Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa
File: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (raw, json)
Hash identifier: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=
Subject key identifier: CE:B0:2F:DA:33:47:B4:B9:52:94:9B:23:C5:0F:EB:CB:AF:D7:44:3A
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 0194252237F7B52BB745EEDE667D330CC8DF
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210079
IP address blocks: 2.56.88.0/24 maxlen: 24
2.56.89.0/24 maxlen: 24
95.142.35.0/24 maxlen: 24
95.142.36.0/24 maxlen: 24
95.142.37.0/24 maxlen: 24
95.142.38.0/24 maxlen: 24
95.142.39.0/24 maxlen: 24
95.142.40.0/24 maxlen: 24
95.142.42.0/24 maxlen: 24
95.142.43.0/24 maxlen: 24
95.142.44.0/24 maxlen: 24
178.208.68.0/24 maxlen: 24
178.208.69.0/24 maxlen: 24
178.208.70.0/24 maxlen: 24
178.208.71.0/24 maxlen: 24
178.208.92.0/24 maxlen: 24
178.208.94.0/24 maxlen: 24
178.208.95.0/24 maxlen: 24
185.105.109.0/24 maxlen: 24
185.105.110.0/24 maxlen: 24
185.105.111.0/24 maxlen: 24
185.154.52.0/24 maxlen: 24
185.154.53.0/24 maxlen: 24
185.154.54.0/24 maxlen: 24
185.154.55.0/24 maxlen: 24
2a09:c140:3::/48 maxlen: 48
2a09:c140:db::/48 maxlen: 48
2a09:c140:900d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:f7:b5:2b:b7:45:ee:de:66:7d:33:0c:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceb02fda3347b4b952949b23c50febcbafd7443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:44:2d:ce:5d:6b:b6:9c:43:1d:c4:24:9a:
37:bc:fd:68:52:73:bf:39:95:81:e1:63:d2:dc:b1:
48:14:86:f9:c9:ac:0f:09:1f:67:ca:91:2b:48:8c:
1f:90:4f:0f:55:e8:67:53:5c:2c:42:b7:57:93:b6:
6c:1e:18:96:71:d6:54:15:36:24:32:07:1d:66:dc:
d8:9e:f3:29:a1:14:0b:3c:b4:a7:48:37:d2:65:49:
2e:bf:e3:94:8c:a0:0e:06:92:49:3c:91:f0:48:39:
b3:85:62:78:a7:f7:14:36:d7:1e:6e:65:f2:6c:45:
dd:f7:3e:97:38:28:79:da:fb:9f:b3:f9:da:df:54:
77:f7:5f:21:3d:fd:1b:d0:17:99:cc:8e:53:87:32:
96:33:e9:66:da:0c:b7:be:fc:3b:94:32:84:ba:24:
f0:17:e7:57:8b:d5:f0:5c:52:03:28:8c:25:ac:e3:
dd:46:3c:14:7f:34:35:a9:a4:5f:22:4b:76:44:21:
d7:38:08:d6:d7:2d:81:e5:4e:40:bb:48:8e:4f:6e:
9a:a2:bf:43:6e:46:af:4d:bb:42:ee:50:e3:1b:cf:
9e:68:c6:ba:53:45:a5:43:36:70:cf:5b:3a:7e:13:
69:e9:8c:fc:1f:63:dc:8c:fc:39:e8:cd:4f:e8:a8:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:2F:DA:33:47:B4:B9:52:94:9B:23:C5:0F:EB:CB:AF:D7:44:3A
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.88.0/23
95.142.35.0-95.142.40.255
95.142.42.0-95.142.44.255
178.208.68.0/22
178.208.92.0/24
178.208.94.0/23
185.105.109.0-185.105.111.255
185.154.52.0/22
IPv6:
2a09:c140:3::/48
2a09:c140:db::/48
2a09:c140:900d::/48
Signature Algorithm: sha256WithRSAEncryption
43:29:96:b1:f7:8b:8e:b8:93:21:cd:51:36:29:90:39:8c:77:
ba:68:fd:f9:6a:bd:43:0f:a4:7b:48:94:13:af:a9:ee:2d:d2:
c8:03:0a:5b:d5:25:99:16:de:d2:a3:03:7b:b1:c8:11:c7:5a:
53:76:51:e1:46:f9:c5:84:68:f7:bc:ed:06:e2:a3:24:49:5f:
83:9a:41:91:e7:af:8c:8b:fc:af:ed:18:e2:cb:43:f4:bc:90:
0d:2b:81:b7:e0:78:01:b5:91:a8:5b:e8:6e:df:9a:ee:d4:5e:
27:ab:ed:43:16:69:77:11:99:fb:34:cb:fa:b6:a7:7d:cd:9b:
4a:53:82:ed:fc:00:a9:8e:41:e9:e0:3a:cd:b8:6c:25:81:8c:
c2:d9:a3:7c:b7:04:95:45:02:15:88:38:91:28:d0:64:e5:2b:
e1:3f:9f:dc:37:32:7f:1a:2b:01:5c:00:9d:a1:96:10:e0:d1:
a9:fb:bc:54:ee:2f:fe:87:db:1a:11:03:c0:7d:2f:3b:14:68:
5f:bb:0c:b3:c5:ba:03:2c:50:d0:a5:3e:82:a1:b6:f0:2e:c5:
f3:bb:6e:1b:bd:61:d8:38:ed:32:c1:55:48:bc:4a:09:96:c5:
8d:66:1e:2c:de:10:be:5d:a2:1a:c8:94:77:05:88:07:5d:5c:
79:49:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:26 2025 by rpki-client