Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/ZPx2mzUkeOD00cVnYPqjI9aytDo.roa
File: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (raw, json)
Hash identifier: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=
Subject key identifier: 64:FC:76:9B:35:24:78:E0:F4:D1:C5:67:60:FA:A3:23:D6:B2:B4:3A
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019425FDCDD5F3636F314DC098C440EA9CDF
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/ZPx2mzUkeOD00cVnYPqjI9aytDo.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201401
IP address blocks: 185.168.200.0/22 maxlen: 22
2a0a:1d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:d5:f3:63:6f:31:4d:c0:98:c4:40:ea:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64fc769b352478e0f4d1c56760faa323d6b2b43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c6:68:83:d0:57:ed:ff:71:18:8d:e0:b0:27:
41:2c:99:2f:45:9c:e4:8a:15:79:da:c9:68:c3:2e:
3a:39:ea:c3:06:2d:b2:1b:49:3f:37:5e:fe:c8:b8:
e0:b5:ed:8c:ca:1f:de:de:aa:0b:13:15:2a:90:d7:
d3:24:00:d7:48:c6:e3:73:c0:19:2c:96:5d:49:5d:
91:2a:c1:1a:81:20:a3:ab:58:2a:42:9b:0d:eb:dc:
fe:1e:c9:d4:76:d8:a1:b6:81:08:a8:15:58:38:f9:
5d:46:a4:9e:6b:7a:c1:ab:1c:84:08:35:95:f4:9b:
54:86:a4:c9:8b:f1:dd:99:a8:76:5a:b8:e8:23:86:
4b:73:29:d5:ad:be:88:19:94:67:19:21:88:ca:ad:
bd:d1:3e:3c:ae:62:04:8a:fb:9d:41:dd:07:d9:07:
7a:0d:73:35:be:ff:ae:70:b0:63:25:87:16:de:78:
ee:79:9a:ab:bd:23:31:2b:f0:b4:a8:49:43:49:7d:
24:ab:ee:ec:ed:0e:ef:6a:0a:be:c7:d7:e6:2d:36:
c2:53:9b:b9:48:98:cb:4a:73:8e:ca:4e:a5:12:ce:
85:c0:69:76:a2:93:48:44:b2:35:c8:e7:d1:66:e5:
6c:5b:24:a8:dc:a2:4e:40:2f:7a:58:95:df:ce:42:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:76:9B:35:24:78:E0:F4:D1:C5:67:60:FA:A3:23:D6:B2:B4:3A
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/ZPx2mzUkeOD00cVnYPqjI9aytDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.200.0/22
IPv6:
2a0a:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
60:7b:36:5e:04:9b:d1:26:da:ac:3e:b4:96:f8:5f:9d:20:5a:
84:75:49:c1:ca:b6:1f:a2:fa:a5:27:ae:50:94:9a:af:ed:68:
03:da:5a:21:0c:37:f3:ea:60:00:42:a7:91:41:23:d3:ee:3e:
c9:c4:b7:bc:cc:ee:a8:2b:cf:f8:ab:e0:fb:14:68:01:cd:5e:
0b:be:75:e2:2f:a3:d0:b7:f7:04:f2:4b:ed:9f:bc:69:75:fd:
f2:a0:67:aa:74:fe:5e:40:ee:ca:2a:80:c7:05:41:aa:e9:dc:
2f:6d:49:ec:4b:fd:39:22:ab:66:74:2c:cd:bc:9b:2c:1a:2e:
4c:e1:a3:f0:1a:61:7c:aa:2b:d3:99:b5:b2:5c:b5:fb:68:32:
6e:f8:ac:3c:e6:6e:84:b0:cb:ce:05:3f:85:f4:5c:65:4b:30:
0b:bc:52:b7:72:03:57:2e:59:d3:b7:39:b5:97:ad:f3:9c:40:
5f:08:74:69:16:cf:ee:4d:ec:d3:84:67:c7:2c:9d:50:85:8c:
9e:28:10:d5:af:be:a3:68:1f:f5:48:0b:39:87:f1:b0:c6:bb:
11:ba:6d:34:53:2e:af:50:d4:2a:9e:bd:96:ad:b2:1c:83:01:
c1:59:0c:27:c3:5a:51:2c:69:66:44:77:50:fd:57:9d:81:bd:
fb:2f:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:53 2025 by rpki-client