Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/ZTeJrV44cuelAuZVlfb9KznDqF8.roa
File: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (raw, json)
Hash identifier: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=
Subject key identifier: 65:37:89:AD:5E:38:72:E7:A5:02:E6:55:95:F6:FD:2B:39:C3:A8:5F
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0EF24592CA3095F699E5F2DB6D3F
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/ZTeJrV44cuelAuZVlfb9KznDqF8.roa
Signing time: Thu 02 Jan 2025 09:48:57 +0000
ROA not before: Thu 02 Jan 2025 09:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214368
IP address blocks: 185.236.10.0/24 maxlen: 24
194.110.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0e:f2:45:92:ca:30:95:f6:99:e5:f2:db:6d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653789ad5e3872e7a502e65595f6fd2b39c3a85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:38:c2:94:78:30:23:f4:8c:b4:da:90:3e:
38:e4:7d:10:9a:f6:e9:2e:6d:de:d9:9f:12:22:94:
cf:3f:32:78:13:0b:cc:3d:af:22:95:71:3e:35:74:
8d:da:ba:93:c8:22:67:9c:d2:a3:3f:37:04:b2:f1:
58:9a:bf:e6:fb:14:42:a0:38:a7:fa:58:19:4e:7c:
1a:b7:d1:1e:fc:01:7b:0f:4f:ab:68:b0:83:2d:cc:
ad:44:d2:45:92:e8:2c:ee:33:6f:98:42:1d:b8:94:
a4:07:f4:3d:f3:35:cb:95:cb:c1:93:37:fe:88:65:
f4:8a:54:e4:e6:2a:2a:80:5e:1b:47:de:cf:13:5d:
33:0f:e1:3d:2e:f3:a7:9c:23:ae:f6:ae:6e:52:05:
bb:30:1a:c9:61:7e:28:a7:96:2b:88:f0:bd:14:2c:
26:74:a2:f7:fc:af:17:2d:84:d9:9c:77:23:79:c1:
fb:b4:00:1f:58:71:06:45:42:d7:a4:56:94:a9:3f:
09:b0:b3:4d:05:35:7b:2d:78:d3:87:48:c6:68:fb:
fe:18:db:a0:49:f8:10:cf:3e:ff:b1:f6:cb:d1:fe:
76:9f:f5:7e:44:38:3a:b2:06:ac:a2:76:38:16:c8:
d7:f7:01:25:9c:45:33:b2:8f:86:9b:1d:b0:e4:1b:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:37:89:AD:5E:38:72:E7:A5:02:E6:55:95:F6:FD:2B:39:C3:A8:5F
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/ZTeJrV44cuelAuZVlfb9KznDqF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.10.0/24
194.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:31:af:a3:b7:e4:92:c1:ab:2c:62:fb:cf:32:59:c4:89:
f6:7e:28:7d:2e:eb:a1:80:76:32:0c:10:0e:4e:34:5b:54:a6:
63:e1:b0:eb:81:c0:68:a4:44:1d:90:a9:32:f4:5e:ce:e3:10:
6b:68:91:2c:c7:1e:97:6d:70:25:21:0a:f6:82:5c:49:71:74:
38:9b:b1:e9:97:06:d9:ef:96:5b:ca:fa:53:af:f2:07:32:c8:
9c:b5:98:45:39:84:c6:f5:b6:7b:92:28:24:93:04:87:b4:a9:
f0:1b:2b:78:98:bc:74:6e:fe:e6:1d:65:ad:2b:77:4b:7e:49:
c8:b3:dd:a3:53:05:f5:f8:c6:41:6b:fc:83:c9:43:90:59:e9:
e9:34:b5:0e:a8:7a:20:91:a1:a9:c4:81:2a:55:c3:b0:ab:c3:
a5:d5:4e:89:b9:aa:8d:96:71:31:27:ac:f3:1c:68:13:85:82:
f8:9e:35:a2:05:80:7d:76:35:a2:a6:02:57:a0:f2:90:08:b4:
8b:59:0a:db:b4:a0:20:33:dd:9b:04:e9:10:69:a5:db:e7:97:
99:ed:88:6b:9c:b6:44:df:74:68:57:f4:c6:e9:fb:cf:17:af:
6d:a0:c3:65:a9:4f:b7:b8:67:b5:45:ce:ed:97:fe:9e:5c:38:
c8:f1:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:19 2025 by rpki-client