Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa
File: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (raw, json)
Hash identifier: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=
Subject key identifier: 67:A4:3D:C9:F9:77:7D:E1:ED:B7:CA:A3:78:9A:2C:36:1F:FA:B1:09
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0194266B6C76F4679902E5C39F8D7352E924
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa
Signing time: Thu 02 Jan 2025 09:49:21 +0000
ROA not before: Thu 02 Jan 2025 09:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 185.210.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6c:76:f4:67:99:02:e5:c3:9f:8d:73:52:e9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a43dc9f9777de1edb7caa3789a2c361ffab109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:11:5f:34:5c:54:bd:7f:77:5b:e7:4b:49:
83:47:a1:69:6f:49:6e:a7:fc:84:91:c9:09:2d:d2:
5d:24:3e:d3:b2:62:5e:8b:eb:0e:04:be:43:65:7d:
3b:c0:7c:90:f1:2b:fb:cf:73:e8:02:af:c0:31:55:
1e:8a:7f:ad:e8:ca:ad:a5:3f:4b:b6:37:99:01:56:
fe:4e:2a:59:b7:07:b9:0f:31:75:a7:3f:d4:b1:ed:
66:12:d5:66:b7:6b:f2:bb:32:4d:ce:6b:56:8b:2d:
42:85:09:c0:cf:dc:a8:65:b8:fe:85:bf:16:62:1f:
4b:c1:e4:18:00:b2:dd:b2:76:c2:06:57:09:bc:93:
d1:da:99:a9:a2:a6:70:3b:b2:0e:fd:33:b6:43:df:
7c:35:0c:09:fd:44:8c:37:86:e2:d2:be:a0:ca:4f:
12:5d:aa:e1:e8:e2:52:df:2e:6a:ab:ad:e4:66:c8:
65:46:a4:47:82:de:6c:58:4f:0e:93:ab:20:43:0a:
b2:3c:ab:14:09:a3:7f:f4:35:a4:21:55:7b:a5:67:
52:9f:05:48:7b:85:86:33:b3:bf:ea:7d:f6:c7:23:
d5:ab:c3:33:a0:b4:98:ff:d6:30:79:ed:b5:cf:27:
84:a4:93:01:86:8a:25:ef:2e:09:af:d6:3c:a0:3e:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:3D:C9:F9:77:7D:E1:ED:B7:CA:A3:78:9A:2C:36:1F:FA:B1:09
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:fd:78:27:67:3a:28:e1:bd:09:31:9a:df:56:24:63:91:d5:
0a:62:31:2b:3a:60:b7:ee:54:d4:3a:c4:21:e2:5f:f9:cf:4e:
ed:48:01:68:a5:34:20:76:a8:fc:97:da:22:5c:82:fe:6b:99:
b1:09:2e:a2:63:ca:c8:ae:f2:59:8e:29:fa:38:38:e4:ad:63:
09:53:03:01:73:62:65:0d:0f:0f:4c:dc:1f:e5:4e:4f:1e:38:
2f:54:c9:19:96:59:f1:d4:f8:38:20:15:50:9f:6c:a6:ab:a4:
f7:a6:04:90:66:70:2d:88:ca:22:bb:34:32:36:57:cc:97:1e:
5a:ff:1c:26:2c:5c:eb:0f:d5:2d:bf:41:d3:fa:51:1f:49:e1:
01:3c:38:ca:44:91:1c:4e:d9:23:14:cd:41:0c:9e:74:7a:29:
dd:f1:c4:ed:40:dc:34:91:3e:70:8f:2d:9d:d1:56:db:29:8a:
f9:c8:ed:e1:e8:17:37:2e:0d:42:d2:a4:53:0d:b5:97:4b:df:
fe:41:e7:28:06:0d:4e:d0:31:6d:81:f3:79:db:d1:ba:a9:8b:
4f:cd:3e:25:76:9e:5d:40:52:69:14:3b:55:9e:9d:2a:bb:99:
63:f6:ac:ae:f4:78:06:e9:4e:27:1c:f9:00:9c:50:33:6d:b3:
38:9f:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:38 2025 by rpki-client