Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa
File: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (raw, json)
Hash identifier: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=
Subject key identifier: 64:90:AE:D7:25:3D:9B:70:AA:E5:65:8B:91:E5:8E:A2:D8:9B:53:E9
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019447BB84B06D9C22AEE731D31249DBB4D4
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa
Signing time: Wed 08 Jan 2025 21:04:19 +0000
ROA not before: Wed 08 Jan 2025 21:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60847
IP address blocks: 91.244.227.0/24 maxlen: 24
185.92.12.0/24 maxlen: 24
185.92.13.0/24 maxlen: 24
185.92.14.0/24 maxlen: 24
185.92.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:bb:84:b0:6d:9c:22:ae:e7:31:d3:12:49:db:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jan 8 21:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6490aed7253d9b70aae5658b91e58ea2d89b53e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:ca:06:d8:7a:8c:0a:e1:b9:97:c3:a2:ea:
b9:7f:b7:5a:1f:c8:a3:eb:d5:79:24:c2:b6:b9:18:
91:da:21:4b:e9:25:1a:e6:9a:fb:a6:5a:17:c2:ba:
bc:ea:3c:05:4f:67:17:01:ad:61:56:2e:7a:02:97:
19:09:08:03:42:8c:6d:ea:0e:b4:cd:c2:d8:12:e8:
11:c2:cf:62:95:9c:d9:35:9a:5a:b3:1d:a3:d5:50:
8e:d6:d4:9b:22:13:a8:27:82:5f:2f:2c:b5:d5:82:
d0:62:49:b0:db:b9:5a:37:6c:ff:22:37:6c:40:22:
46:2c:ae:8d:9b:f4:4f:f3:1d:38:ed:80:32:62:d0:
5a:fe:c6:cd:17:22:63:1a:58:16:de:a3:21:e5:e7:
17:66:c1:28:79:58:fa:8b:58:17:aa:c7:c7:44:6f:
b8:e9:52:f0:72:68:08:77:dc:f4:0d:00:36:57:cf:
7e:ff:09:4a:ca:50:98:75:9a:f3:b6:78:e2:0a:1b:
10:7a:0c:da:92:7a:95:11:33:96:f0:f9:31:32:2b:
62:7d:02:70:17:fc:3e:e1:6d:2f:c3:e7:7f:da:2a:
16:db:b7:4a:b8:99:dd:a2:6d:bb:82:49:29:16:1e:
45:26:dc:b3:8f:b5:f0:eb:ef:b0:52:3c:0f:94:89:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:AE:D7:25:3D:9B:70:AA:E5:65:8B:91:E5:8E:A2:D8:9B:53:E9
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.227.0/24
185.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c8:60:d4:a2:e5:ee:a5:5d:c1:8e:95:fc:b4:ca:ef:ae:b0:
26:81:2e:c3:a7:5c:06:e7:66:a5:61:c6:e2:67:84:4f:ee:04:
b7:6c:c2:d9:5e:17:44:88:56:ef:38:8b:35:27:8a:27:7b:e4:
5a:1f:3c:22:14:c0:1b:ce:30:7b:a9:ba:c0:5a:2e:69:0d:0d:
1d:57:c7:00:34:4c:16:0f:65:f9:04:65:55:ab:c6:27:e5:2a:
6a:35:b2:bf:50:23:fc:50:6b:24:3a:8c:75:2f:46:31:10:ed:
87:1c:23:cc:e0:50:5f:7a:25:25:d1:9d:60:f7:da:0e:eb:57:
0e:7e:92:47:fa:38:b3:76:36:20:ad:7b:06:0a:c6:71:f5:96:
58:0b:55:f6:9e:d3:6b:ae:36:85:1c:a5:88:18:be:a9:1d:57:
71:6f:c8:94:53:5c:1e:5f:ac:7c:b3:25:17:52:76:71:14:cb:
70:b7:a9:47:e6:be:09:45:ff:b4:ba:04:ab:27:43:a7:1e:10:
2d:bf:fb:43:f6:39:46:a3:76:38:04:48:85:5f:04:69:a8:12:
71:b1:57:41:d3:58:b5:9f:ef:d3:09:7a:62:c4:97:8c:e4:18:
e1:c3:c8:40:21:6a:14:23:6d:4b:e9:78:52:69:38:c8:10:65:
39:72:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net