Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Z2DqEgC6QqIyodzgLglZaFgztys.roa
File: Z2DqEgC6QqIyodzgLglZaFgztys.roa (raw, json)
Hash identifier: BJYByspWNrkDMwc6Zk8CvgfsRKO7DBkwt35TDpPZ6KE=
Subject key identifier: 67:60:EA:12:00:BA:42:A2:32:A1:DC:E0:2E:09:59:68:58:33:B7:2B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200DBE87C7154FA5F0569ACAD3EDEF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Z2DqEgC6QqIyodzgLglZaFgztys.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 94.229.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:be:87:c7:15:4f:a5:f0:56:9a:ca:d3:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6760ea1200ba42a232a1dce02e0959685833b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:93:b4:f9:c6:c9:a7:ae:58:f8:40:f3:47:
9b:08:01:5d:00:84:93:1c:d3:52:da:a0:d4:8b:9c:
d4:a1:60:8f:9c:5d:41:8c:21:4f:8d:44:f1:03:23:
86:01:fd:11:a6:36:e4:e3:9e:6c:a7:f0:25:a0:1c:
27:10:ec:9b:52:d3:3f:c4:71:e6:e1:5a:a2:82:8a:
f1:95:e7:70:0b:b3:00:66:b0:54:5b:0e:fa:84:25:
a7:63:5d:6d:1b:fa:11:d9:fc:82:61:54:da:e4:ec:
13:7b:7c:49:1b:68:02:6e:81:96:3d:da:33:10:57:
87:12:26:3c:2b:24:ee:69:e8:5c:04:6f:8f:f6:c3:
33:ae:0f:46:3d:95:4a:85:59:18:3e:53:c9:0a:3d:
25:8f:de:e1:2a:bd:d4:36:3c:8c:22:df:69:bd:fd:
90:3f:67:33:a9:b3:aa:33:28:b8:89:35:6d:19:1f:
5b:1b:06:56:96:a9:2f:65:ac:52:59:43:3e:ab:2d:
f8:5a:d6:46:d9:ae:7c:20:2f:18:1f:ef:b2:41:c1:
38:ce:26:d3:e7:18:d0:08:36:e5:e3:f7:04:9d:45:
fc:31:69:49:35:1d:18:aa:91:68:b3:a2:3c:d4:cb:
bc:c7:ea:b9:39:94:c0:9d:a0:18:11:6d:f6:73:18:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:EA:12:00:BA:42:A2:32:A1:DC:E0:2E:09:59:68:58:33:B7:2B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Z2DqEgC6QqIyodzgLglZaFgztys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4d:c6:29:5e:01:e8:ad:5a:69:82:c4:1d:62:17:32:f4:fb:
6b:c6:04:2d:18:11:f9:63:47:57:01:f3:59:20:95:05:61:bd:
3c:ee:78:4f:1b:f2:33:bc:4d:01:36:d2:aa:8d:02:f9:b3:fb:
c1:76:2d:19:af:21:b1:e5:31:9d:4b:b6:01:65:9c:be:18:0e:
93:a8:a4:6a:ac:d1:75:1b:85:68:64:8b:de:06:38:68:96:c3:
1d:1e:47:b7:f9:68:5a:3e:ef:17:a6:0a:ea:aa:27:0e:81:eb:
79:d8:bd:de:e9:92:d5:74:fc:41:d8:85:6f:a1:24:41:3b:9d:
23:5c:48:7e:11:9c:37:b9:76:dc:3a:bd:64:da:48:24:9f:cf:
88:4e:2d:ea:35:6d:1c:3a:1a:76:14:05:de:f8:30:4f:83:c2:
d0:ad:91:2e:be:d6:ee:8e:a7:5e:bd:d3:0c:99:ea:17:7d:57:
8d:04:50:e0:b1:a0:2d:33:18:4b:e0:76:9e:4e:6f:8b:61:72:
d2:83:36:6a:fa:af:ea:66:d7:03:43:9f:6f:8f:1c:af:6e:66:
4d:2c:5e:37:77:30:b5:f9:01:f2:af:36:af:35:80:d4:31:be:
55:ee:fe:eb:d5:84:d4:2e:5c:2e:34:e5:1e:a0:21:6c:aa:b3:
de:db:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:47 2025 by rpki-client