Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/ZwMecEU89iNwlEPNMqqdNK21CRk.roa
File: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (raw, json)
Hash identifier: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=
Subject key identifier: 67:03:1E:70:45:3C:F6:23:70:94:43:CD:32:AA:9D:34:AD:B5:09:19
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0194258F211EE32F20B8112E2BE5266F56BE
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/ZwMecEU89iNwlEPNMqqdNK21CRk.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.194.100.0/24 maxlen: 24
185.194.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:1e:e3:2f:20:b8:11:2e:2b:e5:26:6f:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67031e70453cf623709443cd32aa9d34adb50919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:cb:03:36:16:d5:11:53:6a:2d:90:44:4f:
1b:8a:1d:5e:b4:22:e6:a9:08:16:70:4b:40:cb:f6:
b9:3f:74:23:7c:08:ac:2d:a1:64:d2:e4:ee:c9:ec:
a3:32:9c:95:80:ac:ee:ae:f8:cb:df:62:52:9f:82:
6c:68:74:64:22:0e:bd:da:03:b9:06:04:e1:d5:7e:
55:21:cb:2a:d9:2a:96:ba:f1:62:8a:d0:3a:b6:34:
4f:8f:ae:b7:f7:93:94:0c:16:dc:b7:e1:d1:58:97:
46:67:10:50:29:44:ec:19:e4:58:ab:12:e1:d5:d2:
c9:3b:aa:8a:70:fc:b8:2f:63:68:9f:a8:c3:78:df:
8b:3e:e7:7c:57:0f:53:37:e9:36:52:32:04:9e:8e:
39:03:ad:3a:cd:e8:53:91:5d:62:23:0b:2e:66:21:
3b:92:b5:85:49:15:af:ee:e1:76:d6:f3:6b:62:de:
eb:67:86:94:1f:e1:26:f6:e5:fc:75:cd:f8:67:ec:
d3:d7:59:46:b6:8a:1a:33:a7:a5:03:61:1d:aa:cf:
f5:6e:19:f8:2a:88:b3:00:0f:f6:1e:ea:2f:85:8d:
88:d3:cc:e7:85:78:27:45:59:d2:9d:47:c9:80:e4:
0e:84:76:9b:63:2c:77:e9:4e:34:12:3f:62:e7:67:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:1E:70:45:3C:F6:23:70:94:43:CD:32:AA:9D:34:AD:B5:09:19
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/ZwMecEU89iNwlEPNMqqdNK21CRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.100.0/23
Signature Algorithm: sha256WithRSAEncryption
65:f3:ef:65:69:21:47:64:5f:6d:4e:44:17:4e:16:85:ec:42:
22:a4:14:84:75:c4:c2:a0:1a:ae:93:17:1a:63:33:49:14:5a:
48:9a:35:84:d7:43:a6:e6:e1:5f:36:28:35:13:a4:e3:aa:9d:
11:a6:20:c2:93:82:87:fc:14:54:dd:30:14:87:ff:42:b1:e5:
b3:8b:1b:88:d2:6c:7d:4a:d8:c5:d2:0c:f3:34:f4:5e:d9:19:
e4:48:9e:64:1d:d3:30:a3:70:4f:ce:a4:c1:e4:9e:90:e1:82:
3c:07:d9:08:ef:5f:bf:1a:a0:5f:ab:d1:25:f8:22:1d:10:ad:
75:91:34:18:6d:8c:68:63:11:20:e4:aa:5b:2b:1a:75:07:47:
9f:84:d8:b3:28:56:69:63:12:ca:46:4c:63:66:5a:46:23:3d:
c1:8c:dd:ac:9e:fc:90:d3:35:39:66:86:11:7a:97:56:05:86:
02:3a:d1:f1:12:76:67:1d:29:d6:64:7b:6a:25:3d:92:7c:5d:
3f:57:e9:54:62:87:e7:19:3c:83:e5:81:91:42:5d:ad:2f:f9:
f4:20:45:30:e3:91:12:7c:f8:cd:25:f1:78:29:4b:5c:ff:7b:
c7:bf:7f:9d:59:cf:ae:db:dc:1b:9c:c4:43:91:4f:22:32:d1:
82:24:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:52:38 2025 by rpki-client