Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa
File: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (raw, json)
Hash identifier: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=
Subject key identifier: 3F:3C:B3:49:64:F8:CD:62:7B:2B:85:EA:77:82:3B:A6:FD:FA:F5:E7
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0194266C10A9011A6B13E4ADC7CA4E1A154A
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206610
IP address blocks: 78.111.128.0/20 maxlen: 24
92.119.100.0/24 maxlen: 24
92.119.101.0/24 maxlen: 24
92.119.102.0/24 maxlen: 24
92.119.103.0/24 maxlen: 24
185.104.168.0/22 maxlen: 24
185.173.180.0/22 maxlen: 24
2a0b:b880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:10:a9:01:1a:6b:13:e4:ad:c7:ca:4e:1a:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3cb34964f8cd627b2b85ea77823ba6fdfaf5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:1c:01:9e:85:65:85:46:87:6a:85:75:52:
16:c9:78:27:5a:5b:88:b8:02:06:5b:ed:56:3d:7c:
da:61:72:d3:1f:ce:a1:8c:d5:3b:94:38:25:89:c0:
86:75:1e:9d:c5:98:16:ee:98:af:28:89:6d:53:90:
58:a1:7d:6f:32:af:a0:f0:c3:c3:be:35:22:34:10:
32:95:07:d9:ad:d6:0d:8e:f2:e6:84:84:a8:20:f3:
a0:59:f1:ab:50:54:cd:32:60:bc:16:f7:bf:97:9d:
8d:cb:98:1e:e3:ba:fe:cc:e1:2a:69:32:dc:fe:3f:
a2:03:95:ba:c4:ce:d7:70:17:7a:31:27:31:2e:ed:
0a:a3:9e:c6:4b:9e:9b:b2:0a:12:19:78:6b:6c:8d:
d3:2c:6a:db:cf:2e:23:91:a9:8b:8c:31:52:86:85:
d2:5f:09:fd:a0:91:86:dc:9b:aa:61:48:33:36:59:
53:46:c3:62:77:da:bb:56:65:57:25:87:ab:20:b4:
66:43:45:c1:40:80:2c:65:e4:3a:c7:70:1b:c3:81:
b2:1b:dd:76:8d:0c:da:be:f3:7f:c2:8b:9e:44:ea:
7a:86:90:57:9b:8c:85:bf:8d:79:31:b5:5b:1a:f9:
13:16:b2:5d:97:43:77:69:15:21:6a:4f:b6:a9:47:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:B3:49:64:F8:CD:62:7B:2B:85:EA:77:82:3B:A6:FD:FA:F5:E7
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.128.0/20
92.119.100.0/22
185.104.168.0/22
185.173.180.0/22
IPv6:
2a0b:b880::/29
Signature Algorithm: sha256WithRSAEncryption
35:af:b2:43:ce:45:3c:62:20:ad:6a:e9:36:27:a8:26:d4:4f:
6c:90:8f:9e:98:a3:ab:b6:a8:aa:3c:26:b2:1b:85:d1:71:60:
64:fd:0f:12:c6:22:53:42:86:06:ae:71:80:7e:6e:39:a8:05:
6d:9c:a1:62:5a:34:e5:f8:ea:d6:69:1a:29:6f:b4:9f:34:cf:
00:b2:a5:0e:d4:c5:44:8a:f9:a1:17:a2:da:54:81:7e:9c:78:
50:15:f3:17:66:b4:94:b2:26:8a:b8:a0:84:b8:ae:13:bb:d4:
7e:c2:ef:dc:b8:c4:35:1e:03:b9:26:79:81:98:b4:58:69:2d:
8f:ff:20:19:28:fa:31:34:79:db:b7:de:32:a7:eb:ee:b5:6c:
37:c0:e5:1e:12:31:42:a6:98:fa:4a:83:0d:9d:e7:70:3c:94:
59:f5:a7:da:71:a7:94:d7:71:95:cf:a3:6d:44:51:60:c6:46:
ea:5a:ff:b7:97:a7:47:62:b5:f2:d2:0f:d2:72:95:ba:74:38:
31:75:e2:88:d1:f4:66:dc:eb:5d:c6:b5:5c:62:c1:f8:31:7d:
bd:3b:d9:c1:13:ca:5b:8f:cd:ae:22:d3:e0:33:c8:ca:35:f3:
38:c4:be:e7:59:fe:dd:e4:48:d4:77:bf:20:a0:13:50:75:4c:
60:d7:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net