Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa
File: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (raw, json)
Hash identifier: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=
Subject key identifier: 66:5D:C7:1C:CD:14:47:0B:89:4A:4F:4B:97:19:0D:1D:8D:D0:25:20
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019422FC070A4180B1DB82E70A27A5AE2C3B
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 178.218.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:07:0a:41:80:b1:db:82:e7:0a:27:a5:ae:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665dc71ccd14470b894a4f4b97190d1d8dd02520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:3a:e0:ca:d4:3d:57:94:46:b1:a7:94:d1:
04:2c:8f:4e:57:46:bd:a8:17:e3:72:c5:89:e5:0f:
73:19:27:ad:fe:3d:bf:ea:77:1d:dd:4e:93:4c:f6:
82:45:43:2e:b2:9b:4b:2f:f2:9f:d1:23:be:fe:b7:
b3:49:92:08:05:cc:52:e5:2d:15:3a:ce:14:a3:b1:
15:a8:1f:0c:24:15:cb:06:3e:43:3f:2e:d9:57:b2:
60:b8:47:96:59:c6:87:4b:c3:fb:77:3f:ed:bf:80:
af:f2:82:6b:d0:56:63:43:58:9b:09:dd:7b:aa:eb:
16:8f:5f:d8:64:68:b9:d4:73:36:8a:c4:16:ed:fe:
1b:f8:ff:7c:cf:5a:f4:b8:f7:e8:8f:98:04:5c:c1:
c0:a1:cd:9d:3c:0f:e7:3f:b7:ee:d7:c4:d3:3f:31:
37:fc:de:04:b7:d2:63:47:60:6d:cf:e5:89:d7:40:
6b:19:9f:dd:71:6b:5f:72:63:82:5d:d7:e6:94:51:
69:be:dc:68:b7:cc:51:61:ab:7a:f9:db:c5:8f:39:
83:b9:60:56:9e:8e:3c:e3:98:d8:84:34:eb:66:ac:
30:16:90:3e:82:6c:d9:06:24:86:de:32:eb:39:62:
44:af:22:3f:f8:3d:6f:b8:04:70:4e:2b:fb:1f:ca:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:C7:1C:CD:14:47:0B:89:4A:4F:4B:97:19:0D:1D:8D:D0:25:20
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.240.0/22
Signature Algorithm: sha256WithRSAEncryption
30:d2:fd:7f:b4:ee:be:51:cc:c9:de:8a:81:6b:16:56:db:48:
06:b8:98:a1:28:d4:87:b4:24:67:fa:99:e8:45:07:ea:d5:95:
38:80:63:c4:b4:41:c0:ed:06:ea:03:7a:2c:22:f5:9f:75:b6:
c6:64:6e:57:2f:ba:5f:50:0e:4d:41:c6:6a:66:ab:e1:29:b3:
22:28:7f:c3:d5:dd:a0:b9:27:8b:62:97:51:c6:4c:79:f8:6f:
5c:ef:ef:03:35:a3:18:0a:ad:f2:aa:7d:27:d5:8b:72:d8:97:
66:96:9e:18:3c:17:bb:02:5c:68:48:17:cd:23:92:d6:8e:61:
83:13:42:fa:85:f8:12:7b:d3:3e:80:99:be:4d:a0:b4:a8:60:
68:47:9e:29:f7:91:5a:39:a2:76:fc:ca:26:03:f1:43:97:79:
88:fc:4a:61:b4:04:bc:d0:00:77:95:65:8a:8b:46:f6:6b:52:
ab:42:b2:24:23:af:41:b1:44:bb:55:c5:db:98:42:2a:8a:9a:
6e:41:53:cb:2b:cc:14:17:bb:2a:14:25:57:68:4a:ac:da:d5:
5a:5c:4e:28:40:f9:6f:d1:f1:4a:8b:ae:11:6e:fd:bc:57:ba:
12:cb:cc:a5:88:e9:f7:ed:f6:5b:51:ae:96:5d:a8:e0:f5:0a:
37:ee:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:24:37 2025 by rpki-client