Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZKPLRUaDFO6Z7gMd_CowlYT6rXQ.roa
File: ZKPLRUaDFO6Z7gMd_CowlYT6rXQ.roa (raw, json)
Hash identifier: RE/QhN6QqiRpyYFbv9yoigo1ZGhm/Nd93svz9lm5tK8=
Subject key identifier: 64:A3:CB:45:46:83:14:EE:99:EE:03:1D:FC:2A:30:95:84:FA:AD:74
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEC7F4048DDFD59A2ECBD2C126973
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZKPLRUaDFO6Z7gMd_CowlYT6rXQ.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212123
IP address blocks: 185.133.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:7f:40:48:dd:fd:59:a2:ec:bd:2c:12:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a3cb45468314ee99ee031dfc2a309584faad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:19:57:09:04:00:61:2a:31:53:cc:ef:16:
4d:ee:87:4d:5c:b8:88:a4:7c:e3:8b:bd:d1:33:95:
cb:6f:eb:05:3c:c0:52:08:53:76:7e:0a:6b:f6:3f:
e8:1a:a5:70:3d:b1:fc:16:7e:05:ce:2e:08:00:d8:
48:d4:68:75:5f:5a:9c:ff:ab:6d:b7:33:ad:c6:1b:
98:5f:61:60:1a:e1:83:28:ed:3f:84:ad:8c:fc:30:
6e:91:7d:ba:0d:65:42:fa:b8:45:76:78:2c:9f:69:
cc:29:f4:5f:62:8a:55:b0:4d:61:11:b7:18:43:c3:
63:3e:aa:29:18:af:55:0c:bf:71:1b:0f:96:d5:24:
94:6f:5f:dc:2e:4f:62:4a:93:64:01:78:10:07:53:
16:5a:7f:04:97:91:f2:5d:ae:c0:75:b0:1a:ee:60:
e1:b2:26:2b:fc:1a:d5:75:ca:b5:67:52:ae:d8:d2:
b3:59:b1:7e:43:6f:b6:37:17:4f:e0:38:4e:f4:4a:
57:2b:73:52:69:da:e1:a0:da:6b:fa:5f:9b:2a:c5:
75:4c:32:c8:ef:e8:f1:f0:34:b5:3a:13:c1:3c:75:
7b:d6:d2:c9:71:99:99:2e:a7:b9:be:ca:13:70:a7:
30:77:f7:ea:f7:b5:f9:a3:f7:a6:e4:b5:7a:98:9a:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:CB:45:46:83:14:EE:99:EE:03:1D:FC:2A:30:95:84:FA:AD:74
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZKPLRUaDFO6Z7gMd_CowlYT6rXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:74:3d:a2:16:9c:2d:47:17:f0:6b:0f:16:20:58:44:31:bc:
8f:c0:56:69:fc:5f:d8:fd:19:c5:cc:7a:b4:81:55:16:a5:bb:
ed:9b:5b:94:be:11:da:a1:7d:a4:8c:7f:9a:48:65:0c:9f:dd:
55:2b:7f:9d:f2:7a:3a:44:c0:87:16:5b:47:c3:73:81:ce:eb:
30:3d:be:8f:53:5c:7e:59:ec:5c:85:a3:50:21:5c:c3:d7:9f:
f3:d4:00:b5:3d:a8:78:16:82:97:d5:2d:9c:ef:f2:90:27:21:
e2:6c:66:0c:2c:61:e0:58:a4:ef:eb:c6:75:40:74:33:41:4e:
a6:ab:74:93:f5:47:f7:73:f2:56:49:35:52:f7:29:b8:98:ca:
89:fe:11:61:5b:7f:1a:cd:35:81:0a:a2:5f:9c:6c:07:53:55:
0c:7e:d2:d3:a6:39:2e:90:bd:3d:5f:45:aa:92:45:d7:d8:f8:
b6:b7:33:cd:77:2e:5c:3e:ae:da:78:11:a7:e3:bf:e3:a8:91:
d5:ef:cc:4a:73:60:12:c0:0a:9c:54:6d:d6:a9:5a:9b:93:a1:
1b:b3:84:6f:0b:27:66:cb:6b:8c:f3:91:b1:d7:0d:3d:ed:0d:
5a:aa:3d:b6:d7:50:cf:ae:37:09:ba:32:13:11:67:c2:86:20:
c1:e6:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:15 2025 by rpki-client