Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/zVP0WV1JTUWb_PueuiHh6FiFsyE.roa
File: zVP0WV1JTUWb_PueuiHh6FiFsyE.roa (raw, json)
Hash identifier: izN83QGaV3k5xpiCLfbnG7WLdNtPXTHrT5161L6Wqeo=
Subject key identifier: CD:53:F4:59:5D:49:4D:45:9B:FC:FB:9E:BA:21:E1:E8:58:85:B3:21
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01856D4AB433A618B6BB62DE0DA46E1EDF14
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/zVP0WV1JTUWb_PueuiHh6FiFsyE.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 178.255.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b4:33:a6:18:b6:bb:62:de:0d:a4:6e:1e:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd53f4595d494d459bfcfb9eba21e1e85885b321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:3b:cd:a6:24:e9:3b:ca:e3:4c:2d:09:8b:
a6:ea:e9:80:e4:05:fa:18:1e:ff:84:04:5c:d9:df:
76:c0:ad:a2:b7:ca:2e:32:9a:bf:50:5f:98:19:87:
a8:b4:77:b8:69:29:58:27:2f:eb:99:6b:e0:4d:c3:
d8:87:b9:61:9d:3d:2b:fd:bc:1c:d4:bb:4e:c0:9c:
7b:11:6c:ab:5d:04:23:25:79:4f:4a:a6:4e:9f:31:
30:07:3b:76:9c:e3:29:50:84:96:38:12:03:c8:9a:
89:55:39:6d:c1:87:ef:8f:94:f8:bc:38:20:b2:d3:
35:90:36:80:81:af:47:8e:74:f7:c9:ea:58:8d:04:
9e:07:69:21:c0:6b:22:9d:a1:02:fc:06:6f:00:32:
8e:8c:4b:a2:c7:51:5e:86:22:e4:41:f6:c4:99:ad:
4c:d2:fb:ff:55:07:c6:fc:7a:7d:b1:e5:69:79:fa:
6c:dd:db:61:d3:86:01:eb:b0:f6:d3:9d:a8:b6:f2:
c0:79:6f:09:4d:49:8b:45:c1:3d:11:dc:ed:a1:8a:
ce:43:f6:66:fb:1a:33:cd:d4:8c:bf:a9:b0:e2:34:
a0:41:bc:01:93:93:10:c2:7e:00:94:8e:72:fa:82:
d0:fa:f2:92:b5:6e:a9:e5:d4:a9:f0:0f:68:94:2b:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:F4:59:5D:49:4D:45:9B:FC:FB:9E:BA:21:E1:E8:58:85:B3:21
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/zVP0WV1JTUWb_PueuiHh6FiFsyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.219.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1c:9f:b7:78:a6:5d:6d:2d:9d:1f:77:66:5a:12:3a:2a:57:
7c:23:9e:41:8a:4d:16:8e:65:0a:e3:8f:87:7a:0e:70:97:9c:
32:28:e7:9e:a2:4e:1a:bc:75:ac:19:4e:88:44:ab:62:3c:52:
24:62:3d:98:3a:74:f8:5e:78:3c:96:b2:67:bf:3c:93:25:20:
a1:0c:9c:91:40:02:ce:13:a5:fa:ee:43:e0:cd:68:2e:8c:8b:
29:88:7d:15:30:b6:74:68:fd:17:a1:f1:ba:c8:21:76:bc:a6:
12:c3:e6:9d:e7:34:d6:ac:31:5c:56:c0:32:93:cb:8d:4c:37:
54:b3:c3:b7:10:2d:a0:8c:5e:ff:f1:ca:8f:ba:23:e0:9a:57:
d7:26:b4:f4:00:9e:50:c5:92:16:26:e4:85:cc:f2:21:cf:cf:
c0:4b:33:26:bc:f4:be:47:69:38:67:4d:d8:4b:93:d1:8e:1d:
d3:a5:43:3b:44:72:60:19:56:d8:df:90:43:ab:6d:61:fe:04:
54:be:8e:f6:a0:a4:d5:58:eb:ca:79:aa:8c:cf:da:d0:0c:4f:
28:02:0d:dd:b6:35:3b:b5:cb:08:f0:b4:e9:79:c7:fb:f0:21:
56:b7:16:b6:fc:50:68:0e:61:c8:57:f7:d2:58:63:7a:4f:20:
01:e0:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:12 2025 by rpki-client