Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/ZGkxGw9y4f6M0Z1AbcqPkFVRmbw.roa
File: ZGkxGw9y4f6M0Z1AbcqPkFVRmbw.roa (raw, json)
Hash identifier: eLl49TPX//jve0hqennsJM/yQ/pZg7CUB+5jiNrhXdk=
Subject key identifier: 64:69:31:1B:0F:72:E1:FE:8C:D1:9D:40:6D:CA:8F:90:55:51:99:BC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01941F8C482689BAF1440743B2CCBFCEF186
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/ZGkxGw9y4f6M0Z1AbcqPkFVRmbw.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29405
IP address blocks: 46.229.224.0/20 maxlen: 24
46.229.230.0/24 maxlen: 24
81.89.48.0/20 maxlen: 24
86.110.224.0/19 maxlen: 24
86.110.229.0/24 maxlen: 24
92.240.228.0/24 maxlen: 24
92.240.229.0/24 maxlen: 24
92.240.230.0/24 maxlen: 24
92.240.231.0/24 maxlen: 24
92.240.234.0/24 maxlen: 24
92.240.235.0/24 maxlen: 24
92.240.236.0/24 maxlen: 24
92.240.237.0/24 maxlen: 24
92.240.241.0/24 maxlen: 24
92.240.242.0/24 maxlen: 24
92.240.244.0/24 maxlen: 24
92.240.245.0/24 maxlen: 24
92.240.249.0/24 maxlen: 24
92.240.253.0/24 maxlen: 24
92.240.254.0/24 maxlen: 24
93.184.64.0/20 maxlen: 24
109.74.144.0/20 maxlen: 24
176.109.56.0/21 maxlen: 24
185.176.72.0/22 maxlen: 22
217.73.16.0/20 maxlen: 24
217.73.16.0/24 maxlen: 24
217.73.17.0/24 maxlen: 24
2a00:10d8::/32 maxlen: 64
2a00:10d8:10::/48 maxlen: 64
2a01:390::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:26:89:ba:f1:44:07:43:b2:cc:bf:ce:f1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6469311b0f72e1fe8cd19d406dca8f90555199bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:4e:54:5e:8c:e4:f6:4b:db:c2:15:fa:15:
65:db:dc:22:b4:7b:4d:61:37:f8:d9:bd:ff:25:f9:
b3:cf:17:20:27:8a:f0:df:9a:55:6e:c8:54:cc:3f:
6f:60:96:5b:27:8b:eb:b0:b5:4b:1f:c9:d4:be:64:
f2:82:6b:b9:e3:03:c4:8c:e0:49:e3:18:54:8e:06:
a8:e9:a8:80:e5:2b:39:de:de:ea:cc:f0:2f:3b:c2:
f0:6a:be:82:a4:9e:46:c5:ee:d1:58:3a:24:3a:76:
55:ee:fb:27:5c:68:3a:47:58:b4:2a:66:76:57:3d:
d0:31:d0:d5:8c:e6:3d:8b:d6:dc:7c:ba:a5:e2:20:
87:f7:75:07:5c:07:9d:df:14:27:bb:d8:58:72:81:
17:66:3e:a3:7d:76:a9:a1:3f:3c:fa:3e:b2:51:7f:
a4:10:a5:eb:f1:f7:b9:fe:37:98:e6:57:62:56:7b:
e5:d5:d6:13:e3:3e:cb:ec:80:b7:71:15:1e:3e:4a:
ec:9b:2f:3b:2e:f6:f4:b0:17:ac:ff:1a:45:10:6b:
0a:c5:77:b3:ae:73:f1:c5:1c:0d:9c:b5:40:b9:8b:
ea:f2:f5:e9:bc:c9:88:ae:f6:be:58:cf:75:49:0e:
3b:a1:45:2b:05:fd:21:b3:c5:c5:d2:d0:83:37:8e:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:31:1B:0F:72:E1:FE:8C:D1:9D:40:6D:CA:8F:90:55:51:99:BC
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/ZGkxGw9y4f6M0Z1AbcqPkFVRmbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.224.0/20
81.89.48.0/20
86.110.224.0/19
92.240.228.0/22
92.240.234.0-92.240.237.255
92.240.241.0-92.240.242.255
92.240.244.0/23
92.240.249.0/24
92.240.253.0-92.240.254.255
93.184.64.0/20
109.74.144.0/20
176.109.56.0/21
185.176.72.0/22
217.73.16.0/20
IPv6:
2a00:10d8::/32
2a01:390::/32
Signature Algorithm: sha256WithRSAEncryption
60:45:fa:b3:f3:d9:27:7f:94:b8:7e:81:20:90:16:e6:7c:15:
33:b7:ee:9f:de:9c:ab:71:c0:96:e9:6b:46:04:48:fa:c0:ea:
e4:ad:24:d2:cd:6d:8d:96:df:11:1d:2d:1b:7e:0c:ac:67:ce:
b8:1c:01:ff:38:87:09:65:c5:cf:4a:4a:33:d8:50:f0:57:30:
42:de:ca:20:7c:7e:8f:63:66:d9:30:2e:6a:0d:7e:f8:0e:0c:
b9:25:01:9d:a4:47:39:23:df:5d:b7:4b:3a:73:6a:03:3d:b2:
62:4f:77:87:c0:5d:97:cd:d9:55:4f:61:d0:50:a8:5c:76:ce:
51:b8:e2:a2:aa:82:5a:e6:24:bc:fc:21:76:7c:75:e4:ec:f5:
eb:47:13:51:14:a0:0f:b3:88:b4:70:33:1d:47:e2:a4:e9:27:
c2:4a:14:aa:fc:75:32:25:e3:72:d2:70:a1:9a:79:48:46:0e:
5c:32:f2:2a:65:95:33:ca:5d:9e:04:6f:11:c6:65:71:94:47:
88:55:b2:e4:f2:dc:29:8a:62:5d:e1:ee:c4:52:24:92:d6:1a:
b7:11:9e:e7:c2:68:e4:e0:d8:39:20:a5:23:aa:c3:31:0b:db:
23:6a:e9:7a:45:6a:63:0d:d6:a2:da:1c:cf:1b:a0:a2:96:19:
b0:fb:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:18 2025 by rpki-client