Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa
File: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (raw, json)
Hash identifier: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=
Subject key identifier: 36:9C:56:8E:F2:76:4F:B7:FF:E8:0F:D9:4C:40:9C:4B:94:6B:2D:0F
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01941F8C62607B372C8DCD2C8B1CF7D31409
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:60:7b:37:2c:8d:cd:2c:8b:1c:f7:d3:14:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369c568ef2764fb7ffe80fd94c409c4b946b2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:63:ae:bd:dc:de:f3:4e:61:22:18:f9:2a:
c3:92:e2:bd:28:7c:de:08:16:6b:84:f6:fa:0c:e5:
b8:98:81:34:6c:3d:9b:83:9f:8c:03:c9:98:4f:c5:
a1:32:10:2a:ff:fb:6d:66:66:31:4a:29:35:af:ad:
a6:dd:9d:4f:e0:13:61:7b:a2:00:d3:fb:fd:70:e8:
31:79:12:fd:d0:f6:6d:57:9e:cb:22:b2:8b:9b:54:
11:04:a0:e2:9a:dd:79:ae:fa:80:bb:03:d5:f0:6a:
33:9d:bc:82:f0:1c:94:c2:81:67:29:01:50:92:e2:
e5:18:ef:81:b1:0b:e3:08:9d:33:42:c6:ad:b2:61:
d4:ec:7f:6b:90:db:74:64:0a:10:02:61:a8:ad:30:
d4:7a:df:a6:f9:fc:11:07:75:06:05:66:77:94:d5:
ff:64:ad:f1:12:f1:5f:4c:70:0f:b2:3d:3c:8e:90:
85:c0:64:95:ef:80:af:64:e8:5a:fa:f1:96:e0:df:
02:64:bc:86:9c:d9:d1:c0:28:54:1b:e5:c2:20:40:
a2:67:99:66:e2:6c:e9:55:99:c0:ec:73:54:74:3f:
41:5b:99:cd:02:4e:ca:2a:84:4a:fb:74:79:64:50:
79:64:b5:56:37:87:2f:70:b3:26:7a:ed:97:79:88:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:56:8E:F2:76:4F:B7:FF:E8:0F:D9:4C:40:9C:4B:94:6B:2D:0F
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:0e:2b:01:27:36:1e:c2:96:2e:fd:df:a1:6c:e8:71:3d:3f:
0c:1d:cd:37:88:e3:a4:6a:58:32:f4:8f:64:6c:6b:17:84:ba:
5c:9b:1e:b9:75:14:0d:07:5e:97:af:5e:99:22:9e:3d:5d:9a:
69:bb:91:be:eb:ae:7b:fe:17:94:cc:bb:97:54:27:39:14:dd:
a6:b4:3b:74:fc:f0:3a:53:dc:8f:56:b2:5e:ad:a1:91:ad:8a:
7c:88:b5:28:69:fe:72:07:cd:98:e4:4c:61:8d:96:74:4b:3c:
b8:43:06:6f:53:05:df:f1:f7:5b:d7:58:86:28:87:6e:d4:3d:
8e:10:e4:c6:98:f9:96:90:21:50:fb:16:37:e0:b4:1f:05:7e:
d5:7c:fb:b1:11:c4:08:09:7b:a4:46:94:d8:ec:a8:b2:11:5d:
45:5e:1e:50:84:9c:db:9e:95:d7:60:c7:8c:a7:08:8c:3f:76:
3b:44:c8:e0:41:29:5a:bc:68:c5:ed:ad:4a:cb:4c:84:88:d1:
cc:75:2b:13:ab:7e:a4:bf:a7:68:b3:a1:d3:a2:d3:cf:0e:1e:
24:2b:60:fd:10:c9:8e:da:ec:f4:97:0a:f9:4a:7b:4d:2d:67:
97:0f:7b:00:d3:6d:ef:1d:bb:dc:fc:85:fd:14:67:03:4c:4b:
01:64:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net