Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/zmnbja1nRto2XEtATOeaSVrIGd0.roa
File: zmnbja1nRto2XEtATOeaSVrIGd0.roa (raw, json)
Hash identifier: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=
Subject key identifier: CE:69:DB:8D:AD:67:46:DA:36:5C:4B:40:4C:E7:9A:49:5A:C8:19:DD
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0194221FEDFE26BF969A991FE337E9AF7327
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/zmnbja1nRto2XEtATOeaSVrIGd0.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48296
IP address blocks: 185.7.108.0/22 maxlen: 24
2a03:2640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:fe:26:bf:96:9a:99:1f:e3:37:e9:af:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce69db8dad6746da365c4b404ce79a495ac819dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:a2:8a:ba:ea:f3:d0:fb:b0:0a:fe:a1:4a:
76:5e:0e:42:18:f4:c6:9a:60:78:38:32:fb:ad:df:
36:86:2a:58:f2:e0:68:b8:3b:f2:1b:a3:ff:cf:f5:
da:10:43:f9:89:d8:79:49:f7:15:30:d2:9b:e9:92:
aa:dd:ea:61:c9:28:41:49:9c:b5:60:5b:28:5f:ab:
08:81:35:b5:a8:62:2a:94:0e:90:11:b7:fd:97:41:
4a:5e:1a:85:06:70:e1:2d:cb:29:eb:c9:7c:5a:32:
18:a4:06:26:8b:fa:8a:d8:81:70:54:08:34:d0:66:
c7:03:ea:14:e9:50:2a:24:42:1e:6b:7b:31:58:7b:
ce:c2:c1:a0:89:b8:c1:99:19:3f:a4:b5:78:7f:a2:
9a:eb:f5:01:2b:80:36:b8:53:31:e0:3e:11:42:1c:
4e:9f:a0:f4:92:85:29:a0:74:cf:0f:02:8f:9e:99:
c7:82:f4:6e:e5:60:d6:64:67:1c:31:79:4c:74:08:
68:a5:55:d7:32:31:83:e7:56:32:96:ff:be:b0:f4:
11:4d:72:22:f1:4f:56:70:f4:1e:82:ab:53:aa:dd:
48:9b:79:79:ea:bb:2c:36:23:23:c3:a5:47:fa:6e:
d4:43:ae:5c:45:d5:9e:ac:82:fb:5c:1b:86:9c:7c:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:DB:8D:AD:67:46:DA:36:5C:4B:40:4C:E7:9A:49:5A:C8:19:DD
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/zmnbja1nRto2XEtATOeaSVrIGd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.108.0/22
IPv6:
2a03:2640::/32
Signature Algorithm: sha256WithRSAEncryption
68:c1:6b:ba:6a:e2:e8:6c:43:d6:c6:da:29:3b:bd:ac:09:50:
69:2c:9b:78:a3:1d:d5:04:63:da:22:5c:92:9d:cc:c1:64:94:
fa:de:60:62:26:87:b6:df:30:08:d3:68:96:7d:be:ac:f5:f3:
b9:0f:e1:11:fe:56:9a:b9:da:17:38:17:1e:9e:9c:cf:93:f4:
18:62:93:64:a1:3d:7f:ad:3b:9b:2a:f2:b8:c1:6e:f7:6c:00:
60:4e:95:10:d7:cd:59:93:d7:ac:7d:b3:69:48:c2:f9:05:a4:
cd:13:57:10:11:ec:b5:88:e5:e0:ba:2b:8d:76:32:ac:13:fc:
39:de:c4:a8:c4:71:ec:f2:45:6f:65:02:87:a7:56:94:42:72:
62:ee:f0:f2:67:8f:4b:d9:5d:d7:4f:38:f6:19:35:40:fc:1a:
36:64:79:33:a2:b9:b5:6c:4c:0a:35:f1:65:fd:2f:7e:78:de:
47:25:e2:e6:7c:38:f1:6d:79:b4:7c:f9:16:12:19:a5:9d:48:
3a:72:f9:b3:12:e1:7e:90:63:cf:02:eb:7b:62:fa:3e:26:dd:
42:19:79:96:9e:87:d5:9f:7b:e7:7f:e4:b2:ba:66:c4:67:0d:
fd:40:10:d0:a7:ae:7d:75:b3:1c:50:63:e9:82:96:2f:22:6f:
c5:fe:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:46 2025 by rpki-client