Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZvVQ4MKYfJXPEkn_WpWU2akFqx8.roa
File: ZvVQ4MKYfJXPEkn_WpWU2akFqx8.roa (raw, json)
Hash identifier: 5+B0Rv8YPM46iFoX/E6m4HkHPkOJ+uxcO4tYNNuM5mg=
Subject key identifier: 66:F5:50:E0:C2:98:7C:95:CF:12:49:FF:5A:95:94:D9:A9:05:AB:1F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195F67E597ADCB9C6C1AE9534C78D4A29B3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZvVQ4MKYfJXPEkn_WpWU2akFqx8.roa
Signing time: Wed 02 Apr 2025 12:33:50 +0000
ROA not before: Wed 02 Apr 2025 12:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 192.36.87.0/24 maxlen: 24
192.36.92.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
192.121.63.0/24 maxlen: 24
193.181.71.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.68.3.0/24 maxlen: 24
194.68.24.0/23 maxlen: 24
194.103.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:7e:59:7a:dc:b9:c6:c1:ae:95:34:c7:8d:4a:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 2 12:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f550e0c2987c95cf1249ff5a9594d9a905ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:55:a9:d1:a3:c2:b5:5e:94:01:de:83:c9:
36:60:f3:df:c0:9d:a4:70:2a:1f:47:0a:93:1a:47:
6e:f4:d9:f8:43:25:15:d8:79:ae:94:70:32:19:dc:
06:24:c2:4a:70:f7:28:b5:eb:88:a2:17:48:55:61:
4f:96:f5:cf:7f:0f:5e:30:04:83:c6:ff:ea:ed:18:
0c:0d:a5:10:a5:dc:ec:00:b9:73:f8:25:ba:62:ed:
ef:8a:da:7d:97:d2:69:b6:4d:dc:5a:57:9d:91:13:
61:e4:7a:ee:b5:70:cc:57:50:09:2d:fb:1b:fc:42:
30:44:60:60:44:2c:f1:a2:60:22:f2:a9:10:e0:3e:
7d:39:0c:69:67:ea:9e:63:5b:22:d9:aa:c2:46:63:
d3:70:0e:1d:58:6f:f1:f0:67:31:f5:f5:fb:21:38:
99:b8:a8:27:ff:0b:ff:e8:a6:4d:a3:4a:a8:0c:6f:
85:e1:14:3d:15:76:4d:97:12:f5:54:cc:e5:46:f0:
75:b8:16:de:8c:39:5b:21:15:b7:a1:51:db:cf:f2:
c5:50:a6:28:81:2e:e0:96:ba:fc:88:35:92:bd:15:
d7:85:c9:f8:27:eb:86:04:43:84:d1:04:80:3b:57:
17:26:dc:b9:59:81:67:22:ee:fe:a5:8e:e0:7c:f8:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:50:E0:C2:98:7C:95:CF:12:49:FF:5A:95:94:D9:A9:05:AB:1F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZvVQ4MKYfJXPEkn_WpWU2akFqx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.87.0/24
192.36.92.0/24
192.71.200.0/24
192.121.63.0/24
193.181.71.0/24
193.182.6.0/24
193.182.156.0/24
193.182.159.0/24
194.14.242.0/24
194.68.3.0/24
194.68.24.0/23
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:de:ad:36:43:4e:f0:41:de:c7:e2:3f:7c:dc:80:36:be:7f:
90:48:3b:15:9c:bc:91:fa:84:71:61:9e:99:04:e2:87:cb:56:
52:f5:bf:6d:8a:37:92:92:05:e6:c9:29:95:87:7f:73:bd:e0:
5b:d2:9d:00:1e:50:80:76:2e:85:87:ba:04:50:8d:87:98:87:
3a:6d:06:e1:ef:32:af:db:47:3a:bb:c3:62:fe:c9:15:4b:3d:
17:15:0b:c0:46:ab:d2:a3:6f:e9:36:d6:1a:e8:25:eb:10:c0:
02:62:ab:c1:94:c6:fa:2f:21:90:bc:14:18:6e:f5:ad:cf:b5:
f3:ef:3d:d1:77:7b:e6:f5:bf:af:21:42:e4:11:00:99:fa:f7:
cb:74:96:5c:87:5d:21:72:37:4d:03:70:f4:46:a8:b8:7e:57:
c9:da:c4:8f:51:69:75:ff:05:6f:d3:95:e4:c9:cd:12:3d:89:
81:f1:03:c7:f2:e4:2b:37:90:38:5c:4f:79:29:07:0e:c2:b3:
c7:66:ab:fd:50:db:6f:ba:34:b4:05:bc:a9:cc:3b:6c:91:66:
75:10:e0:88:88:51:26:ed:d0:39:c0:8d:bd:7d:56:3b:55:5f:
8a:d2:9f:56:db:9e:f5:e0:e2:cc:a6:9b:c8:3c:af:f7:43:63:
4d:fa:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net