Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ztUZv3t98zDrlPZTo-laONZjQE0.roa
File: ztUZv3t98zDrlPZTo-laONZjQE0.roa (raw, json)
Hash identifier: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=
Subject key identifier: CE:D5:19:BF:7B:7D:F3:30:EB:94:F6:53:A3:E9:5A:38:D6:63:40:4D
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0194274715DF69A063C71937B7CFCD9F8A5E
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ztUZv3t98zDrlPZTo-laONZjQE0.roa
Signing time: Thu 02 Jan 2025 13:49:17 +0000
ROA not before: Thu 02 Jan 2025 13:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.183.0/24 maxlen: 24
2a03:52a0:183::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:15:df:69:a0:63:c7:19:37:b7:cf:cd:9f:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 2 13:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ced519bf7b7df330eb94f653a3e95a38d663404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:40:21:66:38:4b:6f:a9:7d:69:ba:75:c9:
4f:5c:d7:11:25:92:a5:35:ef:78:b6:87:34:72:b2:
23:bc:8b:32:5e:8c:5f:12:2f:59:9f:0d:39:71:99:
94:48:5e:ea:9a:6d:a6:cd:83:0a:32:bf:5c:9a:f3:
80:06:80:c5:6d:bb:17:20:e1:a8:74:95:d4:1a:bf:
d0:7e:6d:e5:1a:b2:99:ec:9a:34:d8:1e:43:6f:f6:
aa:e1:83:1c:07:98:d2:2d:df:ff:d5:3c:6d:16:24:
88:df:eb:d5:dd:b1:e4:89:72:ba:47:93:01:a9:14:
fb:dd:eb:3a:3b:5d:cf:8f:d6:27:dd:65:51:c0:cf:
a2:c3:bc:58:a2:9c:08:78:c3:e0:25:f5:99:85:8a:
75:d9:b3:1b:1e:fa:3d:42:59:52:01:81:82:aa:c3:
b6:22:48:0f:fd:16:9b:38:68:8d:1c:de:37:72:eb:
27:3e:22:77:fc:64:76:85:b2:9c:16:7d:c9:7a:52:
c5:75:4c:32:cd:07:b6:a4:2f:a4:0f:6e:a2:00:2f:
6b:0c:96:2d:4e:83:ec:26:35:57:11:99:3d:4e:2a:
2c:63:ef:27:02:eb:91:cf:5f:fa:b4:c7:43:63:d2:
47:66:08:8c:54:e3:5c:61:27:4f:74:e8:66:85:63:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:19:BF:7B:7D:F3:30:EB:94:F6:53:A3:E9:5A:38:D6:63:40:4D
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ztUZv3t98zDrlPZTo-laONZjQE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.183.0/24
IPv6:
2a03:52a0:183::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c5:c5:0f:0f:36:bb:49:71:ee:93:ee:7b:31:fc:16:fb:c6:
de:cf:26:1e:3b:42:22:5e:78:48:e1:36:8c:21:a9:54:2b:a1:
15:1a:80:14:e8:d3:dd:dd:9c:7b:99:3f:f5:7a:f3:d0:1f:8d:
25:70:46:e3:9e:9e:c4:57:9c:81:99:76:58:8d:44:a2:f4:71:
e0:0d:47:d1:fd:ae:b2:30:6f:57:6f:dd:4d:b3:91:ca:e0:a0:
55:4f:14:91:a2:67:ee:29:5a:69:4d:f9:e0:2f:58:2a:83:86:
c1:67:8d:ce:bc:c5:54:76:c5:3d:68:dd:06:e2:b6:02:e7:08:
43:0b:27:bb:9d:6f:7f:df:3c:7d:1e:cc:0b:26:6a:22:e3:39:
fe:40:0c:c5:39:88:8f:5c:3c:6f:a4:0c:5b:d6:b3:fb:3e:80:
9f:7b:b7:74:0c:21:9e:70:2a:61:40:8b:b1:70:bf:9f:bb:e8:
fa:bf:21:c3:58:42:c4:21:52:77:ff:0b:af:37:7f:78:83:ab:
0b:73:54:97:1e:74:84:a3:0d:c7:da:1d:31:d5:8f:77:43:86:
f5:89:1e:23:ea:fc:d0:16:70:b4:0d:35:7e:af:a6:03:2d:76:
8c:2c:02:b4:24:bd:fb:89:e6:69:b1:57:2a:79:69:a8:92:dc:
15:d0:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:55 2025 by rpki-client