Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa
File: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (raw, json)
Hash identifier: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=
Subject key identifier: 65:92:87:C6:EC:D3:F5:FF:6E:39:32:F1:06:DC:CC:27:F9:DD:61:81
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 019425203BEB75E275497DEACB76CB0B2B9D
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa
Signing time: Thu 02 Jan 2025 03:47:36 +0000
ROA not before: Thu 02 Jan 2025 03:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49920
IP address blocks: 185.149.60.0/22 maxlen: 24
185.234.53.0/24 maxlen: 24
185.234.54.0/23 maxlen: 23
2a05:c0c0::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3b:eb:75:e2:75:49:7d:ea:cb:76:cb:0b:2b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jan 2 03:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659287c6ecd3f5ff6e3932f106dccc27f9dd6181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:73:a5:be:c8:dc:3e:f1:3f:e4:98:ac:14:
99:93:ae:50:b6:35:1b:50:73:e6:b8:88:02:88:17:
32:3d:4b:a0:7b:b5:b4:d8:3c:8a:ff:ab:be:c8:0c:
e0:4c:15:23:ae:86:de:64:b4:11:41:1e:41:fa:30:
ce:ea:c9:64:bc:b5:f1:18:76:63:63:45:15:a7:3d:
41:b8:2c:cf:ec:72:ba:05:71:4b:d3:37:3c:29:34:
f5:1b:cb:a2:e9:d8:94:35:de:a0:f4:04:7d:02:a5:
ba:f4:09:d4:9f:ce:57:2e:3f:6e:c9:31:8c:2a:16:
26:fe:fe:e3:2d:16:2b:d7:f9:04:ff:b8:50:3a:fc:
b6:81:39:6e:65:69:f3:37:50:e1:df:3a:f8:75:32:
4b:7d:99:d7:cf:1a:a7:fa:50:06:8c:51:e5:23:f7:
0f:3d:72:32:b5:ef:8f:66:c8:19:16:fc:63:ab:c3:
4c:81:a3:78:9f:0e:1c:2d:29:8a:06:2e:14:c1:7c:
39:8d:3c:c2:bc:50:bb:b3:07:9c:2d:32:9d:9e:b7:
4c:74:06:fc:ce:c1:78:50:a9:a4:1a:e6:5c:7f:9c:
c2:a9:60:f8:33:b0:53:68:ea:3f:8c:aa:33:a6:69:
de:9b:74:81:b6:bc:08:6f:a0:be:ca:c9:90:c7:06:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:87:C6:EC:D3:F5:FF:6E:39:32:F1:06:DC:CC:27:F9:DD:61:81
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.60.0/22
185.234.53.0-185.234.55.255
IPv6:
2a05:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:81:9a:67:ce:cf:1a:d8:b3:66:bc:8a:f8:e0:b9:d3:c9:c9:
3a:46:7c:ac:ba:93:ca:bf:64:40:64:73:29:4b:d9:e3:1b:da:
8f:1a:81:91:88:80:21:43:1a:52:c1:1c:f6:3c:eb:b1:90:fb:
1e:b0:dd:fb:e7:dc:a0:fa:2e:8f:41:a6:d5:46:9c:dd:ed:b3:
6d:d6:00:35:1d:28:aa:8f:0b:be:e9:d8:f7:5f:ea:a1:46:92:
13:c0:35:61:7c:aa:9d:63:dd:97:30:33:47:69:09:c2:20:d2:
e9:f6:8e:62:f5:28:cb:eb:59:11:cb:0f:c7:f9:d4:7e:0f:23:
87:83:68:ef:93:68:10:39:1b:21:b7:f1:b5:6a:85:63:6d:33:
4c:45:5f:b6:ff:87:0b:72:4d:91:00:44:0b:31:de:65:ba:21:
9e:5f:76:a1:2f:df:5f:36:1b:93:4b:e9:f2:8f:61:7c:71:85:
81:e9:df:12:5c:12:af:93:96:41:95:02:e7:be:3c:ff:c4:f1:
2a:aa:99:47:c9:80:66:0a:22:7a:be:97:e7:cd:aa:16:10:ed:
19:32:c2:57:b7:71:75:2e:a6:2f:1b:6e:e1:c9:89:c3:59:ee:
06:d6:91:61:74:d8:4f:da:21:8f:ce:84:90:da:30:9a:db:35:
33:03:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:19 2025 by rpki-client