Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgRVU36XGxqiFzQw2MZcw0BSY64.roa
File: ZgRVU36XGxqiFzQw2MZcw0BSY64.roa (raw, json)
Hash identifier: S4af1wfe6FB/Akb8MpUOCV/EF5hJCyXWvOfUnOmWtfo=
Subject key identifier: 66:04:55:53:7E:97:1B:1A:A2:17:34:30:D8:C6:5C:C3:40:52:63:AE
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 019322E2821B1B16EB8B6D0F9C2A41753469
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgRVU36XGxqiFzQw2MZcw0BSY64.roa
Signing time: Wed 13 Nov 2024 00:18:09 +0000
ROA not before: Wed 13 Nov 2024 00:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:22:e2:82:1b:1b:16:eb:8b:6d:0f:9c:2a:41:75:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Nov 13 00:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660455537e971b1aa2173430d8c65cc3405263ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:24:c6:7a:71:d8:97:72:10:51:50:d8:29:
bc:92:0e:46:b4:96:51:90:60:1c:d2:ee:76:54:6a:
51:24:9e:50:95:45:2d:29:ac:93:e6:ca:1a:29:6e:
55:99:78:5e:4e:56:9f:5b:7e:46:ff:93:8f:1a:2b:
7f:07:28:76:b5:8d:11:5f:e2:0e:d2:57:3d:c8:6e:
5d:6f:3a:e3:e5:9d:85:24:8b:bc:69:07:98:d3:77:
54:0f:9a:47:04:41:72:a1:34:ec:bb:18:58:fc:0d:
61:45:2c:13:74:6b:88:bc:a1:39:46:2e:51:af:ff:
24:c2:56:19:5f:f1:64:32:bd:17:22:7e:38:89:eb:
9d:a7:6d:88:a3:50:22:b4:2d:54:23:f7:10:dc:8e:
29:09:6b:f5:9b:a7:f0:a7:8e:3c:d5:74:fe:eb:83:
3b:aa:b4:3b:15:fe:f1:0f:11:c5:1b:bf:8f:e6:39:
6e:80:3b:b5:68:5a:19:7a:7b:43:9b:a3:02:d3:05:
51:25:46:92:ad:78:13:ea:19:29:a6:a0:ab:e1:81:
cb:59:4b:85:06:78:31:fe:0d:79:75:cb:72:73:e7:
4d:e3:cb:76:64:0c:ba:d4:2c:56:a0:9a:90:0d:53:
30:44:7a:79:79:95:b8:b1:32:3e:76:19:35:15:cb:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:55:53:7E:97:1B:1A:A2:17:34:30:D8:C6:5C:C3:40:52:63:AE
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgRVU36XGxqiFzQw2MZcw0BSY64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:6f:19:c9:41:9c:1f:da:74:29:de:a3:ac:bf:dc:16:5e:04:
3e:43:d3:77:92:e7:14:27:9f:c0:df:24:a3:97:b6:7e:13:ca:
44:81:7b:dd:fa:55:6d:49:78:2a:79:4e:07:f2:61:32:e5:a4:
88:ac:96:96:3a:2b:06:5b:88:ff:8e:8c:a8:8a:8e:95:7f:1f:
95:7e:88:1f:01:ab:b6:45:67:5d:18:1c:9c:37:9f:4b:d8:67:
dc:80:96:14:19:92:b4:7b:55:08:f5:22:8f:0b:97:ba:4b:30:
ad:4d:19:ab:ff:7d:b1:9f:2c:f8:48:80:cb:4e:53:3b:72:58:
37:5a:ca:70:d6:87:07:85:09:21:4a:48:4f:ae:cc:25:96:bf:
71:1d:7d:91:7a:45:d3:2a:d2:6a:42:af:b1:26:ce:9c:d6:de:
a4:be:d2:05:c6:e7:7f:4f:1f:80:8b:5b:ed:c0:9f:3d:b1:fd:
7a:44:cf:a7:b5:7d:35:a3:c4:33:c6:32:6a:6f:c0:d4:ec:40:
b9:0d:27:eb:4a:0a:89:16:40:53:e3:bf:01:17:74:d4:4f:cc:
bc:e6:ad:31:95:aa:7b:ef:36:c8:9e:e3:6d:d4:23:97:94:48:
f7:a7:32:73:fd:82:ec:9d:99:f2:de:db:95:4a:7c:8a:f6:fe:
51:61:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:19 2025 by rpki-client