Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZlPXqJgxLKwatFq0G6tN4S6CPs4.roa
File: ZlPXqJgxLKwatFq0G6tN4S6CPs4.roa (raw, json)
Hash identifier: 1SKtR6Bju4Rwt9GRWJ54tTmwyfl8XIKK/PwUHAsdONI=
Subject key identifier: 66:53:D7:A8:98:31:2C:AC:1A:B4:5A:B4:1B:AB:4D:E1:2E:82:3E:CE
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01942068128F9089FF334D17303485F800EC
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZlPXqJgxLKwatFq0G6tN4S6CPs4.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 185.152.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:12:8f:90:89:ff:33:4d:17:30:34:85:f8:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6653d7a898312cac1ab45ab41bab4de12e823ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:60:5c:54:ad:72:5f:42:a8:03:c2:6d:b5:
8b:b2:d3:72:f3:28:ec:29:e2:9a:fc:68:78:9b:62:
90:e7:b5:e4:c6:80:af:e4:ba:cf:d2:85:2d:ca:ce:
02:98:ea:ee:71:e6:fc:31:b1:9c:88:cc:99:34:14:
ad:b6:13:89:c6:b4:d6:d8:58:af:76:79:1f:e8:a0:
d5:78:10:cd:1a:55:76:7d:4c:ac:98:a8:d1:6e:77:
5c:1f:79:99:c8:08:14:d1:ff:7c:81:68:74:04:85:
48:e8:0a:82:89:51:89:a6:01:ac:80:f5:a6:57:5b:
e4:f1:e4:d4:7c:a7:19:52:4c:0b:04:05:c8:69:bf:
65:b3:ad:8c:de:27:49:d1:4e:02:47:17:1a:68:83:
bc:d8:c1:b2:ba:a9:90:07:f1:8f:95:c9:02:68:bf:
38:a2:c8:cb:9b:12:a4:80:1c:f3:e1:a1:dd:80:13:
54:d1:3f:32:4a:a1:9e:da:92:14:30:b3:ef:ab:07:
ac:31:6d:21:df:57:5b:35:1b:c2:0b:0c:2b:c6:32:
84:6c:3e:53:6c:2b:53:b7:10:83:46:5e:76:82:d6:
ad:7c:ba:7a:8e:91:0a:cd:e2:c2:ba:c3:22:e1:6d:
95:eb:9e:f7:02:00:56:b4:19:3f:ea:d2:dc:e4:26:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:D7:A8:98:31:2C:AC:1A:B4:5A:B4:1B:AB:4D:E1:2E:82:3E:CE
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZlPXqJgxLKwatFq0G6tN4S6CPs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a8:27:9a:91:97:3f:4b:e3:44:69:24:2b:ed:80:fc:9b:78:
e3:b1:27:7b:19:4e:f8:24:ca:b1:a8:b2:c2:6d:f1:4a:16:a2:
ab:c0:f2:7c:a5:df:f6:47:7f:5d:c3:a0:d2:34:da:03:32:10:
da:43:49:8a:4d:2d:a7:2b:d9:42:bb:69:9b:fb:c1:14:ba:1a:
99:7f:dc:0b:91:6f:03:58:69:5e:21:e7:f8:43:52:c7:36:9f:
eb:4d:60:82:2a:c0:ea:5f:93:6f:58:67:39:c4:78:bf:c5:f7:
e3:f5:c8:fd:33:5d:92:e5:f3:0e:db:31:b0:45:81:c0:9d:18:
70:d3:30:34:14:02:53:c4:81:88:14:60:4e:15:2d:52:7a:cf:
72:fb:1a:36:6b:dc:e0:9a:c5:aa:ed:80:90:f8:4b:b0:7d:8f:
e0:18:94:ce:aa:69:79:f0:74:89:15:59:a9:d7:2d:3a:11:3c:
fe:7b:5b:05:53:f3:f3:25:67:86:11:1e:d7:6c:32:3e:04:e4:
4a:37:8f:2a:6d:65:64:1f:6f:04:57:65:d6:27:f8:21:24:9e:
0d:9a:be:da:db:ee:ce:d7:23:13:49:f1:c9:66:3e:86:e1:bf:
74:fc:79:88:40:ab:55:b3:86:d6:27:6b:94:99:8a:39:52:0a:
d9:3c:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:34 2025 by rpki-client