Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/zyiztbQNQv6y6x6xB8WDnbL7mKs.roa
File: zyiztbQNQv6y6x6xB8WDnbL7mKs.roa (raw, json)
Hash identifier: pm+2FQpk1g4xYfZeUbM3WBneY3Wj8QxHI62z6yoU4dk=
Subject key identifier: CF:28:B3:B5:B4:0D:42:FE:B2:EB:1E:B1:07:C5:83:9D:B2:FB:98:AB
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019423D7DC49DA180266E1C9C43330008192
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/zyiztbQNQv6y6x6xB8WDnbL7mKs.roa
Signing time: Wed 01 Jan 2025 21:48:56 +0000
ROA not before: Wed 01 Jan 2025 21:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212318
IP address blocks: 88.218.112.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
88.218.115.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.66.0/23 maxlen: 24
178.57.68.0/24 maxlen: 24
185.217.37.0/24 maxlen: 24
2a0f:52c1::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:dc:49:da:18:02:66:e1:c9:c4:33:30:00:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf28b3b5b40d42feb2eb1eb107c5839db2fb98ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:77:35:3a:5f:a3:15:3d:3e:39:79:01:f1:
82:83:a8:31:7e:de:d7:7a:3f:b6:cd:6a:d4:f3:ad:
c0:3c:e2:1f:01:3c:f0:4d:19:e5:b2:1d:85:c0:e1:
be:26:38:62:d2:42:1a:d7:24:8b:5e:49:3c:91:2f:
1c:c3:8d:70:3f:ea:4c:50:31:8d:52:da:2b:12:97:
76:ec:d3:df:0d:99:c1:f6:4e:02:cc:87:e1:0a:09:
f8:49:40:71:a3:4a:20:ed:ab:4f:79:a2:21:c3:00:
87:84:e4:79:1c:73:7d:5e:e7:37:3a:46:b4:ef:1b:
f1:19:5c:55:f7:50:ce:ad:ed:6f:28:67:0d:2a:f7:
07:71:a3:e5:78:d8:7e:e1:25:ed:0e:a7:0c:42:25:
b5:56:a5:56:9b:9f:a3:14:5c:9f:1c:70:3d:5c:c1:
62:3b:82:0b:b0:5f:65:5f:87:47:3d:e5:fd:f0:64:
1f:8c:e4:76:1b:df:a3:1c:b1:8d:d0:db:10:95:01:
44:03:9c:c1:d4:f1:61:6c:7e:fc:28:d5:42:66:7e:
12:17:f0:68:59:ce:0b:0c:67:50:3b:9c:eb:1d:9a:
aa:1d:c2:71:fa:86:9d:a4:c8:82:29:27:71:b1:40:
af:a6:d4:18:e1:25:e9:2f:19:ea:20:64:9c:bb:6f:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:B3:B5:B4:0D:42:FE:B2:EB:1E:B1:07:C5:83:9D:B2:FB:98:AB
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/zyiztbQNQv6y6x6xB8WDnbL7mKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.112.0/23
88.218.115.0/24
93.179.90.0/23
178.57.65.0-178.57.68.255
185.217.37.0/24
IPv6:
2a0f:52c1::/46
Signature Algorithm: sha256WithRSAEncryption
51:5e:2b:44:4e:4c:65:10:b2:df:6d:e3:98:6f:e2:6e:1f:a7:
67:96:0d:06:f7:fe:58:9e:77:c9:e7:9a:42:27:14:74:74:93:
f6:e1:d1:6d:e9:a3:a5:c1:e8:d1:ad:34:54:88:21:dd:e6:ef:
8d:14:c0:14:9a:08:21:36:da:01:ff:3f:a5:3c:95:0d:c5:d9:
4d:ed:65:a1:4a:14:43:bc:22:0c:12:00:eb:39:de:c0:5e:47:
d9:94:02:ad:a0:da:c3:d0:69:7d:38:af:ef:a2:90:c5:ef:bd:
d5:44:73:f2:79:b9:d6:f5:dd:6a:1e:f0:90:96:b0:55:10:c5:
0d:d8:08:96:ed:12:89:b7:b3:ff:4c:67:10:fb:4b:af:d9:40:
69:f4:01:2b:59:77:07:26:e3:37:7b:48:0c:7c:c4:4b:a7:d1:
37:19:de:48:0b:ba:55:69:04:2e:45:34:18:fd:50:8f:ff:7f:
0f:f7:bb:9c:fb:4d:44:93:62:95:93:76:3e:fd:d5:81:69:63:
cd:f0:5e:bf:c8:52:8d:33:1a:d1:b7:ae:87:46:d4:69:b0:b3:
88:9e:2d:57:99:35:57:0a:0f:8a:f3:c1:da:8b:7b:c4:55:ad:
27:3a:8b:20:2c:9c:37:cb:05:60:4e:ce:02:83:53:03:35:56:
c8:ae:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:14 2025 by rpki-client