Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/ZH6DSPnT16k86Gzv8_IbO90q8IM.roa
File: ZH6DSPnT16k86Gzv8_IbO90q8IM.roa (raw, json)
Hash identifier: qzQow2numfT5cOIcM1PiR9pgCWWU4F4e4nQAL6QaOAs=
Subject key identifier: 64:7E:83:48:F9:D3:D7:A9:3C:E8:6C:EF:F3:F2:1B:3B:DD:2A:F0:83
Certificate issuer: /CN=eec1002260fcc28d10943196bde3b21cdc74e11f
Certificate serial: 018964C04F0716B9F9A5AECED7670CB65FCE
Authority key identifier: EE:C1:00:22:60:FC:C2:8D:10:94:31:96:BD:E3:B2:1C:DC:74:E1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sEAImD8wo0QlDGWveOyHNx04R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/ZH6DSPnT16k86Gzv8_IbO90q8IM.roa
Signing time: Mon 17 Jul 2023 16:47:51 +0000
ROA not before: Mon 17 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.242.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:4f:07:16:b9:f9:a5:ae:ce:d7:67:0c:b6:5f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec1002260fcc28d10943196bde3b21cdc74e11f
Validity
Not Before: Jul 17 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647e8348f9d3d7a93ce86ceff3f21b3bdd2af083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:a6:87:c2:63:24:35:bd:ad:f4:c8:c2:60:
7a:d1:7e:d8:f1:b3:43:1a:44:bd:37:85:45:02:b2:
2a:f2:50:98:5f:22:6b:dc:66:16:32:79:ae:ac:7a:
fd:d8:5e:3b:92:35:3b:35:ec:db:01:43:7d:95:f6:
79:73:b2:73:95:76:ab:5d:ed:09:af:89:c1:40:fe:
10:16:47:35:ed:52:30:3e:ec:d0:e5:11:c2:22:e0:
94:50:37:16:cd:44:1d:f1:f7:01:cd:f4:2d:9a:8a:
3a:b4:4f:86:97:eb:a0:28:eb:ce:0a:b3:04:c3:80:
1d:3f:81:37:04:3a:93:13:0e:8b:d2:85:67:1b:b4:
52:ff:7b:e0:8b:2e:86:f4:ff:59:28:dd:99:8f:20:
92:bc:0a:e4:5d:c1:cc:eb:22:99:c9:ba:04:44:ee:
fa:20:d7:c3:f7:01:26:6f:18:5e:48:fb:ef:b1:85:
4b:72:87:51:c1:a5:df:cd:01:9f:3c:6e:07:fa:5e:
44:36:fa:0e:07:4e:53:54:c0:ae:44:16:c0:9a:f5:
71:e3:f3:23:8f:06:33:16:c5:d3:d7:59:4f:b7:b8:
9c:69:df:da:20:bb:e4:bc:5b:1b:cb:d6:0f:bc:a2:
59:0f:74:8e:b5:4c:8c:c7:7f:ed:63:7a:10:ae:f1:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:83:48:F9:D3:D7:A9:3C:E8:6C:EF:F3:F2:1B:3B:DD:2A:F0:83
X509v3 Authority Key Identifier:
keyid:EE:C1:00:22:60:FC:C2:8D:10:94:31:96:BD:E3:B2:1C:DC:74:E1:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sEAImD8wo0QlDGWveOyHNx04R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/ZH6DSPnT16k86Gzv8_IbO90q8IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a9934f-d316-41bd-9ed7-3cc3b091ab5c/1/7sEAImD8wo0QlDGWveOyHNx04R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
22:86:56:4e:99:1f:a6:24:da:0b:9a:42:75:5d:6c:36:a9:a8:
05:b9:7b:92:bd:8d:73:99:e4:91:5d:38:2e:6f:90:0e:9e:6d:
d6:75:9a:0d:91:ee:5e:dd:b4:c9:f9:64:d6:33:0d:4c:1e:bf:
1b:60:41:1e:5c:ef:ff:c6:82:08:eb:44:91:0d:d7:38:40:15:
b0:2e:66:47:39:ae:8a:9a:75:45:1f:20:14:f2:5d:bf:b2:a9:
2f:0e:ba:05:1b:a6:fc:38:94:47:e8:c9:d1:6e:57:8a:80:64:
d3:27:f1:d5:b1:44:51:c0:16:b6:af:9d:eb:16:d3:e3:3f:c3:
0b:23:fc:4f:a6:84:69:3f:7b:3f:f4:24:c3:d7:86:d0:2c:d7:
f2:7c:18:7a:05:30:37:d5:1a:1e:66:a3:73:72:65:86:bd:f3:
96:26:b3:5f:5b:7a:72:e4:8a:59:2c:92:9f:cf:ba:6e:8a:43:
96:e5:06:15:f5:45:92:55:87:f1:ee:f5:67:23:ba:d5:34:a8:
3f:91:97:9a:14:91:0e:ad:12:98:e3:84:96:2a:55:1c:ca:7c:
9b:81:3f:53:f9:31:90:8b:75:8b:e7:af:08:fc:7b:ac:91:b2:
e4:9f:50:e4:a1:f8:38:96:c0:39:6e:68:41:06:94:1e:d3:83:
b7:d3:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:33 2025 by rpki-client