Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa
File: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (raw, json)
Hash identifier: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=
Subject key identifier: 64:1D:5B:17:0B:8D:BF:A7:96:76:2B:FC:74:33:2C:32:7B:A8:15:FB
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 0194222041CB407D439209D1B92501EAA545
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49100
IP address blocks: 176.122.210.0/24 maxlen: 24
176.122.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:41:cb:40:7d:43:92:09:d1:b9:25:01:ea:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=641d5b170b8dbfa796762bfc74332c327ba815fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:67:3b:52:49:e9:e5:ea:50:45:14:52:bf:
92:fd:e2:96:13:c5:f1:dd:f2:6e:f8:1c:94:c2:88:
94:ec:01:3e:bb:3c:e1:f2:3b:c9:00:55:01:8c:c8:
c8:f1:0b:7f:15:4d:bc:af:49:c1:b5:2e:01:c7:7a:
38:dd:d5:13:7f:a9:c6:77:34:00:43:e9:45:76:d3:
34:1f:fe:c6:06:00:38:8e:07:7d:53:52:9a:63:54:
e0:1b:ef:bd:b7:8b:e3:be:3f:36:97:82:d7:ab:54:
f9:a6:5d:bf:ef:71:82:79:7c:ee:33:d0:07:c6:0c:
5b:a5:a1:3c:cf:d6:99:7a:f4:94:cc:44:44:8a:f9:
4a:64:ca:97:31:31:f8:57:3e:d2:43:d7:30:ea:3b:
0a:03:83:74:22:72:9e:51:17:3a:bb:41:68:d1:8d:
3c:72:27:91:9f:6e:db:98:38:cc:60:6a:48:e6:cf:
5c:d4:ee:1c:ca:3a:c3:2b:5b:6e:54:6f:b9:22:16:
9d:48:d9:29:18:f9:47:a6:33:24:25:c8:b3:bd:b6:
80:4f:f9:8f:ad:cd:d0:31:bd:1c:51:46:82:94:d7:
50:dd:57:da:63:41:c5:e1:e6:3e:3c:7a:3c:7c:08:
76:44:c5:a6:f1:8f:0d:60:9e:c8:6e:fa:7b:a5:d2:
f9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:5B:17:0B:8D:BF:A7:96:76:2B:FC:74:33:2C:32:7B:A8:15:FB
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.210.0/23
Signature Algorithm: sha256WithRSAEncryption
09:22:cb:2f:17:da:d5:fa:7c:da:b6:21:17:0b:9c:7d:c9:67:
f0:89:38:bd:d1:8b:b8:f4:05:89:1f:5b:bf:f2:86:46:da:77:
56:fd:57:ea:6e:dd:39:47:68:cf:53:e3:5f:af:31:6f:bb:bc:
04:e8:c2:43:45:cc:38:69:63:37:4c:95:01:3c:12:21:cb:8c:
a6:a3:1b:d3:d4:b7:5a:f4:85:83:92:19:51:f8:19:9d:02:4c:
27:1e:4c:0d:a6:62:de:93:e4:85:16:f9:e4:f2:9c:58:bc:31:
1a:40:70:4f:50:3c:1e:d8:b5:2b:f2:2e:2c:cd:9c:a8:ce:61:
7c:16:3f:54:eb:b7:1e:5e:28:9f:77:7c:43:b6:0b:45:4b:2b:
41:d7:ba:53:67:4d:27:34:27:3c:2f:2c:2b:73:75:e7:49:4b:
1c:a3:fa:98:56:84:c3:07:85:8f:73:d2:a3:1f:b2:9f:ce:55:
fb:27:f1:a7:f1:e7:c3:ac:ff:b7:8c:6c:8c:2b:6d:b0:fe:16:
6b:93:c1:bd:a2:a2:c8:9d:30:be:f8:7a:32:85:ee:87:55:6d:
b7:be:39:00:42:44:c9:ba:03:b6:a7:42:79:2c:8d:86:fa:a7:
bd:19:0e:32:9d:f9:c4:36:69:8b:7f:9c:ae:2c:89:d2:c2:6f:
84:d1:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:20 2025 by rpki-client