Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/z9CRwAoKZD-WKyzEgGIY-4pomCM.roa
File: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (raw, json)
Hash identifier: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=
Subject key identifier: CF:D0:91:C0:0A:0A:64:3F:96:2B:2C:C4:80:62:18:FB:8A:68:98:23
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 01942067FAE5B172BA2AEF008D72C65E2E22
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/z9CRwAoKZD-WKyzEgGIY-4pomCM.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8387
IP address blocks: 212.95.17.0/24 maxlen: 24
213.162.64.0/23 maxlen: 23
213.162.78.0/24 maxlen: 24
2001:678:5a8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fa:e5:b1:72:ba:2a:ef:00:8d:72:c6:5e:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfd091c00a0a643f962b2cc4806218fb8a689823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:63:90:46:11:80:87:7c:ef:ed:cb:11:cb:
fe:6d:fb:77:62:97:da:88:95:54:49:38:35:dd:ee:
4d:ed:0d:54:38:10:01:b7:5a:b5:7b:17:c0:14:1a:
ce:8b:94:76:40:15:bc:e0:66:a7:ad:5f:42:25:4b:
22:bb:34:05:15:11:b1:f6:a6:1e:d2:06:a3:a2:aa:
01:32:d5:3b:91:67:f3:d7:ae:87:11:bd:84:70:74:
ca:22:a9:63:68:8f:41:07:78:54:dd:12:15:9a:c8:
07:aa:a9:4f:1c:c1:4e:10:22:cd:62:7e:89:1a:86:
e6:2f:e2:8b:9c:cb:f2:5f:3c:10:f3:bd:69:db:9e:
ba:50:95:b8:30:75:bc:49:9a:a2:ff:c4:15:b2:23:
80:d3:f0:56:3b:22:6e:84:47:29:4c:96:aa:59:b4:
61:1b:6c:9f:1b:50:d1:ff:b4:4c:c0:f1:4e:a4:5e:
6e:02:38:9a:5b:fd:ae:09:94:f8:e8:71:74:b7:bf:
89:08:f1:58:52:90:19:be:35:1c:5b:20:c9:36:51:
e5:05:8a:8f:28:8d:e9:b4:18:36:d3:26:14:fa:97:
d5:e1:d2:1e:24:78:ff:eb:4c:0d:77:97:0e:82:22:
61:d3:d5:1f:aa:ca:7a:66:42:5e:49:a7:c1:28:47:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:91:C0:0A:0A:64:3F:96:2B:2C:C4:80:62:18:FB:8A:68:98:23
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/z9CRwAoKZD-WKyzEgGIY-4pomCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.17.0/24
213.162.64.0/23
213.162.78.0/24
IPv6:
2001:678:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
79:b2:12:55:52:55:0f:d9:39:0a:e2:50:64:7a:59:bc:b2:9a:
6f:cd:46:4d:6e:6c:05:9c:a1:3d:44:a3:52:74:50:0b:84:01:
cd:e0:1b:68:0a:a6:ed:c9:fc:0b:2e:3b:98:23:2f:a3:58:f3:
64:a2:6a:ee:4e:c4:e2:09:b1:ac:05:99:63:18:67:09:af:0c:
a2:15:99:d7:99:d9:37:eb:e7:4d:88:bf:50:f5:ef:a5:0f:b5:
1e:75:3b:c8:e9:aa:10:97:48:a9:5e:90:e0:2f:a0:fb:39:01:
53:73:93:f9:f0:25:6f:60:1a:98:46:e2:18:db:0b:ef:93:57:
ce:a4:75:a0:be:a2:6c:41:c7:6a:c2:29:f1:1b:c2:6a:c6:57:
1b:06:a6:a1:42:8f:5c:6a:ad:e1:2f:a2:cd:c5:8c:fc:7f:ff:
03:5a:49:7b:7e:7b:82:8f:ab:fe:67:5c:17:31:52:90:53:9f:
60:5e:71:6a:59:0e:34:6f:90:7a:9e:a8:0c:26:4f:79:73:2a:
f2:8f:4a:3f:6b:59:83:1f:f6:32:99:4e:4d:ea:b3:aa:56:87:
bb:8f:1d:61:4a:d9:2b:2f:08:a9:31:06:44:04:79:d4:8a:38:
00:9e:f7:a5:6c:53:19:71:43:b6:b1:bc:95:df:9c:cc:bf:f2:
c0:5b:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:05 2025 by rpki-client