Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa
File: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (raw, json)
Hash identifier: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=
Subject key identifier: 65:FA:EA:07:E2:61:7E:2A:8D:45:67:B7:CE:3D:18:84:18:76:56:09
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019425FDA408A8ACE50379EAC3A70BDA466A
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49935
IP address blocks: 83.172.140.0/23 maxlen: 28
83.172.144.0/22 maxlen: 28
83.172.148.0/24 maxlen: 28
83.172.186.0/24 maxlen: 28
185.1.243.0/24 maxlen: 28
185.94.136.0/22 maxlen: 28
185.135.191.0/24 maxlen: 28
195.62.90.0/23 maxlen: 28
2001:678:9ac::/48 maxlen: 126
2001:7f8:12d::/48 maxlen: 126
2a10:1740::/29 maxlen: 126
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:08:a8:ac:e5:03:79:ea:c3:a7:0b:da:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65faea07e2617e2a8d4567b7ce3d188418765609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:c8:89:45:78:73:26:a0:eb:6e:c8:8d:f7:
c1:33:38:9a:7d:d5:74:91:11:b7:a4:00:bd:e2:90:
2e:d4:e1:c6:98:9d:79:fa:2d:c7:2e:a7:bb:c7:ab:
c9:c9:ea:dc:93:67:32:e8:01:77:18:d3:32:28:77:
d1:4b:3d:f6:56:ee:f2:28:fb:a0:ba:46:8c:0b:1c:
f1:7e:ac:c0:95:98:a7:88:e8:76:5b:9b:88:3e:d3:
46:cf:57:75:9a:bd:ad:c5:3b:69:ff:bb:5f:b6:3c:
6c:58:1d:4a:fa:ac:ac:0f:12:97:44:db:ae:fd:ac:
42:6e:9a:a7:04:95:9d:ef:47:c9:fc:f9:b4:8c:b3:
1b:29:bf:a2:7c:4a:1c:69:51:32:3f:09:b6:52:d4:
8d:55:61:40:99:b6:35:ba:e0:3c:89:b1:0e:ca:be:
28:04:91:2d:92:b6:30:82:a9:76:89:09:14:97:4f:
e5:d9:fc:cc:43:4b:3d:9b:26:86:56:8b:6b:35:12:
cf:31:d1:dc:46:73:9d:bf:53:ba:6c:fa:e9:20:25:
1c:2f:3b:ee:3d:44:91:66:7c:10:31:51:aa:f3:e9:
59:1d:d7:76:72:95:28:aa:37:b5:b8:7c:39:f3:af:
48:cb:8a:a1:f5:19:10:24:35:ec:64:8a:68:20:b2:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:EA:07:E2:61:7E:2A:8D:45:67:B7:CE:3D:18:84:18:76:56:09
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.140.0/23
83.172.144.0-83.172.148.255
83.172.186.0/24
185.1.243.0/24
185.94.136.0/22
185.135.191.0/24
195.62.90.0/23
IPv6:
2001:678:9ac::/48
2001:7f8:12d::/48
2a10:1740::/29
Signature Algorithm: sha256WithRSAEncryption
2a:63:68:8b:c3:c9:6d:b2:9b:9b:45:81:b1:36:c4:aa:db:c0:
6b:03:ed:4c:f4:42:54:31:0e:6f:27:77:0b:5e:49:84:34:57:
3e:e5:db:c5:0a:43:87:4c:af:fe:d8:00:7a:73:79:31:a9:79:
ff:ac:6f:4f:83:9d:55:11:5f:63:a5:8e:40:e8:40:00:fb:a2:
0f:8f:d7:fc:96:00:b3:3c:3d:93:17:2a:2d:d8:a6:5d:e6:a7:
1a:10:a5:c0:11:fd:a0:e0:9f:06:f0:50:63:b2:22:a3:da:0a:
9e:8a:af:e1:e1:0b:44:de:50:72:78:fb:8a:f5:2d:7a:19:72:
b8:a6:fe:d7:e2:c9:c6:1c:8e:b8:04:3c:d7:ae:cb:93:f6:6b:
90:28:0e:55:95:a6:f5:08:95:ee:f3:aa:a2:a9:e6:9a:15:4a:
7f:ea:bf:49:01:17:05:00:81:b3:85:1a:37:47:68:4c:7d:69:
18:a3:06:eb:d6:ed:74:ca:35:54:26:01:db:99:37:b3:d3:70:
06:46:5b:23:80:5a:5e:0f:1e:eb:50:6b:d8:c0:a9:6d:ed:36:
57:52:b2:de:6a:62:84:d3:de:2d:64:bb:0e:58:c9:0a:90:4a:
3c:6b:2d:a7:f2:0e:4f:e2:97:79:fb:eb:1d:e9:c2:3d:7d:fd:
9b:40:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:22 2025 by rpki-client