Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/ZrChAnEIC7XkkvtmNcAU0NitmrI.roa
File: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (raw, json)
Hash identifier: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=
Subject key identifier: 66:B0:A1:02:71:08:0B:B5:E4:92:FB:66:35:C0:14:D0:D8:AD:9A:B2
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019425FC497177835CE4D9C460F3D022CED6
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/ZrChAnEIC7XkkvtmNcAU0NitmrI.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203751
IP address blocks: 80.80.82.0/23 maxlen: 24
185.124.140.0/22 maxlen: 24
185.124.141.0/24 maxlen: 24
185.132.184.0/23 maxlen: 24
2a06:ab80::/29 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:49:71:77:83:5c:e4:d9:c4:60:f3:d0:22:ce:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b0a10271080bb5e492fb6635c014d0d8ad9ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:07:cc:2b:88:81:40:64:5d:56:18:fa:07:
1f:fb:6c:3c:6a:a5:e2:78:ad:f2:b0:d3:b3:a0:a1:
fd:4e:04:07:d7:01:1a:18:5b:b9:d7:97:82:84:2c:
a4:9c:74:d4:77:46:7c:7a:3c:b9:d9:24:4c:51:f6:
b1:e5:33:38:5d:bd:aa:36:e4:7c:5d:27:e2:11:5a:
ee:02:92:3d:f7:a7:8f:8a:cf:e8:3e:50:cb:44:20:
f6:0d:0d:b8:5e:3c:9b:b1:94:2d:fd:c0:b5:6d:d9:
af:e8:3a:e9:72:37:5b:cf:e0:b6:6b:51:65:03:18:
6a:71:5a:6a:c3:10:2d:c6:f6:ea:b0:81:c1:91:58:
27:66:69:1d:b1:68:9c:61:81:a5:92:0a:83:35:42:
2e:49:7e:82:76:01:7e:43:75:05:da:56:8a:ea:5b:
9f:a8:a2:2d:7f:4d:48:42:6b:c7:78:ac:74:60:55:
51:ac:95:2c:59:5d:be:c7:df:fb:8e:48:78:5c:b5:
cc:5b:57:cf:06:d8:a2:89:a5:b1:0a:bc:d7:1a:4b:
dd:d4:62:ac:ab:48:84:dc:17:64:51:c4:61:66:ff:
88:73:eb:34:ad:ca:cc:79:3e:64:ec:bf:8a:7f:26:
d7:3f:25:25:e6:7f:02:b3:31:ac:02:e4:1e:b0:7a:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:A1:02:71:08:0B:B5:E4:92:FB:66:35:C0:14:D0:D8:AD:9A:B2
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/ZrChAnEIC7XkkvtmNcAU0NitmrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.82.0/23
185.124.140.0/22
185.132.184.0/23
IPv6:
2a06:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
57:09:94:82:a9:f0:d9:b6:f9:45:34:b4:a7:ce:10:6f:c7:9d:
51:73:81:ff:bc:d1:01:b8:f6:a7:ed:11:54:42:f9:f2:da:10:
e1:97:fe:a5:f1:9b:f5:c9:4b:79:31:df:1a:65:86:f3:41:11:
0b:66:5c:0f:38:f3:35:6f:16:22:49:e7:35:f6:d2:21:ab:32:
dc:8c:0f:6e:e1:b8:2d:26:af:48:17:7a:32:19:cd:cd:ff:e3:
09:84:3f:10:62:f2:5e:37:87:31:39:6c:46:75:31:98:04:c2:
18:4c:98:94:fe:45:e8:70:7f:81:0b:f7:b7:44:32:c8:8e:a0:
9b:01:0d:52:ad:0e:6f:f6:80:4d:8c:53:42:54:7f:4c:74:55:
07:aa:e1:ad:61:37:18:d3:76:50:9a:a1:d7:c8:4c:d5:d7:e6:
9b:bd:f0:61:47:55:06:d5:ba:e7:aa:23:2b:ce:7e:fe:fd:9d:
77:69:ed:8b:35:1d:e0:10:3c:3d:a8:a1:fd:7f:0d:36:d2:55:
fa:57:2e:d9:0b:41:b7:1f:20:fa:87:37:99:5b:cc:a7:38:f5:
6b:35:2a:00:54:42:56:f0:65:9f:43:4f:23:e6:be:19:f5:6d:
24:75:3c:34:38:e8:6e:f5:b5:2f:17:5d:e6:64:8a:f9:fe:1c:
e2:ba:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:32 2025 by rpki-client