Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Z_4be0A9ZcAsZMWjIrxvdKNwBjM.roa
File: Z_4be0A9ZcAsZMWjIrxvdKNwBjM.roa (raw, json)
Hash identifier: awQAvBMSsvPqiyVBUaJhtszNlvdkNgrF8+NyJbXv4kQ=
Subject key identifier: 67:FE:1B:7B:40:3D:65:C0:2C:64:C5:A3:22:BC:6F:74:A3:70:06:33
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019044620B22E42E4D78132D5E72275C71E9
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Z_4be0A9ZcAsZMWjIrxvdKNwBjM.roa
Signing time: Sun 23 Jun 2024 09:16:34 +0000
ROA not before: Sun 23 Jun 2024 09:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.194.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:62:0b:22:e4:2e:4d:78:13:2d:5e:72:27:5c:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 23 09:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67fe1b7b403d65c02c64c5a322bc6f74a3700633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:01:17:b5:07:2f:be:79:c9:8b:f4:24:95:
e6:13:62:95:31:40:68:90:0a:84:9b:25:21:eb:77:
43:e4:aa:70:54:72:7d:e8:80:16:49:94:74:be:da:
ec:46:66:33:3a:32:5b:04:37:d3:9a:f3:e1:36:03:
ee:5f:65:ca:91:0d:d9:89:5c:33:12:df:33:97:52:
01:5d:17:26:94:b1:7d:35:09:1a:53:c7:85:aa:4e:
fb:b8:59:ef:01:b0:d2:7c:20:2e:90:47:a2:ad:bd:
69:dc:41:85:68:87:b3:ee:5e:00:21:f5:17:fd:7c:
7b:33:c4:0f:0c:9d:2f:ac:93:d6:60:08:3e:ec:8a:
fb:c6:2d:c8:38:a1:4c:c0:7b:e9:0d:ac:02:1a:91:
06:3c:e1:bc:0f:04:3b:f4:98:3c:ef:4c:7b:7d:43:
0f:07:5c:b9:d8:bd:05:b8:6f:87:95:f0:8e:10:86:
83:29:88:99:0a:c6:a1:08:22:f1:a3:37:08:42:74:
96:a6:51:db:b4:df:38:57:71:30:64:19:e3:bf:23:
6c:88:39:a7:5c:1b:59:32:a0:c3:fb:a2:ba:e4:74:
84:4e:40:e3:f8:7b:06:df:4b:53:87:9e:2b:82:f4:
ba:17:e3:0d:0d:7f:5e:99:1e:4e:2f:1a:ae:a3:87:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:1B:7B:40:3D:65:C0:2C:64:C5:A3:22:BC:6F:74:A3:70:06:33
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/Z_4be0A9ZcAsZMWjIrxvdKNwBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:95:81:3e:34:eb:7c:b3:8f:e2:75:2c:85:ba:4b:ac:f4:c7:
a7:88:b7:a1:ae:05:91:41:c3:7e:82:47:95:25:56:b5:1d:12:
7a:e5:41:85:a7:02:e3:ad:5a:1b:ab:a5:25:17:cd:b3:56:24:
4a:7d:ed:9e:01:1e:aa:ac:90:b8:7a:38:fb:41:5c:08:1c:fd:
9d:83:bd:86:1b:da:c9:6c:0a:8a:21:e8:d4:83:62:c9:5a:66:
37:da:04:82:92:c8:fa:b3:f1:9a:5d:5e:ae:26:f1:a8:cf:f5:
1b:4e:2b:70:6a:b7:d9:a4:b3:9f:c4:6f:39:20:75:e3:22:2a:
43:a4:bb:68:f5:74:32:5d:46:cb:c6:d6:81:3c:58:d9:fc:3a:
8c:a9:2e:3a:95:ce:a6:26:a5:1f:68:67:cc:f3:e0:cf:4f:9e:
73:26:45:fa:9a:f7:5a:b8:31:d1:0f:ee:86:cf:33:93:c2:98:
85:c4:db:5d:5d:dc:fc:7b:b4:06:fe:8d:fc:10:08:ca:a6:bd:
d4:45:91:1a:ce:da:a3:42:0a:9d:fb:99:25:55:8c:bd:f0:b3:
e2:7c:e3:8e:56:da:67:7e:54:13:44:f6:53:7c:a1:67:3b:41:
42:45:4d:2e:40:ec:98:91:96:66:4b:51:b6:43:40:e3:15:63:
31:0c:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:48 2025 by rpki-client