Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa
File: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (raw, json)
Hash identifier: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=
Subject key identifier: 66:63:8B:B6:41:2D:96:12:F6:08:C6:08:20:9E:03:8E:F8:69:6C:1D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195275209E02128F31706D6C414FFD9F88B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa
Signing time: Fri 21 Feb 2025 07:04:02 +0000
ROA not before: Fri 21 Feb 2025 07:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 88.209.194.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:52:09:e0:21:28:f3:17:06:d6:c4:14:ff:d9:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 21 07:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66638bb6412d9612f608c608209e038ef8696c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:8d:52:d8:60:3c:e4:22:f5:2e:18:da:b5:
3f:e3:b7:82:b7:a2:07:7d:e6:d6:99:43:89:23:b0:
5b:5b:15:64:ed:ba:59:9e:46:72:2c:43:db:9e:25:
8c:6a:4a:c6:bd:b0:c4:47:6e:a6:9c:4c:f6:eb:13:
43:f4:a9:da:6f:d0:bc:be:72:57:74:80:96:be:05:
5c:9a:d7:82:79:b6:c6:76:af:87:a9:f1:ee:99:fd:
d6:3c:ab:b8:d6:18:33:d6:3d:8d:1d:80:c8:03:01:
1c:ec:76:f1:d3:74:3e:70:bb:06:01:37:58:08:cf:
45:5d:8d:3a:c1:0c:3f:55:8d:02:3b:1b:75:70:9b:
1e:a8:8a:dc:ac:5b:da:45:39:e5:77:ed:cd:d0:3d:
5b:0e:c4:cc:fc:59:ea:40:19:03:e8:a9:2a:44:bb:
d1:52:d6:7e:50:58:91:aa:1a:53:f8:eb:03:ce:05:
c7:15:f6:ab:b0:94:41:e4:b9:68:c6:42:85:f9:68:
2b:9b:33:77:01:ba:69:e3:6d:40:88:31:cb:80:8d:
40:fb:e9:fa:c5:b9:8c:5f:6b:56:61:f6:85:e6:9a:
d6:eb:13:c1:ac:bc:1a:9a:09:0c:bf:90:8e:29:1c:
97:b0:8a:76:43:25:9b:1a:c4:0e:94:88:66:83:6b:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:8B:B6:41:2D:96:12:F6:08:C6:08:20:9E:03:8E:F8:69:6C:1D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.194.0/24
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d3:64:9c:46:d6:51:3a:4c:2b:ca:9c:70:21:1c:e0:b7:40:
73:32:17:6b:0f:73:ae:93:26:bc:a8:be:f6:57:a1:1f:67:6a:
59:65:f2:11:ca:c8:e4:09:48:50:20:ed:47:89:05:c9:ac:4f:
51:5f:92:18:37:5d:63:fd:bb:5a:f8:22:6c:db:21:97:3b:12:
56:d5:43:ea:6a:69:65:51:59:d6:0e:29:ce:69:47:6f:bb:6d:
39:c7:d4:4d:8d:ff:52:12:ed:d9:25:80:bb:60:4b:ed:d0:ef:
1f:f1:57:ba:28:61:a9:e2:97:2f:14:4f:01:fc:a6:7b:e3:df:
fe:4c:29:92:91:62:8a:5a:e2:75:da:6a:3e:04:30:5a:88:b3:
9b:32:bf:21:81:d2:5b:e4:57:e2:e5:e0:ee:e5:2a:2d:f1:e6:
fd:f0:52:cd:59:25:10:a6:b4:3f:13:9c:4c:11:ee:1f:ae:e4:
03:18:90:89:51:c2:c5:6f:b5:ee:3d:bd:13:11:ad:59:0d:e3:
34:ff:83:e0:1f:72:b1:5b:a1:bf:54:3f:bc:14:ad:2f:85:e5:
39:37:45:df:85:97:44:e6:c1:f3:77:06:64:93:f6:4b:b1:56:
c2:be:3c:95:bd:9b:9d:8d:bf:63:31:5c:92:c8:6c:9f:01:07:
3b:23:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:56 2025 by rpki-client