Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/zk47IO6O32s97cD-zK8oMpVMKsc.roa
File: zk47IO6O32s97cD-zK8oMpVMKsc.roa (raw, json)
Hash identifier: xDj9Y9XsoswC7hDJSSUENq2n0oWO4jdSQGJTTqa5DUk=
Subject key identifier: CE:4E:3B:20:EE:8E:DF:6B:3D:ED:C0:FE:CC:AF:28:32:95:4C:2A:C7
Certificate issuer: /CN=ca994929166bbd744165fb64f48c35f9b4436a77
Certificate serial: 0244F3FD
Authority key identifier: CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/zk47IO6O32s97cD-zK8oMpVMKsc.roa
Signing time: Sat 01 Jan 2022 03:53:49 +0000
ROA not before: Sat 01 Jan 2022 03:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60267
IP address blocks: 194.62.56.0/22 maxlen: 22
185.154.56.0/22 maxlen: 22
185.224.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38073341 (0x244f3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca994929166bbd744165fb64f48c35f9b4436a77
Validity
Not Before: Jan 1 03:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce4e3b20ee8edf6b3dedc0feccaf2832954c2ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:0c:9b:72:87:aa:e5:ae:64:da:0a:ef:7b:
92:87:e1:16:3c:e0:32:ba:c8:06:6f:27:6b:40:05:
ae:cf:76:e6:98:8a:27:9f:85:97:54:77:81:3b:e6:
aa:fe:38:70:0f:85:67:a0:a1:59:f9:9c:08:ef:78:
ca:bf:56:bf:b4:3e:e5:f2:a3:3c:27:63:b7:28:af:
00:ce:a1:8b:ae:85:7e:96:7b:0c:04:4d:a1:07:8e:
19:0f:08:35:94:8b:ef:d6:08:2f:5a:70:93:90:22:
98:3e:11:39:dc:ca:45:2f:e3:ab:a6:27:ad:f3:86:
57:d3:6d:ca:87:ce:3d:4f:3a:18:e8:4d:79:0e:7a:
0b:fe:b0:84:af:64:d8:f8:91:8a:b9:5d:eb:88:32:
21:05:00:9e:19:c5:f0:6e:be:99:fb:3e:5d:32:ce:
f5:d6:ce:f3:13:7b:90:7c:40:1a:0c:4b:cd:1c:7e:
e8:c7:7e:e8:4a:d5:31:28:41:c6:67:ca:4a:03:54:
58:4c:f1:12:ea:b0:f4:f8:19:ac:16:31:b4:dd:d1:
30:30:cb:ba:9a:5b:33:ba:b8:74:25:06:32:43:ad:
13:97:80:f7:99:fc:6a:cd:ff:86:ca:c7:a0:1b:68:
1a:d9:8c:cb:b3:94:22:f5:26:ea:d8:79:40:0f:e2:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:3B:20:EE:8E:DF:6B:3D:ED:C0:FE:CC:AF:28:32:95:4C:2A:C7
X509v3 Authority Key Identifier:
keyid:CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/zk47IO6O32s97cD-zK8oMpVMKsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.56.0/22
185.224.48.0/22
194.62.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:2f:2c:94:15:25:86:46:1b:0e:60:62:ad:d8:57:6a:1e:e9:
16:33:79:46:a6:0e:dd:90:e6:f8:f9:26:f9:59:5e:4e:a3:78:
1f:26:eb:d1:3c:ce:b9:e9:9c:0a:96:75:4b:82:8f:5a:4e:2f:
3a:12:94:75:59:ff:af:e4:2a:8a:01:7a:50:47:91:56:b5:96:
74:c5:ac:60:42:4c:1a:34:ec:87:9e:60:64:cf:22:90:b9:89:
ea:e0:b2:da:9f:37:c6:97:fd:ce:1e:c6:05:0e:9b:d4:a6:d6:
89:15:9c:e5:da:bf:6a:a7:19:56:65:52:73:2c:7f:e0:6d:90:
ac:d0:bf:da:f9:dd:a4:60:f2:cd:0d:af:02:36:52:58:5f:9b:
e2:f8:95:2c:e1:a1:d0:d3:df:da:03:b8:e3:36:7d:da:67:0d:
39:fd:6e:b5:c3:fb:85:67:9f:f6:42:3e:53:fc:dd:a3:fa:62:
4f:fe:91:40:2f:5d:40:5e:30:35:61:ce:75:80:f6:a6:55:1c:
28:d5:fb:e5:92:fd:60:53:ca:cb:c3:8b:8e:d4:7d:e6:67:4e:
7d:bf:93:8b:41:71:15:9c:30:5f:cf:4d:be:32:e2:df:48:d1:
28:94:46:47:dc:f5:71:4e:5c:6e:7e:f1:76:75:44:b8:f0:c7:
f1:ed:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:21 2025 by rpki-client