Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxPdZtwi5XwfWFlnVoFSiqpCesk.roa
File: ZxPdZtwi5XwfWFlnVoFSiqpCesk.roa (raw, json)
Hash identifier: H24ofqkx2+PyXIGsW/bgKOXrumwwr+Xova+np4GFolw=
Subject key identifier: 67:13:DD:66:DC:22:E5:7C:1F:58:59:67:56:81:52:8A:AA:42:7A:C9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201E700ED061D1333F9FEBB06DB592
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxPdZtwi5XwfWFlnVoFSiqpCesk.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 176.125.248.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:70:0e:d0:61:d1:33:3f:9f:eb:b0:6d:b5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6713dd66dc22e57c1f5859675681528aaa427ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:b6:36:c4:bb:f7:bb:08:b2:35:66:44:5f:
c2:9c:e6:35:78:1e:e8:86:a0:8d:ce:b4:74:1a:be:
e0:57:80:89:ce:56:29:83:24:fd:9e:8b:92:ae:e2:
dc:af:09:3d:d5:8e:1b:b2:d1:ab:b6:12:31:79:cf:
29:67:61:6a:4a:7f:4a:99:53:4f:5e:c3:aa:c7:61:
e4:d8:d0:81:98:f5:b1:0b:c7:92:57:26:63:18:b6:
8c:41:9c:bf:8f:21:3e:ae:39:ab:4d:e2:ca:78:3b:
3a:19:5c:15:94:67:fb:21:c1:c7:da:31:5c:7d:95:
bf:8a:b0:4c:74:91:c1:cc:b7:6c:e3:3d:bd:03:80:
15:2f:7e:5c:ef:30:5b:27:e1:3f:24:11:aa:7a:6d:
6a:9f:91:23:9c:be:3b:4e:99:c3:a8:49:c0:dd:34:
fb:36:8b:b4:fe:2b:bb:df:c5:06:59:5e:66:8a:6d:
0f:15:bd:1d:a3:c6:8e:03:2a:25:48:64:06:ee:e0:
29:54:f9:63:4a:2d:a3:e9:6e:78:b8:e3:11:77:98:
52:41:4c:56:5f:54:fa:0b:19:6c:b6:5e:29:9f:c2:
65:72:38:cc:55:03:00:40:10:a1:64:0a:ca:80:33:
86:b9:ec:db:e1:46:2e:4a:65:73:e1:2d:3f:91:bd:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:DD:66:DC:22:E5:7C:1F:58:59:67:56:81:52:8A:AA:42:7A:C9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxPdZtwi5XwfWFlnVoFSiqpCesk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.210.232.0/24
185.214.102.0/24
185.225.0.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a4:df:5e:7c:86:de:f4:be:94:ae:df:89:24:2c:36:f0:cb:
da:33:6c:dc:df:9c:9c:8d:39:23:73:da:86:56:34:b8:a3:d9:
4c:22:e1:dc:19:b6:ab:07:e7:f1:59:83:b2:c0:6d:dc:3c:6f:
63:b4:1c:d2:e9:34:82:fa:f5:c8:5c:ce:b4:1f:ea:a9:74:42:
01:49:c0:58:9b:76:13:f3:10:8c:67:e8:70:da:44:07:20:33:
39:e2:e7:5d:0d:f2:0a:c2:b9:bd:7e:87:b2:f7:9b:07:40:a5:
00:e2:5d:d8:ec:44:35:7e:a9:0c:a4:f1:df:1a:ad:bb:d2:f1:
b8:70:a0:17:b8:2e:a6:dd:79:64:01:18:ce:2a:00:1a:9a:a3:
ef:f9:51:56:6f:a9:0c:fb:61:38:aa:55:69:65:1e:53:d2:bd:
82:33:8a:76:3b:fa:5d:50:46:49:e4:82:59:00:67:e3:22:00:
1f:6d:20:ef:b2:2d:c5:a7:d3:54:c5:e6:d4:49:c7:8d:9e:8c:
c0:39:8c:48:ce:f8:28:da:04:b9:39:8b:7d:52:f2:7f:87:27:
20:32:2c:ae:0a:8d:35:12:50:3f:10:4e:11:42:8f:d0:c9:7c:
d3:97:17:87:55:4e:eb:67:71:da:f8:89:95:ed:cd:c3:b6:ac:
72:45:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:08 2025 by rpki-client