Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/zzw0EHAgMZ-SMwut_unhSV8drI0.roa
File: zzw0EHAgMZ-SMwut_unhSV8drI0.roa (raw, json)
Hash identifier: uhbuwseyoimPgOp0WsWlW84l+SGJHqQ61t+vE08pFPI=
Subject key identifier: CF:3C:34:10:70:20:31:9F:92:33:0B:AD:FE:E9:E1:49:5F:1D:AC:8D
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 018EA3876C7CC930A1D66760D51D0080CBB8
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/zzw0EHAgMZ-SMwut_unhSV8drI0.roa
Signing time: Wed 03 Apr 2024 10:35:45 +0000
ROA not before: Wed 03 Apr 2024 10:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206837
IP address blocks: 157.97.84.0/22 maxlen: 24
157.97.84.0/24 maxlen: 24
157.97.85.0/24 maxlen: 24
157.97.86.0/24 maxlen: 24
157.97.87.0/24 maxlen: 24
176.98.208.0/22 maxlen: 24
176.98.208.0/23 maxlen: 23
176.98.208.0/24 maxlen: 24
176.98.209.0/24 maxlen: 24
176.98.210.0/23 maxlen: 23
176.98.210.0/24 maxlen: 24
176.98.211.0/24 maxlen: 24
185.127.52.0/22 maxlen: 22
185.127.52.0/23 maxlen: 23
185.127.52.0/24 maxlen: 24
185.127.53.0/24 maxlen: 24
185.127.54.0/23 maxlen: 23
185.127.54.0/24 maxlen: 24
185.127.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:87:6c:7c:c9:30:a1:d6:67:60:d5:1d:00:80:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Apr 3 10:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf3c34107020319f92330badfee9e1495f1dac8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:d8:15:8c:1c:20:75:1b:94:99:8c:5b:cd:
a1:c6:c6:25:cb:40:cc:dd:da:7f:1a:2c:64:ef:29:
4e:8e:d2:cd:75:f6:92:54:66:54:e5:18:a8:61:9b:
a7:e8:34:35:17:47:55:a6:5f:17:05:70:be:28:4f:
b6:0b:e7:b2:e1:df:28:c5:82:9b:f5:f3:ec:c0:10:
88:8d:a3:b3:be:d0:a3:3a:07:91:94:8f:6b:e8:32:
b3:91:cc:11:a4:91:88:ab:51:b0:cb:86:71:02:8e:
91:ef:65:a9:ad:fb:66:96:d2:59:8d:7f:aa:b6:59:
f2:2c:b8:a0:2a:1e:00:94:19:7a:ee:6d:4b:32:9b:
bb:a9:2f:86:26:53:ba:3e:de:bc:21:35:26:57:0e:
48:66:c6:49:4e:78:ef:62:c5:3f:e8:12:ed:fd:25:
f8:52:b9:91:14:12:8f:07:61:ea:f2:af:d0:9d:47:
0b:b3:6b:10:8d:cc:0a:5e:2b:2a:f7:b3:83:73:a5:
30:55:ec:d0:1f:52:25:f1:b9:dc:75:a5:41:14:95:
c5:ea:4a:2b:e3:9c:21:34:04:de:6d:6f:e6:82:7e:
6d:ee:fd:41:84:6c:02:d7:52:0e:df:bd:5e:c2:c0:
5a:68:4c:25:8c:b3:07:87:d5:44:3e:de:de:e7:d2:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:34:10:70:20:31:9F:92:33:0B:AD:FE:E9:E1:49:5F:1D:AC:8D
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/zzw0EHAgMZ-SMwut_unhSV8drI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.84.0/22
176.98.208.0/22
185.127.52.0/22
Signature Algorithm: sha256WithRSAEncryption
74:01:49:bc:0a:f1:83:8a:16:39:59:55:9b:97:2d:84:65:e6:
ec:58:ae:c2:78:4f:9f:f1:73:6e:33:74:b9:a3:ba:de:04:30:
73:46:45:cd:19:e1:3d:b5:1e:4a:3c:0b:ec:5f:58:86:18:0f:
b1:55:16:56:a5:64:4e:17:4b:9c:53:84:2d:38:ba:53:d7:b9:
72:74:cb:2f:50:73:52:e4:87:83:56:8a:37:c6:a3:93:cf:28:
12:c6:5a:cf:af:c8:f4:59:aa:b0:78:a8:70:68:d9:f9:05:82:
e5:28:a5:73:a8:4e:dd:26:ba:95:af:1b:5c:25:27:e7:ab:76:
76:ea:e3:49:14:97:f8:a4:d3:31:37:31:87:ee:22:e2:60:5d:
7b:a4:6e:03:99:55:2a:8a:5b:2a:59:68:3d:1a:0b:6e:34:b6:
77:88:7c:cd:af:22:4b:26:c6:4e:01:78:d4:40:56:e3:ed:69:
6b:ba:b6:b9:7b:49:43:3d:50:cb:12:6f:53:f7:39:e3:9e:38:
c2:56:ce:5a:ba:86:0b:d1:62:81:e5:1f:15:be:5f:18:6f:7a:
d4:0d:1d:44:06:f0:8e:60:ea:cf:2e:4f:7c:66:ec:fc:dc:ac:
f9:ee:83:8e:c1:e7:c9:60:bf:88:b0:56:0b:81:a1:a5:69:93:
7f:85:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:44 2024 by rpki-client on console.sobornost.net