Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZfBqOoXHUKYwFm0K2P3L8CqH5jA.roa
File: ZfBqOoXHUKYwFm0K2P3L8CqH5jA.roa (raw, json)
Hash identifier: jcJ7i7ei55IV/pz5UmYFU9DxZXbxNv804qhavPYLYSU=
Subject key identifier: 65:F0:6A:3A:85:C7:50:A6:30:16:6D:0A:D8:FD:CB:F0:2A:87:E6:30
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 01955B721C0DF08FFAE231E5D3E28AD301B0
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZfBqOoXHUKYwFm0K2P3L8CqH5jA.roa
Signing time: Mon 03 Mar 2025 09:59:19 +0000
ROA not before: Mon 03 Mar 2025 09:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 24
93.175.45.0/24 maxlen: 24
93.175.47.0/24 maxlen: 24
93.175.57.0/24 maxlen: 24
93.175.58.0/24 maxlen: 24
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 48
2a0e:5b00:40f::/48 maxlen: 48
2a0e:5b00:412::/48 maxlen: 48
2a0e:5b00:420::/48 maxlen: 48
2a0e:5b00:500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:72:1c:0d:f0:8f:fa:e2:31:e5:d3:e2:8a:d3:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Mar 3 09:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65f06a3a85c750a630166d0ad8fdcbf02a87e630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:19:d2:04:5c:a1:2b:2d:b2:3d:79:2e:21:
c2:7e:bc:ff:d7:df:db:67:4c:14:d9:61:6d:2b:90:
39:f4:d8:67:68:f0:75:40:ec:9a:9e:d7:b8:0b:31:
17:05:f4:c6:4a:14:9b:0a:89:7f:98:36:6b:9b:93:
b1:ba:27:e6:e6:3a:a8:42:13:97:2a:10:64:b1:8d:
6f:ae:96:73:28:f8:75:62:07:57:a0:2f:72:6e:c1:
5f:db:fb:20:b6:80:62:4f:1d:e4:94:c8:da:3f:41:
e7:bd:41:cd:bb:db:1f:0b:26:29:5f:49:3c:1e:1a:
d2:74:ea:e3:db:b9:82:35:c4:1b:c8:cd:84:dc:88:
a8:f8:72:48:4e:30:6d:71:52:39:ca:85:39:1a:26:
6d:73:51:3d:6a:4b:07:a3:fd:16:e0:e3:76:d3:0b:
85:81:5a:d7:8b:8c:47:81:a9:a7:7b:b9:f7:3e:0d:
e4:4f:92:58:44:42:d8:62:c2:f7:5a:f7:70:e1:3b:
11:7d:af:be:3c:dc:d1:59:72:71:70:ca:ce:e0:5b:
5b:fb:21:78:9a:b6:24:a5:b0:66:1b:0d:e0:e9:f9:
2f:6a:76:16:04:99:99:2e:33:52:c4:ce:6d:2f:17:
a8:35:26:97:d5:8f:a9:62:b5:f3:13:22:ba:b7:c0:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:6A:3A:85:C7:50:A6:30:16:6D:0A:D8:FD:CB:F0:2A:87:E6:30
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZfBqOoXHUKYwFm0K2P3L8CqH5jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
19:de:ab:3c:7b:3a:6f:a6:d4:86:a5:96:f8:ab:a4:7e:b1:d8:
33:19:02:b0:67:43:e5:b3:55:e3:6f:bf:a7:b9:1a:50:0e:b0:
4c:60:21:b8:9d:27:57:b1:8e:11:5f:bd:ae:54:8c:3d:98:73:
ac:06:25:89:0d:c0:9d:86:dd:4c:64:a4:80:d8:ab:57:09:5f:
bb:37:f8:43:89:e8:42:25:2b:c2:13:da:b8:1d:6a:da:51:b9:
d7:a1:9b:72:e2:11:ad:2b:22:66:b1:4a:dc:67:0b:80:9d:4d:
09:79:99:5f:07:0b:b9:e1:d9:15:ed:8b:8a:68:90:8b:1f:bb:
16:57:24:c0:1e:a3:97:cf:4f:7e:55:70:c1:fb:ff:d5:9d:31:
ed:cc:a0:09:cd:7e:32:60:c7:09:fd:4c:05:a0:34:34:7a:cd:
44:a3:ae:59:0a:7a:56:01:3e:7c:45:ff:1c:b5:54:79:d9:01:
04:42:6d:9d:02:dd:5c:ad:18:1f:4d:92:35:4c:55:94:28:63:
66:40:c2:77:54:88:60:28:43:86:8a:4c:e4:90:9c:32:76:98:
d3:0b:04:69:0b:d9:4a:11:fa:84:c6:f8:ae:71:30:54:67:51:
c7:60:81:8f:84:53:41:29:b2:a2:50:15:1a:0c:3b:d7:64:66:
4f:71:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net