Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa
File: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (raw, json)
Hash identifier: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=
Subject key identifier: 65:21:00:40:81:CE:4E:9D:0C:11:F1:7A:BF:0C:97:5A:08:92:5B:9E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01941F8C62B3DA55A064C30F9CF9F50C04CB
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24634
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:b3:da:55:a0:64:c3:0f:9c:f9:f5:0c:04:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6521004081ce4e9d0c11f17abf0c975a08925b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:fd:ac:4c:01:23:19:2d:cc:f3:53:a9:a6:
ff:eb:82:7f:07:88:50:84:13:f5:df:15:f6:db:5d:
25:a9:18:23:d8:9d:4b:d2:87:1a:25:db:f4:6b:c9:
e6:af:f8:35:0e:57:51:12:4e:df:7c:e9:1b:97:ad:
9c:6e:9a:10:e5:63:80:dd:8a:7e:0c:b4:d9:72:71:
c4:51:56:75:61:46:b4:d2:eb:f1:a0:19:41:92:2f:
a3:6a:45:70:ee:d1:4c:73:ea:bb:8a:c8:7e:89:9d:
6d:26:b0:76:74:82:15:42:54:f0:4a:c8:8f:ad:b9:
2f:7b:a8:9c:1d:87:c1:ad:48:dc:10:a0:a2:16:c5:
87:32:5e:fd:d4:36:ec:71:2d:58:88:fc:b5:bf:11:
49:a8:41:c2:78:b6:84:82:ac:bd:ff:17:f0:e6:26:
7c:db:2b:ab:b1:55:10:4e:fc:fc:39:ee:83:8e:17:
b6:b5:27:d7:27:e3:1a:0d:34:38:d0:44:d9:3c:d1:
7a:4a:0d:0d:14:b7:91:66:ed:8c:05:c0:05:55:1b:
8f:f3:9f:5e:99:c3:53:5c:c4:fd:31:25:75:7d:a5:
0b:57:18:f7:d2:cd:97:16:64:51:42:b6:db:b3:de:
07:02:f0:ea:6f:8c:80:2a:a0:65:bd:58:e6:6a:24:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:00:40:81:CE:4E:9D:0C:11:F1:7A:BF:0C:97:5A:08:92:5B:9E
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:14:b6:ff:6f:c5:0b:34:23:7a:0b:f0:6e:eb:c4:b5:96:2d:
83:1e:bb:20:9d:f0:94:db:2b:16:ee:aa:aa:33:f4:0b:72:0e:
25:2c:e7:9a:f6:97:fc:0a:17:8e:d9:04:c6:7a:a5:66:8b:3a:
0b:3c:5c:f4:20:8c:2c:a9:46:13:ab:76:3b:f5:6c:e0:35:da:
9f:c9:53:e3:b4:76:03:10:ab:d6:88:46:3a:36:6f:e4:18:ed:
2b:77:6f:9a:5d:4e:4d:d0:a9:0a:9b:1e:06:86:db:35:a5:72:
ee:9c:9c:3f:9b:e0:91:bf:7c:7c:76:13:68:db:fb:aa:67:a4:
f2:ef:48:c3:70:d5:f4:68:4b:d4:f8:cf:16:f9:1c:fe:1a:38:
f6:12:78:22:87:5e:21:c0:47:09:30:bb:1d:43:14:9c:85:85:
4f:fa:06:7a:22:2b:43:2d:ef:1f:bd:77:17:06:5a:a4:44:a0:
13:3e:20:3f:6d:83:92:d1:f4:79:97:7b:4f:2f:9b:92:43:60:
b1:e5:1b:2b:50:6b:e1:ca:d2:d6:fd:59:1c:ad:ab:3f:9a:54:
b3:82:22:7b:d8:6e:55:d5:2c:7e:9a:de:68:13:f0:32:96:2f:
c8:67:72:09:89:fd:e8:7d:c1:0d:4e:a0:26:ab:1b:27:b8:0a:
8f:12:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net