59:54:6B:D8:3B:34:8C
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 08CFB597
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/JZnjiyqwkx_CxEPoSVlUa9g7NIw.roa
Signing time: Sat 01 Jan 2022 15:59:54 +0000
ROA not before: Sat 01 Jan 2022 15:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57747
IP address blocks: 188.227.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147830167 (0x8cfb597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 1 15:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2599e38b2ab0931fc2c443e84959546bd83b348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:7d:e0:6f:67:d0:b5:24:a2:3f:60:43:16:
67:f4:51:90:e7:18:c8:0b:e5:b7:e6:93:5a:5b:d2:
c5:d2:83:9b:cf:19:ec:36:46:b1:e5:4a:03:b3:06:
9e:58:46:9c:d4:98:78:0b:34:a6:d8:38:cd:68:b1:
09:34:75:35:bc:bd:71:8e:c9:e9:44:49:c2:b9:46:
49:ab:7f:c5:de:84:8b:ee:3a:d3:83:b1:0a:3d:86:
97:a4:57:76:4c:f2:57:0a:ce:e4:66:7c:1a:30:ef:
d9:9d:c8:fa:c2:21:c1:47:71:c5:d2:df:be:eb:57:
ab:6c:d3:a8:dc:ec:05:d7:75:b9:54:98:cf:c3:80:
ae:8e:96:64:ae:4f:29:07:ac:92:b9:d9:67:63:9e:
45:c5:57:3d:24:9d:09:2b:41:9b:17:75:2d:6f:99:
24:9e:75:9b:32:a2:56:8f:ef:a3:53:fb:50:46:e2:
53:0f:8e:38:88:4e:c5:4a:62:1d:39:a5:42:76:bd:
69:f2:81:37:54:64:dc:69:9c:1e:78:16:64:87:be:
a6:19:a5:c9:3c:9d:6d:bf:92:97:ed:f3:bd:98:f0:
87:9f:bd:ba:e4:19:0a:1c:93:bd:45:a6:6d:f5:f1:
4d:15:71:a9:4e:1c:e3:62:01:1f:b5:ee:09:3c:f8:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:E3:8B:2A:B0:93:1F:C2:C4:43:E8:49:59:54:6B:D8:3B:34:8C
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/JZnjiyqwkx_CxEPoSVlUa9g7NIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:48:92:b7:bf:1a:6d:b9:c6:7b:8b:f3:38:47:f9:5d:91:cc:
67:ab:7f:86:12:f8:e1:4a:4d:74:ed:81:10:d6:c9:4b:ad:e6:
99:f0:4e:7e:94:d6:98:34:85:25:0a:04:00:5d:28:f3:2c:83:
a3:8f:e2:d9:cb:7f:77:9f:6b:06:25:ee:09:9a:ae:6c:41:4e:
25:7c:00:7a:86:c7:69:77:5b:c5:d7:54:7f:5b:21:5b:e1:7f:
02:25:c9:ff:f0:73:5f:ce:cf:29:18:e8:df:28:6b:e4:f3:6a:
82:e9:b3:c4:ae:aa:74:59:2a:06:8d:b9:a3:2c:a2:ae:12:09:
93:dc:de:2f:e5:5b:32:c4:13:4f:b0:ca:a4:6f:c3:b9:80:9b:
64:cf:88:e5:23:7c:9c:b0:df:a4:b1:91:fc:ea:20:e4:fe:70:
8a:fe:ee:69:d1:d5:ba:0a:a9:c9:b7:8a:97:70:34:19:ed:72:
08:73:1e:84:cc:28:9f:d5:ed:a4:92:bc:16:3e:7c:a4:ca:36:
04:ae:f2:db:23:e5:af:32:ac:8d:3c:d7:23:21:d1:34:63:42:
bc:40:26:67:6e:db:07:62:ea:bd:bf:50:dc:88:2d:fb:e3:ed:
84:84:bc:7d:73:dc:10:d3:9b:a4:9b:eb:c9:24:47:2d:04:6a:
0c:79:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:35 2025 by rpki-client