Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/zSoruqrv0RMRlvtEdSofVrHKUNM.roa
File: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (raw, json)
Hash identifier: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=
Subject key identifier: CD:2A:2B:BA:AA:EF:D1:13:11:96:FB:44:75:2A:1F:56:B1:CA:50:D3
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019420D5E3BC8C2C42623A3257DAADB13840
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/zSoruqrv0RMRlvtEdSofVrHKUNM.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24637
IP address blocks: 80.244.208.0/20 maxlen: 24
193.19.180.0/22 maxlen: 24
193.19.183.0/24 maxlen: 24
193.110.139.0/24 maxlen: 24
212.3.64.0/19 maxlen: 24
2a02:1798::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e3:bc:8c:2c:42:62:3a:32:57:da:ad:b1:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2a2bbaaaefd1131196fb44752a1f56b1ca50d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:53:4a:e8:57:3c:5b:25:2e:16:39:66:b0:
5f:61:c8:ec:c7:52:1f:42:4c:c7:a0:01:23:e4:ce:
35:be:d4:19:ad:32:88:4e:4d:b6:d0:12:e8:f1:b9:
24:9e:86:b8:1f:9c:d4:28:42:5b:b9:ab:14:50:2d:
0b:d8:64:54:0d:13:40:6e:0b:18:4c:e4:f8:14:bf:
08:6e:45:2e:cc:48:64:3f:5c:02:c0:cd:cd:89:77:
a0:a9:2f:2b:dc:a4:d7:af:a7:87:c1:94:78:91:95:
be:50:ac:a0:73:42:55:3a:2c:1a:f0:79:47:ee:ca:
2d:da:0d:ec:15:05:aa:d9:f3:bf:0c:38:08:39:97:
6f:da:95:94:d1:71:b1:2b:ac:11:61:49:72:69:49:
ee:7f:7b:86:db:88:78:9a:de:37:a0:4b:27:56:23:
ad:23:1c:da:b1:39:37:00:c2:4f:fd:62:15:74:8f:
76:71:5f:4d:58:24:36:b0:56:7a:d9:c9:64:2f:41:
8a:ac:45:9c:4c:17:69:88:e6:24:15:5f:ed:bb:55:
15:0e:b5:c0:fd:e6:0d:c1:39:c6:09:00:e6:2a:8b:
dc:1f:53:bc:f3:82:41:d0:2f:93:11:f8:b8:92:59:
82:b1:cc:91:cd:82:1f:15:0c:bb:f7:ee:59:c6:a5:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:2B:BA:AA:EF:D1:13:11:96:FB:44:75:2A:1F:56:B1:CA:50:D3
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/zSoruqrv0RMRlvtEdSofVrHKUNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.208.0/20
193.19.180.0/22
193.110.139.0/24
212.3.64.0/19
IPv6:
2a02:1798::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9c:09:96:52:54:7c:13:35:42:c6:2b:0b:ae:38:1d:d6:71:
f2:ea:6c:4a:c8:fd:e1:ca:2c:a8:66:25:a2:d6:d5:da:3a:13:
7d:8d:00:40:ec:1e:44:be:6c:42:0d:d0:38:90:2f:f2:e2:53:
60:71:3b:0b:36:36:93:5a:eb:4b:43:ce:68:f8:45:39:fb:ed:
c3:bd:53:01:c7:2d:87:14:f6:08:de:61:9b:cf:ea:10:fe:f0:
e0:b8:f5:af:f5:9e:40:50:fb:79:4e:92:4d:cd:da:eb:3c:d1:
69:fc:f3:74:5d:a7:a0:de:92:fc:fe:b2:81:5c:0d:8e:6e:0d:
c5:cd:36:60:81:6e:02:99:b0:81:b9:3c:ec:50:8b:31:94:5f:
ed:c0:df:b8:60:31:1d:d4:0a:fc:8d:c8:f6:7c:fe:71:90:ef:
4b:17:4e:60:70:99:95:76:08:27:d7:c3:96:55:83:0c:43:b2:
52:39:f2:5f:10:d4:f4:d3:1d:f5:d0:b5:ea:aa:5a:97:fc:b5:
fc:35:81:2c:3b:04:fd:0f:75:d3:83:b0:45:45:e4:c7:72:8d:
05:b5:00:3e:b3:f1:95:62:90:21:4c:59:1f:d1:1c:7c:d1:d3:
94:cd:44:b5:23:63:0e:ba:be:40:30:c7:c4:ac:2e:af:19:ee:
6a:fc:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:26 2025 by rpki-client