Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zNVGFbRsiePBxz6FwsPTrdVje0c.roa
File: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (raw, json)
Hash identifier: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=
Subject key identifier: CC:D5:46:15:B4:6C:89:E3:C1:C7:3E:85:C2:C3:D3:AD:D5:63:7B:47
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 019428231CE81EC0B0BC5F6FD58D22D5AD6A
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zNVGFbRsiePBxz6FwsPTrdVje0c.roa
Signing time: Thu 02 Jan 2025 17:49:37 +0000
ROA not before: Thu 02 Jan 2025 17:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196797
IP address blocks: 81.30.48.0/20 maxlen: 32
91.222.28.0/22 maxlen: 32
94.125.88.0/21 maxlen: 32
109.233.168.0/22 maxlen: 32
164.138.32.0/21 maxlen: 32
176.115.88.0/21 maxlen: 32
193.151.24.0/22 maxlen: 32
195.69.168.0/22 maxlen: 32
195.69.236.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1c:e8:1e:c0:b0:bc:5f:6f:d5:8d:22:d5:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd54615b46c89e3c1c73e85c2c3d3add5637b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:cc:57:b9:5f:69:57:e9:3e:00:0c:97:f2:
91:b3:44:3e:7e:0c:72:4f:93:8a:5c:ac:2b:24:a8:
c3:5b:52:ba:92:88:34:77:52:f2:ff:97:ee:ec:bd:
6f:33:3c:9c:1c:6c:7c:20:ca:77:67:20:3d:74:f2:
29:6a:be:88:98:7f:6c:49:46:7f:26:c3:b8:25:5a:
c4:ab:e2:9e:b4:9c:f6:60:c3:1d:b6:ec:e1:10:8b:
24:cc:11:e7:56:ee:80:82:b5:b9:f8:39:e4:15:75:
d9:e6:10:fd:3d:20:62:06:d2:b2:e5:4f:29:f7:28:
1b:c3:fd:6d:fd:68:54:39:50:97:c7:4a:70:9a:5f:
f8:62:9a:82:fa:82:5b:ea:8b:be:17:74:05:98:0f:
6b:85:17:8b:da:97:e7:f5:67:93:b9:5e:bd:a5:f7:
92:a8:57:d4:84:11:48:98:7c:15:52:2c:7b:d7:fd:
d0:54:d6:bb:2b:1f:36:48:0b:fb:69:33:92:f1:ae:
33:fb:28:a2:c2:bc:e3:fe:21:e5:aa:95:03:4a:73:
23:8b:0d:f6:8f:87:af:12:6a:62:b7:d2:7f:1b:33:
c3:c0:af:96:2f:9f:14:3d:50:7f:fb:38:82:90:45:
fb:99:1f:64:64:f8:3d:86:b0:bc:38:3d:5b:3f:37:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:46:15:B4:6C:89:E3:C1:C7:3E:85:C2:C3:D3:AD:D5:63:7B:47
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zNVGFbRsiePBxz6FwsPTrdVje0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.48.0/20
91.222.28.0/22
94.125.88.0/21
109.233.168.0/22
164.138.32.0/21
176.115.88.0/21
193.151.24.0/22
195.69.168.0/22
195.69.236.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:9f:ce:5e:13:93:01:14:73:49:1e:72:d5:94:e7:2d:c3:15:
25:fb:34:7b:69:13:23:11:b2:5b:32:3e:53:e3:78:b9:3f:d1:
a6:54:37:fa:08:f5:13:38:c5:e3:be:88:3f:05:07:b0:69:5a:
23:fd:ca:8e:a8:55:61:08:e0:ac:3a:3c:17:88:90:00:23:9d:
02:54:73:bc:6c:6d:cc:c2:3a:0b:35:d6:bc:e0:8e:be:03:48:
95:57:e7:ef:0e:fa:2b:49:04:5f:b4:26:ce:23:71:7a:ef:ba:
9a:b6:d5:8f:a5:1b:1e:39:67:75:e2:1a:13:c2:4b:82:95:0a:
d7:dd:21:7a:a6:6c:d3:6d:b5:77:ee:5f:97:69:a0:3c:2c:4e:
74:91:96:6f:11:81:62:10:c9:19:62:0b:48:11:31:ba:93:b0:
59:95:db:a5:fc:43:eb:ff:9d:87:e8:ff:e9:cb:07:5a:8e:f3:
c1:19:65:fc:97:2e:9d:45:23:07:2a:59:66:f9:04:35:7a:b5:
59:6f:ea:21:d0:43:3c:c9:d5:02:5f:98:ad:5c:c9:af:58:6b:
17:fd:c4:53:e5:a6:d7:67:6f:18:b6:ad:51:2b:08:58:a7:c6:
6d:98:7b:eb:a2:cb:78:43:fe:a6:71:5d:d7:8d:be:c9:a7:03:
2a:b8:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:35 2025 by rpki-client