Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa
File: zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa (raw, json)
Hash identifier: Q0q32VFfOCjMHFily+APZO+VNJLfH93qyBTv6PbjoyE=
Subject key identifier: CE:11:35:A7:C4:39:22:3C:B7:55:47:4A:C5:B7:FE:71:6A:74:59:52
Certificate issuer: /CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Certificate serial: 0185719E787221DB4DE19E3BA84DFBCF2989
Authority key identifier: C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207579
IP address blocks: 185.210.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:78:72:21:db:4d:e1:9e:3b:a8:4d:fb:cf:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce1135a7c439223cb755474ac5b7fe716a745952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:55:6e:15:49:58:7f:f8:35:0c:3c:ca:d5:
01:2b:49:9c:5a:56:80:e0:da:5e:ff:67:05:a2:1e:
a9:27:21:9f:0a:93:33:ec:c7:08:fa:c5:2b:51:ca:
85:9a:2a:ba:b2:fb:28:2c:4a:f5:8d:fe:9e:c6:93:
2d:12:29:21:0c:22:62:d9:3c:24:2b:93:77:ef:45:
b0:1f:75:ec:fb:58:18:46:30:76:fa:ba:46:6f:15:
b6:53:5c:14:cd:68:16:68:58:47:09:50:4c:61:32:
1c:db:9a:3f:97:b5:98:f4:91:cf:bc:e1:94:59:f9:
c7:96:97:52:c7:06:d7:e3:5b:95:b5:b4:a0:9b:fb:
51:eb:af:01:66:97:f7:06:79:6d:de:43:c7:60:18:
5f:68:1d:c3:c6:d3:db:20:c0:4f:dc:62:db:cf:58:
af:36:ce:48:de:7f:3c:72:36:92:3e:1d:2f:5b:ac:
4a:52:4b:9c:dc:21:7f:b7:e8:9d:30:be:a6:01:02:
c2:bd:8b:6e:41:70:6b:cb:a0:69:40:d3:e4:4a:67:
ce:e0:44:d6:57:0c:85:b7:b7:16:bc:ff:66:c7:1a:
ea:b9:6f:98:fb:6b:66:c2:b4:5e:3a:94:34:be:9b:
df:77:5b:cf:03:fe:79:ae:be:58:fd:38:27:a4:32:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:35:A7:C4:39:22:3C:B7:55:47:4A:C5:B7:FE:71:6A:74:59:52
X509v3 Authority Key Identifier:
keyid:C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/zhE1p8Q5Ijy3VUdKxbf-cWp0WVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.194.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7b:26:4f:ff:13:e4:76:70:64:80:a1:79:c7:48:97:b0:5f:
bb:ab:13:30:ab:e5:66:f8:5a:7d:02:57:b0:bf:44:6c:55:a3:
9d:92:db:30:49:d8:1a:08:74:09:74:8a:b3:f2:2c:98:3d:3b:
76:60:c4:95:48:2a:f0:90:35:43:c0:b6:ec:15:67:00:64:bf:
f9:00:58:ab:e1:3c:37:86:f8:4f:33:ea:20:3c:49:eb:96:cb:
d3:22:d7:7c:77:26:43:5d:c1:70:c9:e1:e0:9a:5d:b1:06:cc:
c2:2b:5e:7a:4e:92:ca:99:63:0e:e2:9f:39:a8:15:98:e6:5a:
04:e3:86:b8:b8:08:24:1f:7f:17:b7:0f:6a:cf:3b:87:a0:35:
25:8b:96:a0:cd:fc:a5:b1:74:4c:16:cb:b1:56:67:26:d7:17:
45:ce:1b:85:c3:cd:2c:d0:a7:ed:af:7a:ef:a0:bb:93:ae:88:
59:e9:8f:de:d1:cb:fd:98:0c:aa:ab:c3:e1:2b:ad:93:51:eb:
bb:e4:1b:11:69:78:d4:74:9b:e5:98:86:4a:29:c6:53:3b:23:
43:12:b6:a1:d4:dd:af:f6:4e:df:37:5a:8b:04:be:86:0a:2f:
00:6a:50:36:c1:9c:4f:97:ac:eb:f5:bd:dd:b1:92:b8:d8:9a:
18:b1:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:45 2025 by rpki-client