Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa
File: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (raw, json)
Hash identifier: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=
Subject key identifier: 65:4A:4D:3E:88:4B:DB:7B:42:B3:4A:7B:44:82:79:09:29:EA:FE:71
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0195F9687F577C0076EF10478D61628156D8
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa
Signing time: Thu 03 Apr 2025 02:08:49 +0000
ROA not before: Thu 03 Apr 2025 02:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64439
IP address blocks: 94.232.40.0/24 maxlen: 24
94.232.41.0/24 maxlen: 24
94.232.42.0/24 maxlen: 24
94.232.43.0/24 maxlen: 24
94.232.44.0/24 maxlen: 24
94.232.45.0/24 maxlen: 24
94.232.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f9:68:7f:57:7c:00:76:ef:10:47:8d:61:62:81:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Apr 3 02:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=654a4d3e884bdb7b42b34a7b4482790929eafe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:63:58:e2:5b:cf:41:1e:e0:29:2d:24:d9:
5d:6b:c7:00:66:35:c0:05:5c:7b:05:f3:ed:9f:0e:
55:44:d6:a3:de:6b:a5:5b:6a:5e:90:1f:e4:b4:94:
e4:36:e2:4f:23:2f:7a:ae:85:7e:83:d4:69:f1:ca:
5f:99:2b:18:d2:2a:4d:13:59:af:03:c5:b2:03:cf:
43:88:29:46:a6:75:c8:43:bc:c1:b8:05:08:6c:a4:
98:ef:2b:a5:18:d8:0f:5d:63:3b:af:bf:2a:bd:a0:
0d:0b:2a:76:6b:c4:27:7f:c7:da:39:e5:4b:db:ae:
7f:91:2a:79:cc:55:60:b9:87:81:5f:e3:e7:1a:12:
b0:41:17:4d:b0:85:36:86:05:ab:fd:a1:40:88:3d:
c2:57:f5:31:f4:c9:68:ea:ec:5f:7a:c4:02:46:a5:
78:48:91:33:0d:bc:91:17:bc:bd:e5:79:07:7a:2f:
ef:33:a9:e0:c2:ad:03:97:b3:99:8b:dc:96:2a:49:
8c:ec:c9:2e:fd:85:3c:1f:a4:7d:ec:5f:4b:5e:f2:
11:3d:ac:8b:27:ba:a0:1e:84:61:82:09:98:4f:d3:
45:a6:0a:cc:1c:b1:2b:21:73:c7:c7:46:a4:91:9d:
2f:40:48:94:21:e9:be:d6:34:26:71:5c:0e:02:f7:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:4D:3E:88:4B:DB:7B:42:B3:4A:7B:44:82:79:09:29:EA:FE:71
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.40.0-94.232.46.255
Signature Algorithm: sha256WithRSAEncryption
63:5a:06:40:12:d2:f5:46:e0:a0:98:0d:6b:67:4f:18:8c:1a:
91:6b:17:ff:46:73:ff:a7:b6:4f:fd:d9:fd:e5:6f:d7:ae:14:
d7:0c:e7:76:e4:48:6d:2c:49:dd:c6:c5:10:f8:6b:bf:e9:8a:
bb:08:c1:74:dd:1c:04:c9:ac:53:66:fb:27:07:f7:99:ef:a5:
fb:ea:29:c0:11:8d:8f:77:03:fe:31:65:97:77:36:f3:e8:ac:
80:58:92:89:10:29:68:57:c1:97:6d:19:dc:d0:59:ea:0b:ce:
40:49:6c:cc:26:0c:67:68:1f:85:85:28:26:6f:d3:3c:60:b9:
4d:f0:d1:77:d5:29:d1:fa:07:22:b6:77:f6:6b:f4:66:c3:69:
f4:26:70:8b:16:48:82:fa:45:fb:9f:b1:86:6f:92:ba:c2:c5:
0d:1a:f7:13:1a:7b:df:e8:18:a6:d1:37:79:fd:48:4d:09:7c:
4f:58:38:aa:c5:1f:75:f5:ab:52:e1:f7:59:ef:cd:b1:06:48:
50:4b:4e:3e:13:32:ae:c4:70:96:73:98:42:6f:c3:1f:52:c7:
77:9c:62:af:13:f0:c8:be:d2:7f:f2:d9:3d:54:50:af:f9:3b:
2e:90:c8:e1:a0:b7:a7:da:30:57:46:be:b3:e4:d4:f7:5d:88:
f9:ac:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net