Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/zTW-DDqj_DKyybC8B3Erc_k4_OE.roa
File: zTW-DDqj_DKyybC8B3Erc_k4_OE.roa (raw, json)
Hash identifier: aF2vKf/Dc/OONsqmm+OYYMGFEckKwY/y3uqC3qA2PH0=
Subject key identifier: CD:35:BE:0C:3A:A3:FC:32:B2:C9:B0:BC:07:71:2B:73:F9:38:FC:E1
Certificate issuer: /CN=78f29e87382159ca5e81387d7ee77e512fad1636
Certificate serial: 0195DBCBED8BACC2635B3F430741A7658624
Authority key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/zTW-DDqj_DKyybC8B3Erc_k4_OE.roa
Signing time: Fri 28 Mar 2025 08:08:49 +0000
ROA not before: Fri 28 Mar 2025 08:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51505
IP address blocks: 194.46.62.0/23 maxlen: 23
194.154.32.0/19 maxlen: 19
2a14:6700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:cb:ed:8b:ac:c2:63:5b:3f:43:07:41:a7:65:86:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f29e87382159ca5e81387d7ee77e512fad1636
Validity
Not Before: Mar 28 08:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd35be0c3aa3fc32b2c9b0bc07712b73f938fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:cd:e0:f6:e0:31:67:81:db:6b:cf:74:ff:
5f:4a:8c:b7:2e:0a:e9:e0:f4:ef:50:c8:a2:35:fd:
10:37:3c:46:e5:4f:96:dd:4d:ac:c6:5c:1e:83:bd:
a6:9d:d2:0a:8c:67:ad:ec:0e:7c:50:86:c0:00:5d:
5f:2f:cd:d0:fc:ca:52:bf:ca:7e:26:86:e5:21:df:
39:32:64:64:24:cb:03:60:39:b5:cd:e2:fa:6b:60:
d2:18:d8:84:47:cf:b9:8b:07:f0:5b:5c:51:5b:ab:
e3:dd:8e:f1:0c:21:11:09:b9:78:d9:2d:05:2b:62:
d0:17:cf:3b:f0:d7:fb:75:40:f3:d5:22:a5:64:64:
c9:d3:71:f8:25:91:b0:67:15:90:f9:cb:25:69:45:
15:86:ea:1b:84:07:c7:90:ed:67:f4:a6:1a:42:1c:
4d:39:19:dd:ab:c5:ab:61:9e:29:07:b3:35:e7:d9:
d7:60:86:cb:7e:1a:0b:be:1b:85:70:37:6d:e1:0e:
22:5d:d3:a6:8f:7c:08:5d:b8:41:28:0d:b9:dd:89:
5b:68:67:d4:5e:a2:f9:fc:90:82:79:2f:f1:ef:85:
28:8a:b2:22:f7:6d:1f:4e:40:4e:56:15:5f:8b:52:
ef:cf:c3:f2:16:df:a3:8b:9d:ed:85:0e:91:d7:eb:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:BE:0C:3A:A3:FC:32:B2:C9:B0:BC:07:71:2B:73:F9:38:FC:E1
X509v3 Authority Key Identifier:
keyid:78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/zTW-DDqj_DKyybC8B3Erc_k4_OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.62.0/23
194.154.32.0/19
IPv6:
2a14:6700::/29
Signature Algorithm: sha256WithRSAEncryption
0d:d1:02:ed:01:56:d4:92:65:32:75:67:a0:25:38:ff:38:d2:
63:dd:a5:99:68:5a:c5:76:03:59:3a:17:f8:95:33:b7:90:c2:
cf:4f:3b:8d:0e:53:03:1f:17:ab:8c:11:de:d7:ee:e0:9e:b6:
c3:e1:be:c4:c2:b0:a5:d1:37:56:a7:05:30:4c:4c:71:a5:24:
fd:0f:a0:72:71:9c:31:90:15:4e:95:b8:8b:34:c4:14:05:6d:
0c:ab:d6:1f:b0:77:f3:49:aa:14:8e:d8:c4:46:39:47:f2:c8:
e4:9d:ca:6a:02:56:d7:cb:e3:33:27:9c:48:fa:21:0e:84:34:
4b:9a:96:05:77:f2:e4:9b:84:89:00:a3:0e:3a:1c:89:5f:c2:
c3:b6:ce:2b:36:5e:e8:ef:6d:6c:da:08:c9:12:d3:99:e4:26:
b0:09:13:6a:b5:7b:ac:55:df:b2:36:1f:67:95:6b:b9:a7:6f:
41:60:79:eb:1f:fb:09:ac:25:ea:b2:55:76:50:4f:da:9b:79:
0d:2f:b5:2a:13:06:d6:26:e9:b5:8e:1b:4c:06:33:f5:32:c3:
7e:c9:2f:d4:90:2f:bf:d0:98:28:fa:b3:b8:71:ae:03:c1:b5:
b8:5a:05:91:1d:29:d8:06:b2:b5:49:eb:5e:df:05:45:12:8c:
df:b5:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net