Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/ZeLziwVcKFCzlXV46oF95sJgQFI.roa
File: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (raw, json)
Hash identifier: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=
Subject key identifier: 65:E2:F3:8B:05:5C:28:50:B3:95:75:78:EA:81:7D:E6:C2:60:40:52
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019423D7DEBEE97B3D2A9421CC7A5886AA99
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/ZeLziwVcKFCzlXV46oF95sJgQFI.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39364
IP address blocks: 185.225.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:de:be:e9:7b:3d:2a:94:21:cc:7a:58:86:aa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e2f38b055c2850b3957578ea817de6c2604052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:ff:26:39:42:d9:f8:15:56:b2:15:8d:bb:
6a:06:8d:35:88:f1:9d:47:33:57:1d:3a:ed:42:82:
59:f1:8b:ff:3d:28:17:90:81:56:c1:45:6c:05:49:
03:cd:50:d2:25:0b:2c:ef:61:0e:6c:0e:6d:fc:7b:
97:e8:6e:d2:e0:fc:1d:85:0e:a5:3e:47:36:4a:00:
a1:bc:8d:9e:67:1e:65:cc:0e:84:ef:89:ec:4d:c5:
4b:bd:d2:42:a0:92:78:d1:06:84:e1:de:75:4b:8d:
72:3d:10:b0:33:b0:ac:84:67:48:68:73:f0:42:f1:
7e:73:39:7f:7e:08:9d:07:00:76:ec:12:fc:3c:89:
ff:52:de:db:99:2a:43:74:5c:5d:fc:26:b9:d7:53:
5d:17:75:1b:4e:e7:6b:f4:52:83:06:c7:02:5f:29:
98:88:4d:30:f2:69:54:9d:de:26:63:49:96:5f:c3:
72:91:14:4c:5d:60:19:06:fe:59:7d:e8:c4:c5:2a:
6a:03:b5:b1:81:22:1a:f8:02:d9:3e:5e:6e:d3:09:
2c:57:c2:4f:ec:2d:5b:a0:f4:ed:68:2a:fd:29:6a:
20:02:49:59:8d:f9:9d:2a:86:52:a1:4b:e6:8d:44:
a3:fe:62:d7:78:65:5a:70:5c:82:eb:db:62:e6:ae:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:F3:8B:05:5C:28:50:B3:95:75:78:EA:81:7D:E6:C2:60:40:52
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/ZeLziwVcKFCzlXV46oF95sJgQFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:24:f6:55:bc:37:35:f4:01:da:00:4a:a6:76:62:fc:5f:1d:
a7:7e:fe:df:37:be:76:29:24:2c:ac:9d:bd:ac:0a:53:9c:ed:
54:40:7b:c9:07:80:24:74:7a:54:be:a7:89:e4:6e:92:59:3b:
3e:2f:45:35:e0:54:87:f3:01:8c:92:87:23:65:1e:59:e7:51:
a2:e5:b4:81:3e:59:9c:7f:a2:33:1c:eb:3e:1a:93:a6:54:67:
12:ad:db:03:41:57:4e:3a:20:5d:f4:db:37:48:44:dd:26:7f:
05:74:4d:ef:89:11:e6:ed:6c:be:b3:24:c6:2b:d9:ad:6d:29:
76:d3:b8:d4:c5:34:2c:d6:ae:e5:8b:00:59:c9:28:99:0d:a0:
d0:da:43:0b:94:c5:6e:ea:8e:89:67:c1:46:4f:d1:3a:ba:a0:
01:31:f8:48:dc:d3:e5:13:5a:45:97:29:23:20:39:23:3f:cb:
ba:cd:d3:e6:b3:e6:8e:38:26:75:06:d3:97:07:10:b9:6b:77:
cb:47:25:c1:0c:e2:b4:20:5c:b1:ec:2b:a5:3b:16:05:d5:80:
fe:df:e3:ec:64:00:bd:04:c0:da:81:28:d1:53:f7:4d:6e:be:
65:89:aa:e2:e7:be:c9:c2:e4:1f:68:39:d1:d3:78:23:5b:92:
df:3a:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net