Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa
File: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (raw, json)
Hash identifier: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=
Subject key identifier: 64:4D:CF:77:60:6F:DD:0C:DD:5B:12:91:9C:F5:7A:0B:FF:63:4E:C4
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01942068227D5E0B9A89588CC4271F04F063
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19806
IP address blocks: 46.235.108.0/24 maxlen: 24
77.247.9.0/24 maxlen: 24
77.247.10.0/24 maxlen: 24
77.247.11.0/24 maxlen: 24
212.11.83.0/24 maxlen: 24
212.11.85.0/24 maxlen: 24
212.11.86.0/24 maxlen: 24
212.11.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:22:7d:5e:0b:9a:89:58:8c:c4:27:1f:04:f0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=644dcf77606fdd0cdd5b12919cf57a0bff634ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:e8:1e:a9:01:a1:d4:72:fe:b4:d2:12:17:
4a:02:7f:a9:30:a6:71:bd:6a:3e:2a:26:38:f1:d9:
f1:ac:37:64:55:20:b6:31:0f:f6:af:9a:71:79:0d:
a7:44:14:ad:8b:72:76:94:26:c6:23:c3:6e:6f:57:
f5:4b:c8:72:2e:d6:a9:a8:bb:ad:49:05:b7:9d:de:
e3:38:69:16:dd:98:29:ba:c8:60:ae:fc:dc:02:b1:
f8:42:02:bd:29:a1:5a:b0:10:82:fd:96:c3:07:4f:
4d:e5:13:31:b1:c9:37:b2:68:41:1e:86:e9:1f:c2:
f8:e2:5a:ad:34:10:5c:60:0c:88:80:34:f9:83:9c:
65:bd:00:33:64:29:d9:c5:40:a2:fa:ce:d2:9a:74:
a1:61:c4:51:ee:0d:61:10:6b:e3:18:4d:c0:8c:8b:
79:dc:69:a9:ec:e5:79:70:00:d8:26:ba:cf:2a:b4:
05:25:da:a1:0b:31:6d:24:68:75:32:2f:a9:bf:28:
65:ed:ea:0f:d1:03:45:40:c1:64:62:bf:32:8c:59:
55:e6:7f:09:b9:b1:58:dc:19:2c:4e:dc:fb:c8:ac:
44:33:6b:37:30:5f:d4:b6:90:3a:42:fb:e5:f1:cf:
bb:a9:1c:c6:f3:41:87:8e:34:78:1c:ff:a5:38:6b:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:CF:77:60:6F:DD:0C:DD:5B:12:91:9C:F5:7A:0B:FF:63:4E:C4
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.108.0/24
77.247.9.0-77.247.11.255
212.11.83.0/24
212.11.85.0-212.11.87.255
Signature Algorithm: sha256WithRSAEncryption
7f:58:d6:83:dd:07:d6:c7:6f:5a:d5:c7:f1:08:d8:c1:8c:1b:
8f:b5:f2:d4:82:af:19:c4:1c:4e:21:66:37:04:eb:7d:8e:77:
70:72:a2:ef:39:d8:1e:91:c6:16:97:c7:4c:da:f8:9b:46:26:
93:fe:60:04:69:50:4c:29:d9:58:40:3a:8b:61:04:2e:42:12:
06:5c:81:d2:09:ac:f9:97:9f:e7:7d:40:05:a8:02:95:6f:b6:
59:60:8f:43:cf:09:22:4c:a1:c6:a8:02:e1:b7:63:ea:e6:4c:
2b:14:d0:ef:50:7f:68:31:16:87:2a:ac:fb:07:df:a4:8a:65:
3b:05:f3:34:95:b3:06:f7:94:44:ca:10:33:ec:3d:da:0c:31:
60:45:18:1b:29:ad:13:25:19:bc:70:33:be:62:17:f3:3e:48:
3a:7b:18:87:8a:ac:fe:27:c2:cc:4f:68:6d:e8:c2:05:4b:f4:
d9:89:e1:2a:ea:3e:19:f1:59:4d:fa:66:56:13:d9:52:24:45:
53:73:af:1b:df:a0:00:2e:cd:21:9f:14:b3:2d:05:d4:44:7e:
b1:3f:62:1f:31:72:c0:b9:e9:49:08:d5:61:0c:48:76:b9:1c:
01:61:d9:72:ae:c0:ab:5e:2a:5b:e2:e3:28:aa:3c:86:57:64:
f3:91:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net