Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/ZBPuASXAJcjpb4z2Gk47z8Bokws.roa
File: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (raw, json)
Hash identifier: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=
Subject key identifier: 64:13:EE:01:25:C0:25:C8:E9:6F:8C:F6:1A:4E:3B:CF:C0:68:93:0B
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 019423D705B95FBBD4307BDF13721B8C89A1
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/ZBPuASXAJcjpb4z2Gk47z8Bokws.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34046
IP address blocks: 195.242.112.0/23 maxlen: 23
195.245.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:05:b9:5f:bb:d4:30:7b:df:13:72:1b:8c:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6413ee0125c025c8e96f8cf61a4e3bcfc068930b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:7b:9f:bb:b0:f1:5e:fb:51:d6:ad:7a:f7:
7f:bc:de:f8:57:f8:9d:de:1e:3d:49:6b:ba:08:75:
09:12:e1:3f:b0:9c:11:d9:9b:8d:17:ed:94:85:f3:
f9:68:2a:17:9c:16:93:1e:2f:b6:24:df:58:87:96:
78:4a:3c:d7:db:eb:7b:68:7e:62:e5:8d:56:ef:99:
da:e8:8a:a3:91:72:9b:8d:04:41:a4:f9:22:cf:ee:
55:a2:ec:43:58:62:05:90:0b:13:02:75:c3:df:dc:
8d:2a:b8:5e:8d:94:f7:5d:54:72:2c:dd:27:6b:51:
d6:b0:44:a9:dc:09:10:3c:f7:46:8a:c1:62:20:5c:
ea:d3:74:6f:f5:65:21:93:dc:ad:00:3e:7f:71:50:
0a:0e:57:0a:93:da:1e:5d:f4:0d:02:57:80:8a:6d:
68:ea:4a:e4:8d:5f:b5:72:0a:2a:a7:8e:82:f3:c3:
98:82:2a:bb:9e:12:a4:92:8d:54:01:a6:d3:f0:5b:
3d:fc:7a:50:4c:ed:6d:8f:1e:2d:7b:91:18:74:c6:
a1:5a:a7:05:34:ab:1e:e7:9b:a1:0f:35:6d:d7:2e:
e4:fd:25:a3:23:94:c2:0d:68:37:81:54:16:f4:a3:
5b:1d:9c:f5:3d:2c:94:28:d2:2b:0d:24:66:db:de:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:EE:01:25:C0:25:C8:E9:6F:8C:F6:1A:4E:3B:CF:C0:68:93:0B
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/ZBPuASXAJcjpb4z2Gk47z8Bokws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.112.0/23
195.245.80.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:57:18:ce:69:1d:f3:ef:16:6d:2a:da:2f:c8:d4:07:49:7e:
61:3c:ec:8a:5f:a2:d0:85:73:ec:34:fa:eb:ab:6b:48:1a:08:
d1:f7:c8:09:19:db:8c:12:3f:a6:14:d7:1f:64:20:17:1d:68:
44:d4:74:52:fd:52:73:23:eb:be:fd:9d:f0:04:76:4e:36:1a:
45:c1:bc:57:27:d4:6f:6a:eb:a2:e6:4f:df:65:63:00:2f:a6:
09:9c:4d:ae:dc:e8:5c:3d:ed:65:19:5b:c1:64:13:b0:0d:f5:
24:6e:67:53:71:1e:d5:90:b9:89:8a:95:41:8d:fa:b2:f0:d4:
b3:fa:eb:31:dc:c8:7b:53:af:c8:83:b4:8d:d2:7b:94:58:51:
01:bb:16:52:83:6b:2d:88:4e:b4:75:45:9d:8d:69:63:12:91:
45:88:08:0a:36:4b:4b:dd:91:6b:a3:6d:e1:74:39:17:40:66:
6d:68:ea:b1:5a:ac:34:36:c3:57:60:c5:f5:7b:cf:6f:f0:aa:
35:bd:b4:95:ab:d1:02:19:ea:10:26:e0:86:58:65:e6:72:33:
b4:ba:4b:b9:a9:a2:98:a9:68:51:38:01:5c:d7:be:ff:6b:35:
ce:45:8f:1f:47:8f:d9:e3:d3:99:8c:02:47:84:3f:aa:d2:e6:
ca:c6:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net