Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa
File: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (raw, json)
Hash identifier: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=
Subject key identifier: 64:F4:4A:B2:B9:3F:2C:ED:4A:CF:51:71:49:77:F8:CA:80:58:85:51
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 0194B33A3F60C6DDEE5BED637042421DD093
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa
Signing time: Wed 29 Jan 2025 18:02:06 +0000
ROA not before: Wed 29 Jan 2025 18:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41079
IP address blocks: 91.199.22.0/24 maxlen: 24
91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
178.250.40.0/21 maxlen: 24
185.5.96.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.123.160.0/22 maxlen: 24
185.140.120.0/22 maxlen: 22
185.180.204.0/22 maxlen: 24
185.193.112.0/22 maxlen: 24
185.201.112.0/22 maxlen: 24
185.204.216.0/22 maxlen: 24
185.208.164.0/24 maxlen: 24
185.243.52.0/22 maxlen: 24
193.17.184.0/24 maxlen: 24
193.218.152.0/22 maxlen: 24
194.169.227.0/24 maxlen: 24
195.2.254.0/23 maxlen: 24
195.78.66.0/23 maxlen: 24
195.114.0.0/23 maxlen: 24
195.242.116.0/23 maxlen: 24
2a02:1778::/32 maxlen: 32
2a02:1778::/48 maxlen: 64
2a02:1778:194::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:3a:3f:60:c6:dd:ee:5b:ed:63:70:42:42:1d:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 29 18:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f44ab2b93f2ced4acf51714977f8ca80588551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:4b:48:84:59:dc:50:fc:1b:40:a6:ab:76:
4d:fc:52:01:40:af:2b:a3:8a:1f:fb:e5:9f:9e:66:
b5:93:38:59:49:d2:df:21:ad:5e:a4:0a:eb:4b:ab:
eb:31:44:db:e8:ee:58:c6:d0:6d:3b:9b:6d:aa:43:
82:53:b2:5e:11:f0:1b:84:b5:19:85:45:95:d7:8e:
a8:8d:93:ee:b4:bf:fb:80:1b:d1:80:fd:58:5b:da:
ee:7a:e8:f4:b7:d2:c7:9b:51:30:15:65:a7:68:81:
35:88:2c:9b:d6:e6:7c:58:73:8f:ed:66:1f:64:ff:
39:65:11:fa:7a:e2:f5:fb:34:d5:78:93:76:0a:49:
ab:1d:49:10:78:23:60:b8:ca:a2:a0:0b:87:a9:c9:
9a:87:ce:99:81:f2:93:0c:7e:bb:ef:65:74:05:28:
ee:5b:ad:b8:9b:d4:e3:aa:5f:8c:d2:04:e6:96:6a:
81:ef:93:bc:09:1b:50:b1:64:6f:b5:5f:53:96:10:
6f:30:a3:fa:1a:78:4f:b0:a9:b2:b4:f3:84:3d:38:
52:2e:dd:13:f5:73:6b:1d:30:42:19:2c:ad:2b:1d:
4d:1b:ce:93:32:58:46:98:68:9d:99:72:23:05:bd:
c4:7c:10:ae:6e:21:2c:11:43:48:d3:bc:33:0f:4e:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F4:4A:B2:B9:3F:2C:ED:4A:CF:51:71:49:77:F8:CA:80:58:85:51
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.123.160.0/22
185.140.120.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
IPv6:
2a02:1778::/32
Signature Algorithm: sha256WithRSAEncryption
42:14:1a:59:1b:46:ad:31:30:b2:06:87:4f:03:f7:a0:bc:09:
ee:d3:e9:22:11:ab:33:13:b9:8a:bb:92:9b:69:d4:77:01:f4:
0e:e9:cc:46:42:a4:ed:1c:21:c3:37:88:59:5a:5f:3e:45:a3:
ad:0e:2a:08:8e:db:f4:67:65:c7:0f:ef:91:ff:a6:0e:2d:ba:
0c:f7:3f:3e:6b:34:41:a8:2e:81:15:de:c2:f8:c6:88:16:43:
b6:d6:34:f9:24:ae:dc:58:ae:9b:74:da:dc:c9:d3:79:a0:d1:
68:61:07:d6:54:59:6f:c7:48:0b:cc:89:19:27:3f:62:d0:64:
3e:5b:26:2f:f2:92:ae:d7:d0:62:d2:93:30:93:00:14:2f:e3:
47:64:c5:7c:40:a7:d9:00:87:3c:45:20:b5:45:14:b3:b1:5c:
e1:8a:7f:5a:17:cf:c8:90:36:f4:35:88:62:75:d6:8e:51:af:
d6:e6:1e:c9:f5:97:ef:61:36:b6:5a:78:50:6b:d1:3c:1f:eb:
b4:85:da:a4:8f:0c:20:06:ab:d9:db:86:cb:75:7f:a1:90:ac:
8d:26:35:49:3b:69:6c:ff:19:fc:88:db:bb:c2:e8:b3:06:7d:
32:3e:a2:d5:de:04:55:ce:6c:dc:4e:57:f0:d1:f3:1f:42:25:
82:a6:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:29 2025 by rpki-client