Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zafmjLGySoMti-x_5PHxk72L9c8.roa
File: zafmjLGySoMti-x_5PHxk72L9c8.roa (raw, json)
Hash identifier: fBm2pDUebOOIoZIgFcFV9db+mUiIlnZmfB0DuKJCV8I=
Subject key identifier: CD:A7:E6:8C:B1:B2:4A:83:2D:8B:EC:7F:E4:F1:F1:93:BD:8B:F5:CF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01944CA0E014E4D094F757E68587859CCF0B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zafmjLGySoMti-x_5PHxk72L9c8.roa
Signing time: Thu 09 Jan 2025 19:53:19 +0000
ROA not before: Thu 09 Jan 2025 19:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:a0:e0:14:e4:d0:94:f7:57:e6:85:87:85:9c:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 9 19:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda7e68cb1b24a832d8bec7fe4f1f193bd8bf5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:44:28:d6:1c:01:a2:bc:1b:9a:60:cf:76:
5c:c8:1f:17:47:e1:14:6e:f9:4b:64:be:f1:2d:25:
8c:52:4a:66:76:01:59:76:25:23:32:69:bd:e8:42:
57:91:dc:f4:31:13:60:22:6c:cf:40:e6:e8:60:12:
eb:69:87:64:f1:85:b6:22:34:40:c2:d2:5d:8a:c8:
cf:ce:30:8a:1b:38:1f:b4:c4:69:04:f1:39:48:f9:
fc:75:c4:28:44:cb:82:74:ce:c3:05:0b:9d:89:1b:
e0:b9:8f:d1:de:02:1d:1b:47:a3:be:d9:4f:24:3b:
23:22:34:70:73:ad:7c:b7:9e:20:04:a9:83:dc:fa:
bd:25:49:6b:27:59:a9:7c:be:9d:c2:c1:2e:04:7d:
6f:27:89:11:c7:76:a5:c4:3d:9d:b3:97:18:c8:c9:
02:62:60:70:48:29:d4:53:82:51:02:b1:10:8f:25:
7b:55:bf:3d:f1:72:28:61:01:79:f1:94:c5:6f:13:
bd:cf:28:22:be:3b:87:02:e8:89:12:26:d0:c9:5f:
85:47:0f:be:93:12:80:37:21:f1:49:60:ed:d7:36:
3b:8c:10:5f:d5:f9:8a:51:44:4d:23:54:85:1f:74:
7a:03:64:0d:18:62:40:90:e9:f9:9d:35:09:92:2f:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:E6:8C:B1:B2:4A:83:2D:8B:EC:7F:E4:F1:F1:93:BD:8B:F5:CF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zafmjLGySoMti-x_5PHxk72L9c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
185.207.133.0/24
Signature Algorithm: sha256WithRSAEncryption
33:31:43:38:06:31:e6:35:aa:01:96:b0:ab:74:8f:e5:60:84:
2f:73:98:10:b9:7d:ca:c8:58:93:48:92:23:cd:0d:aa:dd:06:
e4:f4:6b:bd:a7:49:8f:f0:55:a3:14:b3:1e:d7:99:15:cb:3a:
3e:7b:ac:96:c7:ba:45:ff:10:7f:0e:d2:43:75:e6:d3:fc:00:
19:2c:88:eb:37:d0:e8:5a:88:c1:ed:7c:18:0b:cb:0e:22:84:
b7:e6:ff:d6:bf:26:63:1a:a6:a8:e1:97:60:55:fa:a7:14:60:
2f:63:c5:48:35:b0:80:08:80:93:1d:4b:12:01:95:0f:e1:bb:
42:fe:b0:6a:88:55:93:7e:fa:63:9b:2b:36:90:31:b5:27:c1:
cd:78:d0:30:78:e6:2e:65:7e:05:99:29:c3:4d:ea:33:82:db:
81:42:38:15:4d:3f:85:61:1e:14:82:d4:90:64:6a:5f:2f:75:
a0:a9:32:88:4b:7c:42:e6:3b:f5:09:46:dd:a3:a7:55:cb:ff:
cb:54:7e:b8:06:38:f4:ff:85:c0:70:51:47:7a:99:1d:a2:3c:
be:47:52:82:61:c3:f3:e7:f3:7a:95:e5:88:5d:71:cb:8b:5f:
48:08:7e:8f:40:19:2c:59:0d:9a:ec:58:44:74:3c:9d:2f:5d:
f7:38:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:40 2025 by rpki-client