Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/ZVVp-hw2AMJ15Rd7WsMIT1Km8-s.roa
File: ZVVp-hw2AMJ15Rd7WsMIT1Km8-s.roa (raw, json)
Hash identifier: WgRizB9+0+5SvhRK1pWejgDCwkom7sFNhInASFXxJ7Q=
Subject key identifier: 65:55:69:FA:1C:36:00:C2:75:E5:17:7B:5A:C3:08:4F:52:A6:F3:EB
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 0194244562EAC843EFAF0CED52BD6B1A8FD1
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/ZVVp-hw2AMJ15Rd7WsMIT1Km8-s.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213047
IP address blocks: 91.234.236.0/24 maxlen: 24
185.103.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:ea:c8:43:ef:af:0c:ed:52:bd:6b:1a:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655569fa1c3600c275e5177b5ac3084f52a6f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:13:bf:66:3c:2e:12:58:93:29:8f:ff:33:
49:32:ef:ce:7c:00:28:1c:cf:ae:db:c7:f6:be:89:
f0:df:da:92:1f:17:5a:9c:c1:cf:db:f3:fc:44:05:
e1:2f:01:3f:6a:a2:35:f4:61:48:a1:ba:6d:39:2a:
09:70:5e:bd:d1:2f:91:57:75:86:68:4a:8d:11:5f:
73:8c:a2:80:3d:56:39:47:8e:2d:7c:bf:5d:ca:4d:
2b:77:4e:90:c0:dd:be:3a:e8:0c:ef:34:1e:2c:e4:
26:b2:70:49:83:67:53:e1:4c:87:fc:2b:50:07:40:
fd:86:2f:69:8a:20:e8:73:4a:96:9f:11:1f:74:0d:
e8:40:ba:37:8c:41:a7:81:3f:4b:d5:9a:96:ae:57:
6e:1e:e0:fc:31:3e:3d:d8:0a:5b:31:6f:20:ae:37:
7f:06:a7:1f:a4:0b:09:7a:bd:44:e0:e4:c6:50:c2:
f6:f6:b6:81:f1:15:2a:2c:f1:12:04:36:4a:90:ea:
fb:e5:29:01:dd:0d:57:53:8b:a9:6a:20:66:32:79:
fa:74:bb:cb:ba:10:a4:9a:48:52:c6:26:b3:3f:c5:
60:84:43:23:d2:d6:93:75:7b:4c:d0:9f:dd:23:a8:
28:da:05:67:6f:7c:f9:4b:7c:ef:dd:c7:b1:74:a1:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:69:FA:1C:36:00:C2:75:E5:17:7B:5A:C3:08:4F:52:A6:F3:EB
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/ZVVp-hw2AMJ15Rd7WsMIT1Km8-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
185.103.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1e:f5:3f:9a:b7:ae:ee:49:6e:0d:2d:e1:a9:50:2d:d9:c1:
5f:36:f3:2c:e9:fc:b7:07:c9:b8:51:0f:85:0f:09:b3:ae:63:
e5:1a:da:ef:f0:ed:a2:28:d6:33:0e:89:92:e3:b6:fd:d0:6e:
3c:59:57:f3:72:fd:e0:6b:1f:05:31:4a:58:33:2b:84:9b:0c:
58:00:5f:41:ff:b2:93:d7:98:72:91:a2:0a:49:9a:38:99:ba:
10:e6:ca:4e:0c:9c:b7:eb:d4:af:4d:ae:d7:6a:ae:10:9a:96:
6f:8f:c8:9d:86:c6:57:c5:7c:61:fc:71:c4:67:7b:f2:e3:e0:
9d:f7:cf:be:72:7e:61:95:35:c9:e7:54:63:87:a2:7b:66:b9:
95:5c:fb:ba:18:62:d5:e6:31:7d:0a:f9:d3:0a:0d:a5:92:40:
e7:ce:62:3f:30:cb:9b:3a:b4:a0:e9:68:1d:18:96:5d:55:5c:
e2:46:18:ff:e7:d5:eb:2c:dc:47:e5:2e:5d:f2:40:af:a0:2f:
a4:64:19:46:ab:9c:b7:cc:18:d5:01:0f:3f:85:d8:40:bd:7d:
90:c3:87:e2:39:a5:b6:33:03:66:bb:f0:be:3b:ab:48:07:39:
c8:25:0e:d8:b9:0b:36:9e:51:d5:0a:97:b9:52:7d:c5:d1:29:
94:2f:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:51 2025 by rpki-client