Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa
File: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (raw, json)
Hash identifier: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=
Subject key identifier: CE:01:D7:5C:A8:55:EB:1D:3C:22:27:62:F6:43:FF:30:30:5D:67:C5
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 019526069F747143B00B6FA5E076B4E66A73
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa
Signing time: Fri 21 Feb 2025 01:02:03 +0000
ROA not before: Fri 21 Feb 2025 01:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60184
IP address blocks: 194.48.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:26:06:9f:74:71:43:b0:0b:6f:a5:e0:76:b4:e6:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Feb 21 01:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce01d75ca855eb1d3c222762f643ff30305d67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:69:76:27:d1:a7:76:f5:c9:34:f3:54:eb:
44:d5:76:57:c4:b7:cf:8a:2e:cf:2b:9b:89:8a:45:
47:c9:d2:85:43:50:bb:29:95:e4:26:7c:89:9e:9d:
4d:ea:19:c6:22:e0:1b:16:a0:c8:4d:fb:7d:b9:90:
21:e1:7e:fc:bf:0b:23:55:02:6c:ed:53:ed:d8:33:
ac:b8:7d:bf:45:74:64:e0:21:e0:ed:07:6f:c8:b0:
d2:18:9b:c5:c5:21:28:41:ab:d4:b3:cd:fe:2d:ce:
1c:d5:7b:63:7d:b6:74:20:5c:09:a6:b7:ab:9f:19:
fe:58:32:79:c3:93:11:c6:f6:82:96:16:e4:05:e3:
af:61:f3:16:c4:3e:d0:4f:3d:51:e6:cb:8b:72:e2:
7f:e3:d4:35:54:b2:a7:5b:9d:09:93:78:51:f2:3f:
97:8b:ef:84:a7:f8:06:e6:36:87:14:93:b2:28:0e:
dc:05:55:9d:8b:62:41:22:4e:f8:99:60:b0:d8:5a:
96:59:5c:aa:26:d2:d2:9e:e6:0c:35:8d:23:94:72:
b4:9c:1d:9e:82:8a:88:86:03:19:ad:7d:d6:d3:f2:
ce:b0:6b:be:fe:96:80:f8:87:81:f4:51:c9:16:02:
65:d5:86:cc:bc:12:d0:cf:c8:e0:6b:5f:c5:1b:57:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:D7:5C:A8:55:EB:1D:3C:22:27:62:F6:43:FF:30:30:5D:67:C5
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.213.0/24
Signature Algorithm: sha256WithRSAEncryption
69:12:38:a8:2c:c0:c2:7f:25:eb:bc:53:da:07:f6:85:95:95:
fd:7d:88:04:24:ff:8b:f4:57:a2:3d:7c:cb:b8:f0:1e:60:51:
9a:47:92:08:bc:f4:4d:ed:f7:e5:5a:e0:88:c4:1e:cc:8a:5d:
99:9a:fe:37:c1:2e:97:20:98:d1:5b:6a:4a:e7:1b:15:8d:ce:
cb:af:f9:07:92:c8:36:cb:5d:00:8f:11:75:08:b2:7e:ab:1b:
54:9a:e9:78:e2:41:78:11:81:d1:c6:1a:77:bc:d2:c4:d4:13:
d0:e6:50:c8:28:eb:d8:e7:fd:4d:0d:1d:09:7f:81:b0:27:2d:
2a:cb:6b:aa:06:c7:8f:71:06:16:ec:c5:01:7f:fe:dc:31:b2:
84:64:bd:f6:70:50:ad:fd:c2:14:62:49:30:6d:0b:59:6e:f3:
ff:2b:07:21:f7:a4:1c:be:f2:10:f7:12:62:63:98:31:8c:e4:
2e:fd:95:bc:e1:09:24:5e:6f:ae:54:a8:20:0a:a0:05:8b:49:
c8:b0:f7:44:58:35:fd:af:88:7e:ed:83:00:7d:79:0a:89:92:
63:e2:02:47:dd:d8:2a:b5:e6:d7:5c:45:ff:48:ba:24:d0:a7:
e7:de:f5:9a:74:00:25:ff:4b:12:0b:2d:f8:fa:ee:6c:67:0d:
53:6e:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net