Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zg6_zR0t9GNAxSN2IDAANMy-_ck.roa
File: Zg6_zR0t9GNAxSN2IDAANMy-_ck.roa (raw, json)
Hash identifier: nhzeowPBdUnm7NikUYDiiq50yJSN4mX0zfs5vyZ3mC4=
Subject key identifier: 66:0E:BF:CD:1D:2D:F4:63:40:C5:23:76:20:30:00:34:CC:BE:FD:C9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE11770F75A9835973D4324C7E2EC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zg6_zR0t9GNAxSN2IDAANMy-_ck.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31800
IP address blocks: 194.68.45.0/24 maxlen: 24
194.14.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e1:17:70:f7:5a:98:35:97:3d:43:24:c7:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660ebfcd1d2df46340c5237620300034ccbefdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:16:37:47:75:46:9c:36:de:5b:a3:a9:50:
7c:bc:94:4a:39:27:85:9f:4c:ec:54:46:8f:93:75:
f3:bb:69:ec:49:73:e9:da:98:95:d1:d9:5f:5d:6d:
73:63:51:bb:3a:9a:20:cf:7d:fa:1d:80:b2:0a:70:
d8:35:ac:67:e6:aa:1a:9a:e6:f8:f9:db:c7:91:af:
a8:b9:b8:cc:cc:f2:35:de:a5:85:cd:54:be:07:96:
a1:b7:70:aa:a4:c5:82:8d:a7:03:da:60:02:c0:1c:
76:d7:f9:11:41:5e:85:90:b9:11:21:83:c6:76:1e:
75:e0:08:65:21:a6:1c:b6:5f:28:64:37:55:f5:3a:
ac:85:5e:72:c6:bf:4d:19:d4:45:b5:3e:61:90:cd:
b1:51:be:8f:0a:f2:cd:f8:e9:9b:44:0e:cf:8a:c5:
bc:8c:bf:5b:1c:36:ac:61:59:ec:42:bb:b2:d9:d4:
33:5a:04:de:14:e2:14:7c:a9:09:59:3e:72:65:04:
58:28:a0:07:3f:87:ec:d1:ab:00:83:cf:b7:dd:cf:
32:15:57:6d:21:89:4a:a0:e5:4d:38:ab:5b:aa:80:
4c:f4:35:46:b1:ae:25:de:6d:e9:82:5f:f7:ca:da:
4f:82:c1:72:f7:55:60:83:4b:b7:8c:b7:8a:bd:68:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:BF:CD:1D:2D:F4:63:40:C5:23:76:20:30:00:34:CC:BE:FD:C9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zg6_zR0t9GNAxSN2IDAANMy-_ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.236.0/24
194.68.45.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:d5:c8:cd:e9:a0:3c:a8:a3:5a:f6:ab:0e:c7:23:ac:fe:
26:29:f9:8a:ff:37:44:3b:a8:28:49:08:6c:90:03:55:4b:f5:
ee:74:22:58:cd:0e:18:13:5e:0a:56:6f:b6:99:d3:d2:56:b3:
e3:36:f6:98:8a:e4:19:b4:20:cd:51:6b:b2:a4:d6:d9:7f:96:
9c:fd:08:31:ba:41:f2:29:5a:fb:33:25:e4:6e:4c:68:c6:6d:
54:61:ab:cc:db:ce:57:fa:38:3c:ee:69:a8:01:ac:6e:82:83:
04:3a:21:07:15:a2:2b:f3:53:70:2d:a9:54:b5:02:c5:56:38:
f0:4e:bd:88:4c:af:8d:65:d6:e1:32:9d:a9:fd:9c:da:1d:d3:
37:2c:a4:97:3f:db:42:b4:82:ed:f1:1f:87:7c:32:20:3b:64:
8c:f5:81:2b:58:7b:ac:59:b8:46:b3:15:01:03:2b:9e:34:8e:
f3:59:00:e2:b4:e9:b5:dd:0d:0a:fa:3e:f3:ec:e7:41:9f:a4:
2d:68:f1:6f:2d:2a:7b:85:48:ff:2b:02:c3:dd:49:bc:3d:38:
b8:81:73:24:35:48:5a:ed:ee:05:55:e9:b0:2e:26:f4:3e:7a:
66:f9:e2:c4:8e:f5:ef:e2:9b:3d:74:35:8e:bd:ed:94:4a:f1:
70:68:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:18 2025 by rpki-client