Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/ZmTI_BE0CxW812diBboPemqYE3k.roa
File: ZmTI_BE0CxW812diBboPemqYE3k.roa (raw, json)
Hash identifier: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=
Subject key identifier: 66:64:C8:FC:11:34:0B:15:BC:D7:67:62:05:BA:0F:7A:6A:98:13:79
Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial: 019420D664E04CB06637C20335FF01AB7FCB
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/ZmTI_BE0CxW812diBboPemqYE3k.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31437
IP address blocks: 91.197.80.0/22 maxlen: 22
91.197.80.0/24 maxlen: 24
91.197.81.0/24 maxlen: 24
91.197.82.0/24 maxlen: 24
91.197.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:64:e0:4c:b0:66:37:c2:03:35:ff:01:ab:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6664c8fc11340b15bcd7676205ba0f7a6a981379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:c6:28:09:0e:a5:e1:ab:30:6c:26:87:93:
0c:95:aa:8f:99:8c:cb:93:25:66:8b:aa:2f:6b:43:
16:fd:f8:75:d6:b4:57:f1:e3:93:ea:cb:e2:73:5c:
78:b5:46:7b:57:b1:2c:07:2d:74:cb:96:2e:fe:ac:
79:ac:9f:5f:7e:51:cd:7e:53:98:80:c8:84:dc:d3:
43:88:7f:4e:83:68:48:c1:71:94:4f:df:d1:10:10:
94:b5:ca:41:31:b4:cc:37:2b:99:96:01:3d:71:76:
07:e7:5f:56:0b:39:cc:92:4d:a7:d3:b3:bd:a9:c4:
f5:dc:ff:08:cf:6c:6c:c9:8f:24:15:cb:c9:99:dc:
24:11:1e:e5:4a:f6:56:c2:7b:4d:f0:2a:2f:55:ce:
94:7f:62:b8:b9:40:48:88:8d:67:8c:9c:85:2c:f6:
37:a1:b5:83:8d:a4:04:a8:12:96:1d:5e:95:ff:e1:
c1:49:f7:36:d9:c9:21:d2:56:90:b5:16:f8:e9:e8:
ee:24:4a:65:c6:1d:a8:fd:a9:d9:35:e8:c1:48:11:
3e:40:6f:fb:ec:0a:de:c0:3b:20:b8:75:f1:3c:9f:
fa:e7:ea:4a:3d:08:91:a5:c5:01:c7:38:0c:c0:43:
e4:22:8c:d6:0f:e3:a7:db:97:3c:29:e7:38:f8:dc:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:C8:FC:11:34:0B:15:BC:D7:67:62:05:BA:0F:7A:6A:98:13:79
X509v3 Authority Key Identifier:
keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/ZmTI_BE0CxW812diBboPemqYE3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:10:7e:83:22:44:c5:0c:47:c3:52:07:59:a8:5f:c8:2d:df:
5f:d6:c7:93:72:0d:24:29:ca:93:cb:18:00:d4:39:aa:06:c0:
fb:e4:c2:75:20:38:19:22:14:68:b2:4a:19:a5:d0:a7:1c:ec:
08:b7:a2:7a:17:bf:30:45:ab:f7:8b:a5:c9:1d:ef:15:c2:ca:
2b:2e:c2:07:2b:83:33:7c:29:4b:97:9a:a4:e2:b2:9e:b3:29:
83:0e:72:a7:4a:cc:c0:ac:2d:2f:01:77:ac:77:6e:f9:32:17:
a2:d9:c8:62:3a:e8:f3:50:0b:2d:aa:64:2d:82:16:df:eb:92:
0f:f3:ab:b4:4e:de:71:ec:b2:f3:ce:b8:4e:81:46:eb:3f:c4:
c9:fb:7d:f7:d9:34:6c:85:5c:ea:66:4e:8b:95:30:d2:c2:13:
09:5a:fd:22:99:0d:1b:5c:cc:55:11:0e:b2:ae:08:b2:d3:48:
fb:21:1d:ce:fa:f3:e1:c5:aa:34:d8:fa:0c:07:a4:fa:7f:0b:
46:e9:2a:f1:a5:9c:0e:81:e0:f7:c9:00:d5:76:d9:7b:4d:0a:
4c:11:3d:1a:0a:0b:38:01:15:f2:7a:13:75:b3:05:43:d8:c6:
88:57:22:fb:bd:f4:b3:8b:9a:6b:51:7d:c8:02:4d:b1:2f:21:
ee:6d:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net