Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/vZCiwKajLAj94g_r1KS02gxe_XQ.roa
File: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (raw, json)
Hash identifier: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=
Subject key identifier: BD:90:A2:C0:A6:A3:2C:08:FD:E2:0F:EB:D4:A4:B4:DA:0C:5E:FD:74
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0194285E58EA5053FF03E9610599845564A0
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/vZCiwKajLAj94g_r1KS02gxe_XQ.roa
Signing time: Thu 02 Jan 2025 18:54:19 +0000
ROA not before: Thu 02 Jan 2025 18:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 37.153.135.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.39.200.0/23 maxlen: 23
89.39.200.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.43.192.0/24 maxlen: 24
185.36.72.0/22 maxlen: 22
188.215.94.0/24 maxlen: 24
193.169.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:5e:58:ea:50:53:ff:03:e9:61:05:99:84:55:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 2 18:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd90a2c0a6a32c08fde20febd4a4b4da0c5efd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:39:d5:e7:a8:f3:67:f0:78:fb:89:b5:95:
d6:bc:0d:1a:87:ca:cc:7f:36:f9:69:1b:5e:3a:56:
eb:74:54:17:aa:00:c0:a5:da:67:dd:5a:67:39:45:
53:34:92:a5:45:a0:39:d0:ef:c1:e3:4a:4c:97:fb:
75:1f:69:0d:fc:ce:af:94:f4:17:14:0a:5b:4c:b6:
60:86:51:21:90:ac:30:97:1a:18:9b:f4:74:aa:5d:
67:3b:3e:07:60:d6:8a:5c:7f:ef:5d:f5:ad:c0:d4:
a6:4c:54:93:7a:85:7c:b5:02:57:90:2c:be:c7:e4:
e4:57:b4:75:e7:2f:bd:61:50:98:cb:48:87:d6:dd:
f4:ab:0c:db:0c:6b:51:42:88:92:da:b6:eb:5b:be:
61:dc:d7:2b:d0:8b:03:42:5c:3b:26:4f:5e:b1:33:
cd:76:bb:db:60:3e:a0:8f:45:6a:0c:7b:e9:d0:31:
3f:13:2b:84:82:dd:5d:49:24:d5:2d:7e:45:f6:a8:
de:5e:3e:63:b4:24:b0:f2:ca:f2:2d:80:7c:e0:3c:
ba:9d:25:4f:a2:37:35:1e:86:9d:47:37:f9:80:59:
6c:56:10:d4:fe:1d:71:d7:15:e1:74:53:00:b8:42:
a0:04:bf:49:a3:8c:44:16:a0:be:dd:95:1b:d7:0a:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:A2:C0:A6:A3:2C:08:FD:E2:0F:EB:D4:A4:B4:DA:0C:5E:FD:74
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/vZCiwKajLAj94g_r1KS02gxe_XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.135.0/24
86.107.110.0/24
89.39.200.0/23
89.40.142.0/23
89.43.192.0/24
185.36.72.0/22
188.215.94.0/24
193.169.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a9:7c:69:e6:68:50:7b:4b:79:91:bb:4c:26:b6:55:72:3a:
66:e8:8a:9f:f2:8d:80:19:b6:63:05:8a:61:e8:91:e3:ec:d8:
5f:fe:1f:95:16:c4:6f:d2:c0:2f:b5:ed:62:ad:86:94:b5:3a:
b7:b9:97:fb:f1:61:86:01:5d:27:73:6f:8e:04:23:74:b9:34:
63:17:0b:6d:bf:b6:3b:d6:31:5d:a7:6d:bb:b7:78:ea:9b:e2:
75:86:c5:77:d4:1e:e8:27:95:e5:a0:c3:fe:33:95:b4:02:0c:
cb:29:f7:0f:4a:53:57:3e:db:76:31:c1:ff:b7:e9:ab:cc:7a:
b7:0e:3a:12:d8:6d:99:f5:06:8a:1c:54:6c:5c:27:1b:07:d8:
13:66:9b:b4:4f:6a:cc:01:fc:b5:f7:f5:d3:c3:88:81:28:14:
8f:cd:42:2f:7d:30:87:92:a9:3d:ac:8d:4e:2f:c3:8a:5d:cf:
c9:49:ad:56:fb:2e:19:02:4b:c3:ba:1a:7d:64:5c:ad:20:3d:
f1:fd:d0:6f:8f:52:d6:85:02:b0:55:7b:ad:ca:98:f3:a7:23:
49:ff:de:09:88:33:0b:5f:3c:96:18:2c:3f:47:09:ed:d3:80:
71:33:2b:5b:4f:5b:89:97:32:76:45:c2:dc:f2:49:2c:4d:d9:
05:bb:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:23 2025 by rpki-client