Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ZeYihmicLm5VKfWSSFIon1HTDC4.roa
File: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (raw, json)
Hash identifier: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=
Subject key identifier: 65:E6:22:86:68:9C:2E:6E:55:29:F5:92:48:52:28:9F:51:D3:0C:2E
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019427B5875A2CA35658F8CCBF98C9801D2E
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ZeYihmicLm5VKfWSSFIon1HTDC4.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 46.226.124.0/24 maxlen: 24
109.234.75.0/24 maxlen: 24
185.138.166.0/24 maxlen: 24
217.119.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:87:5a:2c:a3:56:58:f8:cc:bf:98:c9:80:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e62286689c2e6e5529f5924852289f51d30c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:18:24:af:77:a8:76:04:83:9a:05:97:0b:
d8:88:e4:49:53:3c:dc:42:b3:0d:90:33:5e:92:7e:
74:50:83:9e:f9:ae:b0:39:f0:dc:8c:af:cb:e9:5c:
cc:e7:8a:28:56:69:51:3e:17:61:ad:45:83:df:ee:
df:7c:9b:39:de:63:c2:2b:09:0d:80:85:ac:ba:5a:
85:45:ea:a0:88:cb:58:fc:26:24:3e:f2:a2:d5:f5:
fe:40:e8:da:9c:e3:e9:ef:f9:86:48:79:81:4e:72:
c9:88:62:95:c0:22:98:9f:ec:63:d6:f4:e8:35:f7:
f4:d6:e0:a9:32:da:c0:a5:80:32:aa:0f:08:31:90:
76:51:02:8a:b5:91:5c:2d:01:cf:6f:85:9b:93:36:
39:2b:80:47:f8:ac:1f:86:4e:8d:42:26:bc:3c:65:
9a:24:0e:63:85:4e:12:e4:89:ae:a7:e5:78:8e:a3:
0e:2a:53:79:f8:16:c0:73:3f:6d:92:ae:c7:e5:84:
2a:2d:d8:0f:ae:26:d1:fa:7c:12:ac:c4:1a:c7:dd:
fd:7a:97:ea:ac:0e:74:75:d7:32:74:9c:be:3a:95:
ad:7e:d6:ca:0b:13:db:f3:4a:6a:ca:aa:dc:92:68:
c8:88:2f:c0:bc:d8:ba:16:91:fd:98:1c:a4:26:10:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:22:86:68:9C:2E:6E:55:29:F5:92:48:52:28:9F:51:D3:0C:2E
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ZeYihmicLm5VKfWSSFIon1HTDC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
109.234.75.0/24
185.138.166.0/24
217.119.131.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4a:65:ca:5f:ad:bc:0d:fd:c5:98:85:cc:33:ba:3f:04:0a:
e4:63:23:a0:b7:04:3e:4c:34:29:2f:7e:3b:13:d8:f0:9c:74:
61:15:41:62:a7:3c:5a:95:34:27:be:77:e0:89:c9:62:47:90:
0b:68:ef:60:e0:3a:b6:65:e4:88:f9:ff:10:20:0f:ab:a5:b2:
bc:8d:2d:e9:5b:bc:fd:12:c3:0c:d0:96:5c:1c:32:1d:1a:ea:
2a:3e:53:d7:a0:a4:a5:ce:39:bf:68:d0:08:e5:03:46:d2:f7:
92:0f:2a:e8:26:13:f6:05:98:98:5d:e0:b5:b5:fa:36:88:39:
e6:86:18:28:66:f5:f1:8a:1a:24:ec:57:74:2b:1e:b6:92:22:
d5:01:76:ae:64:27:ca:74:6d:6d:8f:38:c5:f8:fd:ca:71:a8:
af:70:7b:5c:b8:0d:5e:cd:e6:1c:90:ea:98:a9:12:fd:aa:9e:
6e:77:1b:44:ca:9a:89:0b:2f:75:72:0f:6b:a5:3c:c5:cd:f4:
99:f2:54:bc:ea:ce:fb:0e:e0:fd:88:5f:05:44:81:60:a2:f3:
37:02:29:56:e5:24:be:72:25:d9:2c:0b:0e:40:5d:d6:03:7b:
7a:02:2a:a6:3d:50:0a:ec:45:f8:1d:7c:55:dc:ee:de:4b:6f:
bb:b0:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:15:30 2025 by rpki-client