Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Zpv7QjhtDqkioGllPCM52KEOVGQ.roa
File: Zpv7QjhtDqkioGllPCM52KEOVGQ.roa (raw, json)
Hash identifier: 91ula3BvpX426HDoxJYQrl2BwxwwXUnQO9EEQYlwaLs=
Subject key identifier: 66:9B:FB:42:38:6D:0E:A9:22:A0:69:65:3C:23:39:D8:A1:0E:54:64
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 030E64
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Zpv7QjhtDqkioGllPCM52KEOVGQ.roa
Signing time: Thu 27 Jan 2022 21:27:14 +0000
ROA not before: Thu 27 Jan 2022 21:27:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41219
IP address blocks: 185.88.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200292 (0x30e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 27 21:27:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=669bfb42386d0ea922a069653c2339d8a10e5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:85:a4:83:10:ad:56:33:3b:2b:1f:a6:4d:
12:72:99:a9:43:c6:e7:36:e9:2d:17:fd:27:3c:52:
c9:b8:8c:20:e6:1d:66:05:96:4b:8e:c8:ad:20:43:
fc:e5:a6:ff:c4:ae:be:0a:3b:48:2c:81:b5:f5:b9:
b6:5e:c0:b5:1c:4c:cf:de:29:1c:8c:42:75:44:82:
6d:e2:44:11:dc:45:58:d4:0a:3d:b2:33:67:d7:8d:
29:e7:4f:4d:58:43:0b:ae:6a:6b:55:a5:e2:2d:ad:
3a:15:3b:53:63:02:57:15:2d:d0:a6:c4:33:be:d6:
d9:0a:c6:85:e3:52:9e:01:9f:4f:98:a8:b8:99:41:
27:b2:66:c2:0f:2a:04:af:88:8a:d5:4f:22:20:a0:
db:e5:e6:cc:9a:aa:9f:67:47:86:cb:cd:00:c0:a3:
04:38:2a:31:87:30:4b:84:d2:30:00:76:a3:31:c7:
7e:0c:0c:63:88:d7:65:da:0b:9c:d0:e9:95:ba:0a:
98:ff:46:ee:32:76:9d:45:35:fa:48:cf:28:ad:52:
4a:3b:df:6b:ef:4f:fa:2b:ce:a6:c1:65:22:0a:33:
13:7c:7a:43:e7:92:fd:ca:64:8d:5e:cc:c2:b6:94:
53:61:ba:71:fc:01:cf:65:8d:08:97:9d:14:6d:be:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:FB:42:38:6D:0E:A9:22:A0:69:65:3C:23:39:D8:A1:0E:54:64
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Zpv7QjhtDqkioGllPCM52KEOVGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:11:53:6a:5c:e1:bd:a4:72:5c:a4:20:38:cd:50:16:7b:62:
c9:c8:89:33:3a:1e:69:6f:85:bb:47:b2:10:73:5b:b8:b1:45:
c9:2b:33:70:1a:2a:47:a1:56:82:af:c3:7a:ad:c3:c2:1e:df:
17:fa:b8:c2:20:8f:38:85:d1:d6:28:4d:39:d5:a0:1b:e0:51:
aa:3e:3b:99:e3:4b:87:bd:e6:29:09:97:f8:de:7c:53:68:a7:
28:4d:6a:0f:ad:9d:d0:f5:33:42:10:72:8e:57:5d:91:d6:07:
d0:e3:ef:b5:21:22:e6:48:55:8e:2b:c6:cb:ab:b2:38:39:f9:
bd:94:f8:49:28:bd:f9:b5:39:96:2e:e7:67:5b:53:9f:2b:d9:
b8:67:f2:14:22:95:06:01:57:c3:e4:47:55:66:cd:0e:72:f9:
d1:db:48:4e:2b:61:e0:51:af:77:27:e6:b7:6d:4b:87:8a:85:
fc:1a:a3:95:67:46:04:f9:ee:46:1c:29:42:74:5b:b7:00:8c:
99:eb:c7:3e:ee:18:6f:ed:cd:17:eb:48:9d:a2:2e:4e:00:4b:
57:4d:c4:46:21:a4:fe:1e:99:6d:ce:a9:62:35:7e:e0:c8:ec:
f0:bf:4f:eb:c3:fd:33:9b:25:53:f4:c4:74:b1:29:a6:96:60:
68:ff:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:57 2025 by rpki-client