Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zdsEMGr0PX8dH_LATwvOAWLrzkI.roa
File: zdsEMGr0PX8dH_LATwvOAWLrzkI.roa (raw, json)
Hash identifier: ZgjSpDZ5EkZekeEIE++V+Ei9ZOjs/PUHqtjpYB9w02w=
Subject key identifier: CD:DB:04:30:6A:F4:3D:7F:1D:1F:F2:C0:4F:0B:CE:01:62:EB:CE:42
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D4380AFE621758A30F0545052B66
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zdsEMGr0PX8dH_LATwvOAWLrzkI.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196695
IP address blocks: 5.183.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d4:38:0a:fe:62:17:58:a3:0f:05:45:05:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cddb04306af43d7f1d1ff2c04f0bce0162ebce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:9f:4e:2f:99:ff:70:bb:e8:10:64:97:7c:
46:92:2f:e7:5f:56:31:fd:81:b8:90:83:ff:6c:57:
d8:91:25:00:18:6d:07:43:d3:cf:70:f3:30:c0:1c:
ff:a2:a0:1c:82:04:ca:d7:1a:aa:85:64:48:a1:3d:
57:2b:40:ae:a3:a3:4e:8d:bc:d0:2e:7f:2e:1d:1b:
68:dd:cb:cc:34:5c:60:eb:77:12:ad:14:19:f8:98:
98:ee:88:1e:78:93:d3:b3:ed:10:2e:2c:62:43:58:
40:27:73:5d:0a:15:d6:27:6f:aa:bf:9b:29:a6:fd:
65:fb:af:5c:15:7f:6f:14:12:b3:f3:c9:9e:6c:1c:
22:c0:62:65:9c:b7:98:97:41:bf:e7:fd:50:95:e5:
c4:b0:f5:4c:f7:51:4e:e6:1c:ad:4c:b1:12:11:51:
b8:bf:85:4f:83:73:64:62:ae:73:7b:c8:54:eb:b5:
25:e8:82:71:29:a6:90:2c:16:4a:94:b4:9d:b1:e8:
5c:48:df:67:76:16:42:a3:8b:64:83:4c:e4:9f:cd:
0a:2f:04:a4:00:77:5a:d9:a0:92:a9:2f:86:d4:6f:
ae:de:ce:8c:d0:05:d9:c1:89:f6:f6:e5:f7:11:d5:
51:cb:3b:40:6a:d7:14:24:28:d4:ee:58:61:5c:d3:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:04:30:6A:F4:3D:7F:1D:1F:F2:C0:4F:0B:CE:01:62:EB:CE:42
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zdsEMGr0PX8dH_LATwvOAWLrzkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.154.0/24
Signature Algorithm: sha256WithRSAEncryption
92:75:d7:77:89:9d:4e:a6:22:3d:38:bc:f4:29:31:16:c6:39:
0c:06:0c:71:a4:c0:7e:7b:db:0d:9b:56:91:d7:82:91:3f:e9:
17:fb:7d:42:c8:b1:d6:05:e4:df:c7:b9:28:88:39:a6:2d:3f:
11:23:b6:3d:c4:03:37:97:de:3d:8c:62:5d:9e:46:2e:a1:67:
c4:7d:82:29:aa:a6:d5:d7:31:c1:01:29:9a:a6:8b:02:d4:00:
76:d5:03:a1:84:6a:03:25:06:66:36:c8:bc:0e:0c:92:dc:4b:
82:32:68:cc:99:d7:06:37:33:04:7f:4e:93:d2:cf:ab:c5:0d:
0c:c5:87:d7:d5:65:b0:bd:a7:2d:5e:b5:f5:57:57:d4:01:dc:
21:a9:17:d4:8d:87:e0:9e:43:41:9e:8f:a6:1f:3f:9c:d3:a9:
83:ee:a4:1b:4c:06:56:7a:b6:94:c4:b9:cc:92:28:37:cc:74:
e5:f6:97:9c:e8:4b:8b:48:ff:60:19:74:2b:39:7c:21:9c:24:
35:10:71:f9:96:2f:ec:e7:d8:6d:23:51:74:cd:fc:cb:33:e0:
a1:3d:af:36:df:70:b5:95:39:83:5b:ae:da:7e:88:45:61:2c:
f6:43:60:19:00:40:2f:17:31:51:86:d0:e3:3b:d7:00:d6:82:
8b:72:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:44 2025 by rpki-client