Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa
File: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (raw, json)
Hash identifier: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=
Subject key identifier: C3:36:67:66:A4:15:2B:F6:78:98:1B:BA:4F:9F:4B:E1:AD:28:D3:EC
Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial: 0194221FFB9A89933291AD9460FC2259EF4F
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50399
IP address blocks: 92.42.232.0/21 maxlen: 24
109.232.40.0/21 maxlen: 24
185.3.204.0/22 maxlen: 24
185.223.140.0/22 maxlen: 24
2a00:11e8::/32 maxlen: 64
2a03:3300::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fb:9a:89:93:32:91:ad:94:60:fc:22:59:ef:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3366766a4152bf678981bba4f9f4be1ad28d3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:aa:52:49:b9:f0:07:39:75:86:22:c2:5a:
ad:42:0c:ce:07:63:4e:0e:17:ec:e3:ae:3b:10:52:
98:a3:77:c6:2a:e8:90:18:d5:d0:81:bb:a7:ff:a9:
fb:d4:56:ee:9f:47:ac:eb:d9:09:3a:fb:01:0a:5d:
98:ee:f4:30:86:98:4f:95:36:93:88:e5:66:38:fb:
9b:33:19:77:1b:a1:5b:6d:ca:e4:dd:81:d1:82:1d:
30:aa:65:4c:99:7b:52:22:ed:e0:6e:55:b1:e1:bc:
ea:0f:5e:4a:ff:b7:86:44:8f:35:d4:b6:a2:41:8b:
df:f0:82:27:94:87:35:e6:aa:bb:d9:c1:de:1f:c7:
36:19:42:60:b3:2b:28:43:5c:86:8d:03:b4:c6:2b:
cd:c5:f8:96:0b:a3:79:cc:df:d6:a7:48:31:88:c3:
1c:2c:7b:c3:d2:7a:f9:de:94:b6:b1:bf:8d:54:64:
55:1e:81:0b:82:f6:00:40:38:2f:18:4b:01:5f:6c:
61:fa:59:31:80:52:ba:82:43:5f:6c:54:05:ef:82:
a8:e2:87:8d:fb:88:3f:4b:67:c7:61:54:f7:4d:ac:
6b:b0:be:fc:b6:8f:8a:11:c3:65:e8:ca:f8:e1:f8:
72:c9:a4:be:6b:2d:fd:72:e2:57:2f:fb:19:4e:be:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:67:66:A4:15:2B:F6:78:98:1B:BA:4F:9F:4B:E1:AD:28:D3:EC
X509v3 Authority Key Identifier:
keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.232.0/21
109.232.40.0/21
185.3.204.0/22
185.223.140.0/22
IPv6:
2a00:11e8::/32
2a03:3300::/32
Signature Algorithm: sha256WithRSAEncryption
a7:aa:70:1d:1c:73:dc:b5:ce:f0:31:f1:cb:96:09:f0:dd:1b:
cd:43:5c:86:32:fc:c1:d6:e5:81:b2:ee:c9:9c:88:e4:f9:c2:
ba:d6:51:31:74:03:37:ee:ac:0b:31:59:5b:6e:2c:62:31:bf:
68:66:9a:8f:e9:60:ef:96:7d:cb:1b:f2:84:d2:74:6f:c9:24:
0b:3a:58:f5:76:ee:34:fa:e1:4a:18:1b:9a:de:15:40:d3:1f:
1c:4b:49:4c:84:65:38:e7:cf:bf:46:4a:05:dc:ac:36:4a:e8:
a5:d4:6a:83:a6:fa:7a:18:02:35:da:0e:9e:a5:17:6a:f5:15:
99:dc:bc:e7:73:9e:e4:f8:0f:d5:55:36:42:62:2a:eb:55:17:
94:8f:93:af:03:17:24:c9:77:ed:1a:04:a5:3b:a7:a6:3d:2c:
96:ce:77:ee:34:82:02:d8:5d:20:f6:96:c2:51:86:1a:e3:62:
7a:4f:bc:ab:92:b8:9e:57:09:a8:5d:5d:a0:a2:67:8e:64:b6:
b6:80:6e:72:74:2f:b7:ab:5a:61:87:c7:d7:ef:03:38:39:10:
4f:92:b2:0a:dd:6e:47:fe:6e:2a:7c:6f:e6:3a:77:f6:af:56:
9a:82:e1:fb:76:4c:17:47:cb:40:b7:fd:34:74:08:2b:1a:62:
d7:d5:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net