Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa
File: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (raw, json)
Hash identifier: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=
Subject key identifier: 64:47:FD:6A:1C:D3:5D:28:27:D4:20:6C:1C:AF:C4:CF:30:2F:FC:30
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195A0B233BD12FC0EC4E5D12C9B04EF0A41
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa
Signing time: Sun 16 Mar 2025 20:43:08 +0000
ROA not before: Sun 16 Mar 2025 20:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58349
IP address blocks: 194.143.203.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:b2:33:bd:12:fc:0e:c4:e5:d1:2c:9b:04:ef:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 16 20:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6447fd6a1cd35d2827d4206c1cafc4cf302ffc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:fe:04:13:93:da:7f:bf:df:be:0a:1c:a7:
82:ce:ed:d5:06:08:f1:36:d3:21:17:eb:dc:b3:37:
e6:cc:40:b8:09:c8:e7:7d:02:0a:38:6b:0a:2d:2b:
21:8e:d5:65:20:7b:0e:74:b9:3e:fb:77:f2:fd:24:
ec:b9:45:c8:18:6e:88:b6:f9:e8:84:01:9e:60:b1:
91:11:54:23:b7:9a:60:27:20:cf:33:19:36:14:5b:
b4:e4:de:e8:80:cb:02:13:dc:b3:bd:44:8d:50:0c:
f5:b1:3d:2e:10:bf:a6:b1:e3:67:88:13:fd:67:4d:
0b:ce:94:d7:b4:1e:56:72:07:80:33:6e:57:1e:6c:
24:eb:f3:ef:16:86:39:78:b9:5c:e9:10:b5:f8:aa:
da:f3:a8:13:e9:70:e2:0f:be:7b:7d:d1:cc:9f:47:
6e:3e:eb:2e:76:81:b0:4e:19:2c:e3:a1:85:4e:8c:
99:91:f1:5f:23:97:a8:5b:8e:0b:33:01:4a:f9:50:
3a:6f:26:35:20:2d:fc:d4:12:7a:bd:aa:fc:28:6e:
bb:04:3b:a7:3d:be:e7:60:6b:86:d1:49:41:0b:dc:
f2:2f:9c:82:3c:ef:fc:7a:bd:fd:9f:af:7d:27:9b:
bf:5e:39:0c:0f:af:66:e0:72:02:86:5d:98:1a:6f:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:FD:6A:1C:D3:5D:28:27:D4:20:6C:1C:AF:C4:CF:30:2F:FC:30
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.203.0/24
194.143.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:87:7c:12:71:a3:8c:b0:e7:ca:af:78:0d:6f:d5:de:49:44:
9b:2d:1b:4e:07:5e:ae:41:29:78:2a:f1:46:bf:a5:1a:95:34:
76:e2:01:39:af:4b:2d:30:69:77:92:1c:67:69:1e:f5:fe:e0:
6f:58:0f:54:23:64:31:d4:d3:c6:f6:1c:79:5c:1a:e6:b9:40:
55:05:79:2d:0f:c0:dc:ae:6a:60:01:67:56:1e:21:71:94:3b:
ad:f4:20:99:e1:93:0d:41:2a:71:99:6a:5f:21:48:da:d5:ff:
25:a2:d5:a3:05:17:d2:93:d0:04:71:b7:dd:d9:69:05:3e:d0:
f3:ee:a1:fe:46:33:a8:8a:cf:44:c1:6d:2b:7a:4e:15:3f:5f:
56:9a:d9:b9:c5:74:01:c6:d2:cb:25:25:cc:3c:ee:72:c5:92:
19:a6:8e:d7:6a:50:22:f4:8b:dc:ed:18:1b:d2:02:ec:b1:e1:
59:37:1c:24:2c:66:36:fb:91:3b:86:05:17:eb:7f:d3:d4:f7:
d0:cd:bd:9d:d2:a1:bd:13:64:58:db:60:94:e7:db:d2:69:db:
09:72:f1:4d:11:b6:ed:5c:ba:d5:44:61:7f:95:fe:c6:c0:69:
59:3b:2b:38:91:dd:bc:cf:82:5d:35:77:b6:e7:29:fb:e4:db:
87:ad:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:30 2025 by rpki-client