Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zvyVJN_aZvzaCLmZfGJRGx6967s.roa
File: zvyVJN_aZvzaCLmZfGJRGx6967s.roa (raw, json)
Hash identifier: rdV5/gElVPgskMR0vmAHlrltFnQ7r9PcXwHcxx98NMc=
Subject key identifier: CE:FC:95:24:DF:DA:66:FC:DA:08:B9:99:7C:62:51:1B:1E:BD:EB:BB
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C7F6C1B807D7C38C33CE2B0EFF82F
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zvyVJN_aZvzaCLmZfGJRGx6967s.roa
Signing time: Thu 02 Jan 2025 09:50:32 +0000
ROA not before: Thu 02 Jan 2025 09:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 94.233.176.0/24 maxlen: 24
94.233.177.0/24 maxlen: 24
176.208.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:7f:6c:1b:80:7d:7c:38:c3:3c:e2:b0:ef:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cefc9524dfda66fcda08b9997c62511b1ebdebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:f0:2e:2d:40:81:22:d0:37:75:bf:9d:a3:
49:bc:57:66:b6:d1:ab:bc:d6:9c:7c:64:fd:70:3e:
a1:93:63:88:6a:49:aa:3c:e9:c3:00:3d:e4:c2:a8:
5f:a4:ba:c7:76:a8:6a:aa:74:f9:23:2e:fe:37:83:
31:d4:98:24:5b:9e:ef:90:04:88:f3:20:70:48:89:
90:5f:8b:03:d8:51:e6:e5:7e:34:4e:78:4c:5f:c5:
d9:ef:b4:4b:6c:87:b0:9a:82:14:86:1e:cc:0c:f6:
66:e4:b5:55:fe:5f:53:25:e4:19:95:8f:e7:32:b2:
70:4b:59:a4:d0:52:ba:ab:69:ba:dd:de:8a:d8:e2:
89:be:2a:fc:b0:7e:a9:78:19:73:a6:11:c5:78:4b:
b2:b3:63:c8:2c:6b:5b:87:7e:e4:69:05:b9:f2:72:
4f:27:0b:89:53:14:e3:8e:04:7e:18:81:46:dc:22:
9c:5a:f2:8c:5a:7b:e7:9c:c3:7a:83:ce:1a:1a:39:
a9:f8:cb:77:11:9b:98:48:05:f1:a5:c6:8b:53:d7:
ea:d8:8d:01:dd:e7:99:54:74:fb:c8:18:b4:94:77:
6e:f8:f6:a6:52:b5:2e:54:38:bf:ed:bc:69:df:34:
e5:c1:3a:7f:0e:3b:49:ee:7f:23:a8:1b:ef:b6:28:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:95:24:DF:DA:66:FC:DA:08:B9:99:7C:62:51:1B:1E:BD:EB:BB
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zvyVJN_aZvzaCLmZfGJRGx6967s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.233.176.0/23
176.208.94.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0d:0d:f3:6d:f3:21:ba:4b:78:b2:a3:65:9d:cc:74:0a:95:
ba:49:ff:da:e0:40:b8:e4:2a:c3:77:dc:16:81:dc:ff:36:39:
6c:a1:c0:45:a6:f6:6f:3f:5a:2a:23:b6:cb:29:73:c2:9a:4f:
bb:15:cd:35:82:ac:9d:ce:d3:58:d2:4b:c2:89:27:79:ac:b0:
9d:13:52:2b:03:00:2b:99:e3:63:a6:7a:c4:36:e0:d2:9e:2e:
71:2a:d5:e8:6a:e8:c6:71:d8:60:55:b6:b8:0b:ad:ad:e5:53:
01:d7:e3:38:7e:ab:f6:27:7f:a6:ce:f9:ad:43:0a:f9:44:66:
75:54:75:84:5f:61:73:14:17:62:53:79:29:78:73:a3:20:c3:
6b:54:4b:75:6e:c1:2c:1d:4b:19:49:d5:58:9d:1c:c5:f2:2d:
45:40:c4:c4:fd:ff:cb:b8:1c:e7:9b:91:f9:30:d5:eb:9a:3a:
88:fd:60:c2:47:fa:49:a7:56:a6:5d:b2:ca:d8:23:be:64:b4:
fe:ef:f1:a6:05:a9:15:7a:e9:84:da:bd:5c:70:e8:87:d0:08:
b5:e4:ea:bd:fd:94:70:b3:b3:30:80:ba:4f:75:d1:ad:cd:1e:
92:20:5c:93:18:e1:8b:9f:1d:e4:76:59:a9:5e:64:f9:d9:8c:
db:b1:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:54 2025 by rpki-client