Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/zZkIW74qXtltgoLUxRfnjX8t5Bg.roa
File: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (raw, json)
Hash identifier: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=
Subject key identifier: CD:99:08:5B:BE:2A:5E:D9:6D:82:82:D4:C5:17:E7:8D:7F:2D:E4:18
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 0195B32B897A4064F41DB79A11EF3CE0D4ED
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/zZkIW74qXtltgoLUxRfnjX8t5Bg.roa
Signing time: Thu 20 Mar 2025 10:48:49 +0000
ROA not before: Thu 20 Mar 2025 10:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209906
IP address blocks: 5.182.164.0/22 maxlen: 22
5.182.164.0/24 maxlen: 24
5.182.165.0/24 maxlen: 24
5.182.166.0/24 maxlen: 24
5.182.167.0/24 maxlen: 24
185.238.144.0/22 maxlen: 22
185.238.144.0/24 maxlen: 24
185.238.145.0/24 maxlen: 24
185.238.146.0/24 maxlen: 24
185.238.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:2b:89:7a:40:64:f4:1d:b7:9a:11:ef:3c:e0:d4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Mar 20 10:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd99085bbe2a5ed96d8282d4c517e78d7f2de418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:6c:68:cc:86:09:8c:2b:61:d6:3d:54:70:
ac:51:9c:08:8f:c5:9b:be:77:06:72:ce:a2:11:04:
85:31:32:fc:df:6c:57:35:ae:8b:96:a3:55:a8:ad:
f4:25:87:9c:76:38:50:25:bc:06:ef:63:ee:fe:db:
da:ea:c4:e2:d7:31:a1:7d:01:c9:46:70:79:8c:b3:
05:ed:67:9f:31:b3:9f:aa:f4:2e:d8:b5:77:c5:e6:
84:a1:6b:a0:f3:ff:8c:c6:42:9c:8a:58:77:b5:da:
a7:92:b4:c3:c0:1d:bb:c0:0d:f4:0e:07:3f:cc:2e:
30:f2:12:4b:76:b9:c1:73:47:59:bc:e4:b6:22:2e:
c4:9d:c2:18:36:57:7f:98:2a:b5:9c:26:b0:e4:68:
11:66:1c:b1:5e:c0:c7:56:42:95:e3:ba:3f:70:9f:
09:3d:b4:8f:f4:ed:52:d7:62:a3:de:86:2d:e5:e3:
c1:9e:97:55:55:7b:98:d8:97:f1:9f:38:af:07:94:
ab:61:ed:03:33:9e:5d:40:32:1b:72:9c:5d:64:1b:
b2:25:82:26:9f:41:6c:05:fd:20:f8:72:cb:2a:a1:
fc:a2:2b:2b:44:d7:c5:c8:52:4f:eb:9a:21:b4:70:
2e:72:0d:dd:21:97:27:c3:13:e5:2e:3f:9a:0f:1e:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:99:08:5B:BE:2A:5E:D9:6D:82:82:D4:C5:17:E7:8D:7F:2D:E4:18
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/zZkIW74qXtltgoLUxRfnjX8t5Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.164.0/22
185.238.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e3:b5:35:c1:7c:0e:cc:35:3d:32:c1:d1:2a:93:9f:f4:7c:
4f:6e:f3:7b:69:b0:d7:83:70:02:56:a8:cc:b7:d2:cd:62:3b:
8a:f7:85:8e:36:57:12:0a:ed:81:d4:94:21:ab:b6:4f:e7:c6:
93:1f:b2:85:4b:cd:ae:76:3a:8c:66:1c:5a:13:ec:b9:e1:d9:
0c:ad:f7:fc:44:b5:0a:e8:08:59:59:f4:64:1a:92:f0:5b:5e:
19:3e:b9:5a:97:22:0e:fb:f5:83:dd:04:6d:74:42:a6:d6:b3:
6c:97:f8:0e:93:a7:a8:98:d6:35:15:f4:6a:e9:83:1f:2d:41:
10:f4:97:c6:13:ab:d0:d5:b3:ab:4b:1c:62:bf:57:eb:79:87:
47:85:fc:df:48:a0:00:6d:bb:bf:84:bc:59:a3:44:60:03:ac:
86:3c:a4:ba:9d:65:7e:e0:7c:e5:87:a3:84:b1:58:1e:52:b4:
6f:25:83:27:80:c7:61:19:4b:69:ea:de:c3:51:db:16:4f:15:
3e:f7:74:e9:64:68:22:ea:87:0e:3d:7b:72:3f:72:49:21:60:
b9:19:b0:ca:48:b4:68:20:1e:9a:41:fc:9f:6f:a3:6d:e5:02:
67:b5:4e:53:9a:e7:13:83:dc:95:33:b1:db:f4:a2:70:df:ce:
37:f2:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net