Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa
File: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (raw, json)
Hash identifier: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=
Subject key identifier: 64:C6:8B:A0:EC:1E:4E:E3:9C:BF:F9:EF:51:B5:72:41:3A:92:D6:67
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 019427B501C5691B6B3916FC9DD1AB823710
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa
Signing time: Thu 02 Jan 2025 15:49:21 +0000
ROA not before: Thu 02 Jan 2025 15:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57376
IP address blocks: 149.232.252.0/22 maxlen: 24
185.232.0.0/22 maxlen: 24
2a0c:9700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:01:c5:69:1b:6b:39:16:fc:9d:d1:ab:82:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Jan 2 15:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c68ba0ec1e4ee39cbff9ef51b572413a92d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:a2:15:0a:96:6a:13:23:58:49:d9:3a:62:
89:0f:f3:0d:fd:11:de:b3:0e:8c:ab:6a:a6:eb:07:
52:50:ef:4e:a1:af:bb:95:72:90:ee:09:18:74:4d:
70:0a:5a:a7:88:02:94:47:44:bd:f2:cc:46:ee:2e:
2b:a5:a0:3f:38:3f:c3:ed:8a:5e:a4:2a:4e:39:2f:
cd:5a:fc:30:ad:9e:5b:e0:76:12:f1:de:53:32:e2:
4f:ff:4b:25:45:5d:8d:c1:87:fb:b3:52:6a:cd:ed:
e5:01:c6:b7:b6:14:7c:7b:11:da:35:a9:af:b6:d3:
8e:0d:71:38:00:75:e7:2d:fd:54:34:a1:72:4e:3e:
47:6c:14:a1:99:cf:61:7c:ff:f7:d4:ae:49:76:52:
7a:fe:6b:a5:f2:2a:13:4c:6c:57:de:a5:03:1f:f3:
d4:62:96:45:9c:4c:1a:ad:b4:14:b2:18:95:06:aa:
56:d6:6a:08:79:4e:ad:d1:fe:37:ee:da:1c:5d:37:
45:9d:21:53:98:d0:02:19:df:fc:83:74:b6:ad:71:
5f:59:e1:f9:0c:20:98:3b:86:b1:f5:55:4a:c5:5f:
d6:5e:3c:be:e0:5a:a2:7c:3e:ac:67:a6:0d:6a:88:
66:9a:a0:e4:19:aa:1f:60:2e:d8:8a:6f:1a:52:1c:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:8B:A0:EC:1E:4E:E3:9C:BF:F9:EF:51:B5:72:41:3A:92:D6:67
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.252.0/22
185.232.0.0/22
IPv6:
2a0c:9700::/29
Signature Algorithm: sha256WithRSAEncryption
62:ce:f9:6c:7d:ab:09:49:14:cd:db:84:ff:58:5a:8f:29:4f:
f8:2b:61:af:d8:73:e0:3a:3e:10:bd:d7:cc:1a:06:65:9a:ed:
56:be:93:78:4c:3b:9a:fa:8c:2a:1e:aa:65:cd:bc:35:f8:17:
c8:14:95:3c:bd:04:fa:21:86:68:d2:ad:d4:b1:a0:ed:0f:9f:
f4:da:51:85:1f:c9:73:67:c5:6c:02:0d:ce:8d:e8:17:49:33:
85:ad:60:f8:c1:c8:1a:78:04:3d:c3:7f:f4:1c:fa:e0:70:b7:
e4:ef:dd:f7:e9:59:ee:09:13:a1:c3:1a:d0:2c:78:bf:13:04:
3d:1c:1a:cb:f9:68:4a:60:39:2d:e0:86:fe:db:de:b3:f2:82:
97:dc:3a:93:80:50:36:e1:a2:b1:67:61:42:ca:86:4b:ca:7a:
1e:5d:b7:83:ed:e3:15:ef:9b:8c:35:9b:e2:1f:e4:fc:2b:df:
b0:ef:17:b6:80:88:73:51:ae:cc:37:50:ce:82:97:29:ea:89:
ac:9a:db:20:0f:80:2a:15:44:1f:6d:a8:67:9a:0a:94:eb:d7:
4e:5a:a5:39:37:03:09:3a:2a:fa:d5:3f:27:66:ad:14:ab:20:
1c:e0:16:a6:0b:18:50:82:55:52:6d:b4:ee:6f:e9:fb:13:eb:
3a:d9:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:21 2025 by rpki-client