Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ZyyMUpD8BracjmDLdZi2eYsV3GA.roa
File: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (raw, json)
Hash identifier: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=
Subject key identifier: 67:2C:8C:52:90:FC:06:B6:9C:8E:60:CB:75:98:B6:79:8B:15:DC:60
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019421446E849D7EC4851BA19A06D9F6D06F
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ZyyMUpD8BracjmDLdZi2eYsV3GA.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 185.76.124.0/22 maxlen: 24
185.126.56.0/22 maxlen: 24
185.210.120.0/22 maxlen: 24
2a0b:56c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:84:9d:7e:c4:85:1b:a1:9a:06:d9:f6:d0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=672c8c5290fc06b69c8e60cb7598b6798b15dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:01:7b:8b:e8:02:ac:70:63:37:09:d3:aa:
aa:db:fe:83:0b:6b:5a:60:8c:05:98:e8:74:aa:4d:
82:09:0d:3a:6b:10:2c:c5:38:66:d2:ee:bc:f5:fe:
2d:70:8f:92:4f:e9:f3:48:c7:22:e7:d1:41:fc:ce:
1b:7d:39:b5:03:72:2b:3e:d8:62:e8:12:d7:39:91:
32:f8:a7:c4:08:9e:ba:ac:5e:ab:43:a7:32:e6:1f:
54:cc:1d:d4:84:11:72:fa:47:33:af:56:48:75:80:
94:35:7e:5e:bc:eb:0b:e7:5c:78:34:20:d0:78:db:
a0:6f:41:c2:2c:ef:4d:40:b2:59:52:11:25:d3:bd:
44:85:cb:40:e5:3c:19:8f:aa:18:6b:03:01:ed:c3:
8e:ef:e3:da:e3:40:bd:42:66:27:cd:80:aa:18:32:
d7:9b:d9:d4:44:89:c6:33:8c:3b:d2:5b:e3:f9:7a:
ea:f1:18:1d:3d:24:7b:1c:af:cd:c1:3b:b9:27:fb:
11:df:c9:33:70:b3:61:1e:9e:b6:f6:0a:d0:1e:e7:
f1:ec:99:5d:fb:65:0a:de:48:03:cb:73:07:37:81:
6c:dd:03:c3:24:0e:b0:d4:38:56:f3:11:3d:de:79:
fc:34:4d:7a:36:77:21:a0:23:29:e0:7e:3f:d9:cd:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:8C:52:90:FC:06:B6:9C:8E:60:CB:75:98:B6:79:8B:15:DC:60
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ZyyMUpD8BracjmDLdZi2eYsV3GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.124.0/22
185.126.56.0/22
185.210.120.0/22
IPv6:
2a0b:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:08:2b:37:0d:f4:dc:e3:63:b4:38:31:ed:63:7e:94:5f:5e:
db:27:79:8e:60:d1:23:d8:a8:2e:ea:87:a2:86:5b:d7:34:37:
b5:9a:b3:ef:23:e6:73:88:bd:1a:35:d6:34:83:02:6f:13:91:
e4:ff:77:5e:ff:77:ee:d6:1a:c4:c9:ed:2e:26:61:30:11:70:
af:b0:b6:d1:b2:67:6a:b8:d1:29:fa:59:9b:f4:6e:09:12:79:
8e:b3:f9:80:63:e6:ca:b0:3a:76:d8:f4:99:b6:73:1d:d1:65:
43:dc:f3:91:41:c7:b6:27:4e:40:ff:14:bf:ca:6b:b2:8f:fa:
00:9d:c1:8a:5c:13:63:db:32:77:6f:f4:0c:33:0d:d4:f0:2d:
45:35:4e:a2:f6:b9:de:9b:47:62:c0:f3:23:fb:cd:b7:97:36:
08:85:7c:7a:36:fc:77:13:6b:a0:25:1e:23:81:e9:29:47:6a:
a3:75:2b:22:6f:04:12:0e:f4:3e:b4:d6:28:c8:81:07:ec:a4:
73:5f:a7:17:26:98:df:44:6b:ed:d8:9e:6b:e3:6c:2c:5c:a2:
67:5a:de:3b:39:12:b3:63:c2:49:d7:8f:dd:7d:eb:08:58:ad:
eb:cb:da:42:3e:f0:a3:01:9a:d4:5f:af:d9:4f:72:06:d0:ba:
b1:68:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:59 2025 by rpki-client