Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa
File: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (raw, json)
Hash identifier: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=
Subject key identifier: 64:D3:33:8E:39:05:14:22:6B:C5:86:62:0B:94:F6:17:59:EA:40:35
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01941FFA9FC9B5BC50139DAF76098808F405
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51695
IP address blocks: 193.23.156.0/24 maxlen: 24
193.202.120.0/24 maxlen: 24
195.191.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:c9:b5:bc:50:13:9d:af:76:09:88:08:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d3338e390514226bc586620b94f61759ea4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:2f:c4:9d:c8:71:0f:20:88:1e:3a:22:fc:
91:6b:28:5c:fe:32:da:07:b6:97:6a:c1:e6:d2:1d:
a8:c0:75:d2:3f:e7:5b:9d:28:04:ff:22:d4:a3:93:
fc:6e:ae:a3:ba:c9:24:09:89:52:dc:fb:eb:80:ac:
db:4a:fd:1d:e1:b0:f5:ee:95:a8:1f:70:51:9a:8f:
f5:85:46:5d:c1:86:b3:16:56:01:e6:d4:3b:1e:17:
8e:8e:a1:b0:b4:d6:95:87:da:5f:97:e8:2c:2f:01:
57:74:39:d1:7b:59:ff:37:07:2a:af:9b:5a:ad:72:
45:17:1d:a3:c5:3e:38:0b:23:db:20:f1:5a:42:63:
2c:b1:a8:8b:5f:ae:e8:8a:51:21:3b:0c:2f:0a:92:
10:3c:c8:cc:ed:86:59:01:e9:c6:38:96:ee:59:c1:
2a:46:2b:64:2c:af:9c:62:d1:22:e9:31:3b:78:c5:
1d:cf:1e:f2:52:2a:a1:57:04:41:c4:71:fb:db:1a:
ed:c8:ff:8c:a4:2d:76:26:49:c2:57:9a:94:a3:aa:
c2:48:9e:58:ed:17:85:27:f7:42:ec:a5:eb:a8:60:
f5:be:f2:2e:1d:98:03:0d:4e:0e:47:fc:06:c8:92:
6a:29:44:d8:48:93:10:f4:7e:a7:ee:8d:9a:24:48:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:33:8E:39:05:14:22:6B:C5:86:62:0B:94:F6:17:59:EA:40:35
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.156.0/24
193.202.120.0/24
195.191.118.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ec:bd:38:c4:6e:9b:35:bb:e4:fb:17:08:39:31:6a:6e:3b:
a6:8e:16:bb:92:b2:20:02:8d:31:ce:9a:cf:d2:7a:b8:27:a3:
4e:60:30:a0:2d:f8:9e:83:87:21:6e:e9:05:7f:9a:ca:fd:8c:
ec:96:88:76:df:af:f2:37:1d:75:0e:9e:fb:2b:14:34:87:4d:
e2:e5:ae:a5:7d:2b:83:77:4b:ef:e5:74:b8:ae:c4:ea:ff:47:
7c:91:20:d3:93:5d:86:cf:31:34:12:ce:2e:52:58:28:29:63:
9a:97:f3:0b:c1:2a:47:c2:04:be:4c:56:94:89:75:6d:45:77:
a3:e1:e2:01:95:8c:1e:52:59:46:d2:fc:db:4c:ff:4d:5b:c1:
93:94:fb:07:8b:3c:3c:b7:da:05:7e:44:2f:a5:a6:69:66:d5:
15:6d:61:52:b9:2e:84:64:33:7f:b9:9f:cb:fb:be:cc:ba:74:
e7:8c:7c:c6:f3:63:c6:ca:1b:db:98:be:e9:a1:2f:e2:64:f1:
45:ee:f7:a2:e6:17:9b:e9:4e:e2:92:99:fe:ed:a8:ff:58:82:
66:6d:ed:61:5c:79:49:91:4d:bc:5e:89:79:8e:11:e6:3e:a2:
75:f2:ec:70:91:d0:0a:f0:6a:33:c8:98:ac:e9:62:a3:1b:96:
6e:7c:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net