Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zYXLhXABENFFoLI0_HYyaaOqd-Q.roa
File: zYXLhXABENFFoLI0_HYyaaOqd-Q.roa (raw, json)
Hash identifier: V8MGl5aqx8CI1uXGraAgdNMjaSK0Cl+X0X3us6n6N3E=
Subject key identifier: CD:85:CB:85:70:01:10:D1:45:A0:B2:34:FC:76:32:69:A3:AA:77:E4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0194CFC5FCBF129FF6691C2D2CEA1938F2B8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zYXLhXABENFFoLI0_HYyaaOqd-Q.roa
Signing time: Tue 04 Feb 2025 07:04:06 +0000
ROA not before: Tue 04 Feb 2025 07:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 192.253.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:c5:fc:bf:12:9f:f6:69:1c:2d:2c:ea:19:38:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 4 07:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd85cb85700110d145a0b234fc763269a3aa77e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:62:49:70:09:97:09:57:0e:93:a6:27:02:
1a:63:a2:21:69:b4:20:e6:03:b9:fb:ed:2b:e7:04:
7c:39:77:3f:55:74:11:0e:7f:ad:71:04:5d:49:c1:
cc:6e:93:c6:b9:d5:51:77:df:00:d4:9f:1c:48:66:
3f:1a:16:aa:53:72:3a:1a:c8:81:68:00:e9:e2:cb:
ce:bb:4c:86:f5:41:a1:a4:d4:f4:8a:10:34:a0:53:
1b:e7:12:ff:7f:83:91:21:87:af:74:1d:e9:03:3b:
8d:88:11:c6:fe:f7:ea:bc:1e:19:b5:c6:77:99:cd:
f2:b6:61:ee:88:a9:ea:a5:9e:a9:9c:dd:84:f3:8d:
cf:25:e1:f1:9f:d5:f0:3a:fb:4a:c8:49:a8:b0:65:
d0:1b:88:89:13:66:bb:24:53:4c:ea:63:77:ea:1d:
bd:18:7b:d4:4e:0e:2d:e8:b5:c5:7c:11:ed:05:60:
fc:3e:a6:d3:25:dd:c9:90:f9:00:35:c6:2c:6c:c7:
a0:bf:9f:31:74:c8:79:8d:ef:75:61:fe:ca:d4:9a:
78:e2:07:0b:9c:b1:1b:db:a8:25:64:3c:06:db:b0:
9f:53:e9:ca:b6:1a:f9:cc:45:d3:85:af:f6:f4:83:
89:49:e2:44:b9:21:6a:99:ab:24:21:43:ae:ee:1f:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:CB:85:70:01:10:D1:45:A0:B2:34:FC:76:32:69:A3:AA:77:E4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zYXLhXABENFFoLI0_HYyaaOqd-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.253.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2d:79:7f:e9:a2:9e:c2:39:78:ca:8e:77:bb:44:3a:38:33:
6a:03:ee:23:38:2e:87:4a:01:21:82:bf:bc:12:d1:49:92:82:
9a:24:72:23:99:60:e3:23:53:df:c3:96:04:8f:cc:5c:c2:dd:
93:37:bc:cb:18:cc:56:68:67:90:a8:82:0e:96:ba:a9:f5:4a:
76:45:45:b6:e3:b6:be:ec:9d:e2:2b:a2:fe:93:49:ad:46:3a:
72:a8:89:dc:fe:00:50:14:85:a9:ef:88:9b:4a:b4:ed:55:5e:
d1:0c:81:b3:93:6f:d9:94:21:88:3b:9a:b9:3f:ce:51:74:f0:
9d:88:9c:ca:c8:5a:95:bf:6b:38:35:85:27:8f:2b:05:86:2f:
04:7d:60:ef:ac:64:01:d6:8d:fe:28:b8:ca:87:48:1f:c9:7a:
ce:15:89:20:22:7a:b9:ed:3e:36:52:d9:ab:f0:ea:05:8e:37:
ae:89:d7:14:ac:59:cb:23:ec:1b:e9:c8:e3:60:1b:9f:0a:2d:
9b:c8:5d:76:f6:87:48:e3:d3:70:5f:ef:b0:a8:0f:70:7b:6d:
01:e3:9d:e2:cc:6c:2b:10:7c:a9:e7:4c:70:9b:ed:be:5e:62:
93:8a:30:53:79:9d:7a:a0:54:23:82:14:49:87:5e:6b:81:fa:
f6:67:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:54 2025 by rpki-client on console.sobornost.net