Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZhF13E6bXfBfEuP-TH4aSsF1uAY.roa
File: ZhF13E6bXfBfEuP-TH4aSsF1uAY.roa (raw, json)
Hash identifier: VYf1iorIoOrcaIPoTuzTymMgTQ7J4yziJS4ld1f5r54=
Subject key identifier: 66:11:75:DC:4E:9B:5D:F0:5F:12:E3:FE:4C:7E:1A:4A:C1:75:B8:06
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019489CA09BC7DA87C0CECEF2692B9DE37B0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZhF13E6bXfBfEuP-TH4aSsF1uAY.roa
Signing time: Tue 21 Jan 2025 16:55:06 +0000
ROA not before: Tue 21 Jan 2025 16:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 91.186.214.0/23 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:ca:09:bc:7d:a8:7c:0c:ec:ef:26:92:b9:de:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 21 16:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661175dc4e9b5df05f12e3fe4c7e1a4ac175b806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:dd:f9:5f:93:0e:73:f6:fe:ce:ee:96:7e:
67:8b:30:f3:54:9c:ce:74:6b:f2:a7:6a:cd:1e:e4:
d5:ef:be:79:2b:77:67:95:ed:18:d9:35:e6:22:b3:
87:d3:c8:a8:e3:df:c4:b3:9f:5c:06:24:d5:c3:3e:
eb:81:ee:76:ba:ee:66:a6:62:cd:2f:06:44:ad:4c:
f5:f4:2e:2e:1d:aa:8c:69:a2:9e:d8:57:02:5c:e8:
18:e7:5e:c7:7e:23:67:cb:9f:d3:83:d1:a1:98:2c:
68:1a:31:d6:e2:3f:76:7c:df:26:23:da:8f:2e:a1:
dc:dc:44:42:53:94:44:40:c6:b0:36:a1:3f:72:6f:
95:d3:a1:e5:cf:d3:81:56:52:3a:4f:b2:c5:3a:d2:
47:6b:35:c5:49:5c:b2:50:1f:e0:ca:c6:9b:5d:de:
08:29:06:9b:95:8e:36:ab:4d:b0:ea:e8:34:29:04:
5e:39:cd:07:02:c0:ab:08:dc:df:cf:e6:bf:86:0c:
4e:4c:f8:63:1c:7c:3a:51:10:88:ca:22:7b:a7:4c:
99:4f:f3:19:f4:ab:69:ae:fc:a2:1c:2e:ff:d2:54:
85:47:4e:54:fe:01:6d:9d:81:11:a8:d2:4c:64:18:
e2:64:39:89:4f:93:f5:c4:68:89:8b:ec:91:63:fe:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:75:DC:4E:9B:5D:F0:5F:12:E3:FE:4C:7E:1A:4A:C1:75:B8:06
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZhF13E6bXfBfEuP-TH4aSsF1uAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.214.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
03:05:44:7a:29:d8:9b:8b:00:11:18:8d:74:3e:8f:47:f3:12:
be:d2:91:b0:54:c6:af:f5:88:9f:56:7d:4c:2c:2f:30:66:e1:
25:2f:7a:b6:10:29:e7:b9:cc:3e:a3:c1:24:12:80:4f:43:7e:
c9:85:e1:da:34:af:ad:f5:a1:91:a8:01:93:a9:45:8f:73:63:
bf:5e:3c:c6:2a:ef:7b:d7:e7:a8:16:fa:c9:be:9f:a5:1c:25:
c3:2b:cd:56:4c:b8:bf:5d:b1:4f:4e:3e:88:d7:0c:02:2b:d2:
ac:55:27:dc:12:a5:ea:ca:fc:fd:ad:4e:62:ba:66:2b:b8:cf:
18:d7:81:87:e4:c1:ce:1b:11:f9:92:dc:9a:a9:db:6b:ab:c6:
5e:dd:9e:77:10:4f:b5:96:b9:49:e1:29:88:1b:df:4b:74:68:
9b:0e:ed:7d:c3:0e:fb:56:b7:6f:97:ac:bd:b9:6b:24:23:24:
f3:6e:3b:65:6f:62:c1:61:0b:42:96:21:d6:1a:2a:c3:90:94:
2f:58:ec:a1:d4:20:d1:cf:1f:74:9a:2f:86:7f:46:9d:e5:7b:
a1:62:3a:8b:8c:dd:ca:c0:c5:3e:1b:a1:33:fe:5f:f1:db:8f:
6e:02:cf:3d:b8:90:56:62:b3:6b:8b:1a:3d:4f:48:dd:6e:10:
72:c5:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:12 2025 by rpki-client on console.sobornost.net