Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa
File: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (raw, json)
Hash identifier: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=
Subject key identifier: 64:97:18:24:90:2B:D8:90:3C:CD:4E:24:C1:2F:E2:B4:3F:07:0E:A6
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019426D945B5060BC1D1C22295302AB9ECD4
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12322
IP address blocks: 82.142.0.0/18 maxlen: 18
83.152.0.0/13 maxlen: 15
83.214.0.0/16 maxlen: 16
88.120.0.0/13 maxlen: 13
91.160.0.0/12 maxlen: 12
212.62.128.0/18 maxlen: 18
213.36.0.0/16 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:45:b5:06:0b:c1:d1:c2:22:95:30:2a:b9:ec:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64971824902bd8903ccd4e24c12fe2b43f070ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:8d:38:5a:82:0b:b3:5d:00:d7:e7:90:2b:
6c:07:49:89:5a:c3:45:2c:12:1d:30:95:32:2d:c5:
75:0b:d1:c4:b4:b6:49:21:79:61:e7:83:0b:9b:56:
2a:aa:1c:9a:57:d3:3c:9c:cf:f3:84:17:37:93:bf:
9d:66:2f:3b:97:d4:ec:2d:c2:22:22:ae:91:5b:6b:
aa:6f:9a:67:29:51:1e:1f:a9:63:16:dc:51:d1:23:
92:47:59:9f:23:8c:b8:f6:52:ae:b9:eb:8b:b3:cd:
d2:2a:98:36:76:07:f8:0f:be:8f:08:14:b4:85:71:
61:72:c0:68:0c:56:ac:4a:c5:9e:6b:25:fc:2e:7d:
5e:a7:af:35:c2:f5:40:b2:41:da:d4:a1:7b:db:fd:
f5:b0:27:75:a2:e9:b6:ea:5b:fe:77:52:cd:d6:ed:
c4:3b:28:63:09:de:e8:b2:40:ff:9a:47:2e:17:47:
da:6e:06:c2:ac:93:f8:15:56:58:14:9e:2f:2a:89:
cf:d9:40:b2:0d:7d:0e:02:89:75:a4:33:3a:44:5c:
70:98:93:99:f9:19:f5:f0:09:09:6e:23:71:55:dc:
53:48:9b:a6:f7:81:84:34:35:dc:d9:27:fa:d9:8e:
7e:05:d8:24:ea:c2:30:da:f2:5b:c2:e6:5d:15:a6:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:18:24:90:2B:D8:90:3C:CD:4E:24:C1:2F:E2:B4:3F:07:0E:A6
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.142.0.0/18
83.152.0.0/13
83.214.0.0/16
88.120.0.0/13
91.160.0.0/12
212.62.128.0/18
213.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:4b:87:93:55:6b:2d:e6:76:7c:a7:9d:b1:74:03:3c:51:7d:
14:98:d2:ac:cf:ad:dd:b1:e4:8f:7b:e7:93:56:17:0b:b3:79:
cf:69:e2:fc:69:b4:a1:a9:68:4b:60:64:50:37:1e:69:00:3f:
26:4e:c6:2a:44:da:12:6d:66:e4:5d:d3:17:65:51:a3:89:1b:
d8:3a:ad:dc:76:9a:4d:74:61:b5:17:a9:3d:b3:ce:df:f3:8e:
f9:c6:42:84:52:8f:65:9b:fc:f2:14:93:eb:f0:be:72:43:77:
f0:32:93:6f:1c:ee:ad:d1:e6:b8:9e:02:0c:48:c5:39:eb:47:
1d:3c:11:b5:a5:f1:ec:1c:93:43:93:36:85:b7:c9:9e:6d:7d:
42:4c:77:4e:88:2d:db:f7:ab:10:5e:89:f9:9e:5d:cc:41:93:
b6:4d:a9:0f:d8:b5:4f:c2:1f:ee:72:c3:dd:57:b9:31:d8:f0:
d4:e1:1d:55:4d:34:be:40:90:98:23:ff:7d:33:b2:61:cd:d0:
af:d5:93:33:31:37:1b:fc:18:fe:38:dc:2b:db:7c:a8:5c:5a:
2c:8f:29:98:d6:35:a3:26:44:fe:21:85:e3:15:6c:db:3e:19:
64:63:5f:1a:d6:41:91:ea:63:c3:48:e6:ee:49:36:d7:35:28:
e2:d3:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:45 2025 by rpki-client