Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/ZamJBE4sZJzuceuV18oyBqtpOjU.roa
File: ZamJBE4sZJzuceuV18oyBqtpOjU.roa (raw, json)
Hash identifier: LNlVIMG3VU5UE3VeROYcTFgJLWfkH+zXaXnmdoQsSTc=
Subject key identifier: 65:A9:89:04:4E:2C:64:9C:EE:71:EB:95:D7:CA:32:06:AB:69:3A:35
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019420D66790BC97CD9F96BB53090FB1FCC6
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/ZamJBE4sZJzuceuV18oyBqtpOjU.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202918
IP address blocks: 185.150.156.0/22 maxlen: 22
185.246.28.0/23 maxlen: 23
2a07:71c0::/29 maxlen: 29
2a0d:7380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:67:90:bc:97:cd:9f:96:bb:53:09:0f:b1:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a989044e2c649cee71eb95d7ca3206ab693a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:0b:36:2f:6b:bf:01:60:a8:9b:74:33:54:
17:de:b9:eb:c9:c8:96:ed:f9:f9:b6:91:5f:27:6b:
5b:62:9c:fb:86:d2:e8:7c:a7:b0:97:6e:ff:20:df:
c7:f2:79:06:12:6d:74:0b:56:6f:cb:52:88:cd:f4:
b8:48:74:b8:50:05:23:37:48:0e:b0:1b:f1:03:43:
c9:d6:c3:51:cf:79:0a:0f:ae:48:85:71:78:ab:88:
96:bb:d0:49:40:65:9d:83:6d:2c:37:5e:d9:d0:6f:
ed:a7:60:00:93:1f:a2:fd:cf:6e:29:a3:77:2a:18:
d0:ee:19:6a:70:ad:38:d2:55:00:25:31:0c:19:88:
ab:64:73:76:6a:cc:c3:5f:45:be:52:a1:ca:dc:b5:
ca:65:1c:16:dd:af:93:f9:db:1f:66:0e:40:1e:72:
f0:84:74:4b:aa:88:64:96:40:9d:6d:2c:d0:7b:db:
f0:08:09:9b:b5:66:a6:b9:47:e1:83:be:68:ff:2f:
22:bd:a6:36:03:25:d5:2a:bf:b6:8d:75:cc:82:07:
bd:8e:35:e3:c2:41:fb:0b:d7:fd:47:82:c7:9b:50:
ee:a7:eb:93:d1:78:71:7b:22:93:d7:0d:f1:b6:77:
08:5d:70:02:4a:2c:e4:7c:53:95:1a:37:c9:54:6a:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:89:04:4E:2C:64:9C:EE:71:EB:95:D7:CA:32:06:AB:69:3A:35
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/ZamJBE4sZJzuceuV18oyBqtpOjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.156.0/22
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
82:ff:fe:e1:c4:eb:ea:7b:1b:fb:fc:51:05:79:fd:28:92:1c:
1a:dd:01:13:e6:c6:f5:f7:1c:02:48:7c:c8:b7:eb:17:1e:d2:
65:1b:4f:cb:92:d1:5e:fe:8a:f1:d0:11:82:bd:fb:63:f9:28:
4d:5e:1d:e9:9b:78:e1:d6:f1:89:d2:39:ca:d2:f5:fc:86:cc:
14:a1:9f:1a:1b:46:bb:1d:81:04:2e:82:8c:f5:df:04:0c:27:
6f:d2:57:c9:a6:65:93:cd:d7:58:da:4b:90:b9:4a:0d:f5:b8:
ad:52:19:19:cd:65:74:06:a3:a4:f5:ac:45:d1:f5:5e:34:96:
09:38:ee:59:fa:8f:a7:ca:63:e6:7f:5a:b0:47:79:ad:a3:bc:
e5:90:fc:03:3c:8a:7e:07:9c:4e:c0:3f:12:4a:6b:bc:cf:be:
2d:00:da:ac:82:d1:e7:99:7f:ef:d0:9c:82:b5:b4:cb:14:96:
49:5d:24:d4:98:96:67:2a:f5:35:c9:eb:09:2e:59:bc:8b:39:
52:1a:a0:3f:86:c3:f6:77:38:d8:93:63:3a:33:fe:c3:f7:68:
23:2f:66:2b:a4:d1:63:ff:a9:d9:56:0b:46:1a:ee:32:00:99:
31:03:20:11:dd:1c:6e:4a:75:95:fd:3b:3d:8d:fd:e3:4d:6f:
78:ef:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:14 2025 by rpki-client on console.sobornost.net