Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa
File: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (raw, json)
Hash identifier: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=
Subject key identifier: 25:92:DF:0A:94:CC:49:ED:3D:BC:AF:D3:2D:B2:D0:16:5C:70:D8:3B
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0194236914F17AB9BE331FF7FA2F06A0EC3A
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.219.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:14:f1:7a:b9:be:33:1f:f7:fa:2f:06:a0:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2592df0a94cc49ed3dbcafd32db2d0165c70d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:e2:de:ef:f9:94:ab:6d:e7:1f:83:49:3c:
b3:99:7b:64:30:bf:78:46:d9:2f:2d:3d:a3:45:98:
df:e6:68:64:67:22:de:3c:6b:df:50:4d:43:66:48:
96:58:01:5a:42:5e:0c:ea:d8:23:7e:a4:8e:89:8c:
85:61:eb:7a:d2:9e:80:ea:03:51:7c:fb:a2:4d:ae:
60:ac:a2:e3:4b:34:cf:4c:3c:93:a9:e8:f1:af:c4:
0c:0c:5a:7b:48:4e:2a:5f:a1:75:d3:36:1a:b2:d6:
14:84:9a:ad:50:83:40:54:b0:3f:7c:83:90:53:36:
f5:84:a8:95:5b:a8:cb:f1:fd:9e:4c:4a:68:58:21:
da:f5:ca:94:65:af:cf:95:36:65:15:b8:98:99:af:
6f:2a:7f:94:aa:e1:5e:0c:5d:06:47:0c:58:16:d3:
cd:bc:42:8b:76:70:38:92:27:25:06:ab:69:33:76:
73:dc:d0:21:26:ab:d3:ad:7b:55:11:ff:6f:40:3e:
b9:5e:65:0c:6e:c1:08:2f:0b:a9:b8:2b:5b:df:10:
d8:fb:0f:b1:1b:03:e9:ff:c3:11:b0:94:21:8a:05:
6c:02:49:a4:5e:e3:5f:8f:d1:d6:72:24:19:c2:2e:
cd:fc:66:93:47:8f:7e:bb:eb:45:a7:8d:76:44:ac:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:DF:0A:94:CC:49:ED:3D:BC:AF:D3:2D:B2:D0:16:5C:70:D8:3B
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:7c:5e:92:d7:b2:dc:1d:e5:65:2e:88:ff:4f:3d:41:7e:f1:
86:54:93:d9:69:9d:18:2d:de:86:f5:0c:fe:ef:24:f2:6a:db:
7e:30:7a:de:cb:5f:8d:d9:3f:8d:99:f6:f1:a8:e3:f6:2f:90:
1e:9f:94:41:32:22:3e:02:96:3b:0e:9b:b3:90:3d:d6:93:1f:
fb:12:d1:45:30:29:d8:e2:73:fc:bd:2a:b5:12:9a:35:8f:2f:
95:64:9c:a6:53:41:fb:ba:11:68:23:55:dd:77:c3:c4:fb:f9:
09:41:86:94:da:56:67:b9:b0:05:98:c3:32:4f:8f:9d:bc:9f:
a9:ea:31:e5:79:a6:88:78:32:02:34:b8:aa:24:5b:22:40:22:
da:55:3e:b8:fb:47:bf:bf:54:99:a9:92:13:98:6f:ad:e3:e7:
40:8f:09:c3:42:6d:dd:63:46:f0:e0:8c:f5:02:e8:7e:bf:c2:
31:6f:d3:08:e4:a8:e9:bf:41:7e:ad:6d:b5:ec:77:69:d2:70:
4c:cf:9b:16:1c:4a:eb:d3:7d:da:e4:05:0c:2f:e7:ff:55:c2:
ef:e9:a2:ca:5a:13:e9:17:5e:2f:03:4d:c3:a3:b9:38:51:2d:
85:52:3f:58:10:04:de:92:07:0b:3b:05:fe:82:73:a2:fa:d5:
ea:0c:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:06 2025 by rpki-client