Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZABIQATF12aikgC1O0hDBVjOfyU.roa
File: ZABIQATF12aikgC1O0hDBVjOfyU.roa (raw, json)
Hash identifier: DodKV5kgcQUZQo+3v/CpLgDA9tUlP1X5Qg4/U91seR4=
Subject key identifier: 64:00:48:40:04:C5:D7:66:A2:92:00:B5:3B:48:43:05:58:CE:7F:25
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 019427B6067DD8B0928443E215A5C41329F7
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZABIQATF12aikgC1O0hDBVjOfyU.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43576
IP address blocks: 185.239.184.0/24 maxlen: 24
2a0c:6580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:06:7d:d8:b0:92:84:43:e2:15:a5:c4:13:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6400484004c5d766a29200b53b48430558ce7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:3c:33:67:ff:d1:41:e5:b9:5c:23:96:d2:
00:23:59:5b:51:dc:cd:51:9b:c2:08:20:41:2f:ba:
30:23:91:11:c2:b7:fd:5d:df:df:1d:71:06:e7:3f:
39:a5:f0:b0:c9:f5:bd:e9:0e:f1:9e:05:a3:8a:d8:
4e:7b:76:24:c4:d4:9b:ed:54:1d:c8:15:2f:b2:e2:
75:a8:65:bd:f4:a4:dc:ff:ba:c3:d3:ec:d4:e7:ac:
9e:5a:0f:ad:fe:37:c1:8c:c5:2a:ab:3e:48:4c:ee:
c0:ee:97:87:29:b4:c4:97:d5:4a:92:4c:18:b3:bf:
b5:6e:af:f0:45:44:30:7a:37:b2:61:22:c9:07:71:
38:cd:d2:ef:ad:02:f9:27:63:62:53:47:e2:68:45:
b5:e5:ef:87:3f:12:31:f2:dd:c7:1b:26:c7:49:00:
f4:e8:8f:bb:a9:2a:2a:a5:f4:cb:9f:c7:9c:ef:d5:
f2:94:18:52:34:5f:dc:7f:f8:1c:49:da:e9:4e:10:
22:8c:bd:4b:e5:73:39:63:d8:29:26:5c:6e:e9:e0:
2e:d9:87:78:7b:3f:56:f9:79:e0:0a:a4:f5:29:fd:
fc:80:17:d3:32:b5:a9:84:18:d1:8e:e1:2e:dd:42:
8b:d8:78:d7:de:ad:5a:a4:e4:b9:0f:fe:71:b2:42:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:48:40:04:C5:D7:66:A2:92:00:B5:3B:48:43:05:58:CE:7F:25
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/ZABIQATF12aikgC1O0hDBVjOfyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.184.0/24
IPv6:
2a0c:6580::/48
Signature Algorithm: sha256WithRSAEncryption
22:ae:ea:fa:38:2e:07:c8:08:39:cf:3a:af:cf:6b:57:20:cd:
14:9d:20:4b:86:85:37:61:54:2c:e6:e4:47:8c:b5:c7:9b:8a:
ca:0e:4a:bf:19:01:b2:10:ff:cd:2f:16:d3:28:0d:d5:e4:60:
2c:c3:18:7a:c2:55:b2:cc:9b:95:eb:40:6f:fd:63:ba:d8:66:
7d:c6:fa:d1:4f:eb:4b:4f:33:81:cd:c9:8c:71:de:93:96:1a:
62:d3:5e:32:b7:ca:1b:6d:03:9c:b3:c0:5f:a0:87:48:3f:ac:
e7:2e:f4:9e:17:46:ab:2a:24:48:df:50:bc:9b:48:e6:c5:c6:
50:d9:2a:07:de:cd:de:c7:6a:66:95:96:c1:14:63:64:ca:d4:
ec:0e:93:db:76:82:0e:52:ca:05:f5:ce:ff:96:f7:18:cc:ce:
15:97:e9:4e:dd:23:7b:44:75:30:35:f6:fb:43:9f:1a:20:d4:
5f:bb:74:4e:f9:f7:e6:f7:8a:96:b1:f6:c0:07:7e:ff:85:eb:
fb:5a:3f:77:7e:ce:66:7f:57:b5:0b:c3:ea:3b:df:35:09:5b:
cf:a8:52:64:12:20:af:7b:e2:35:38:8c:b8:c6:27:82:06:d0:
79:3e:e5:74:da:43:b3:64:96:29:0f:34:0a:dc:0b:7e:fc:7b:
b1:11:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:02 2025 by rpki-client