Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ZRG74paviVX-XS90B8J_nR1og6Y.roa
File: ZRG74paviVX-XS90B8J_nR1og6Y.roa (raw, json)
Hash identifier: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=
Subject key identifier: 65:11:BB:E2:96:AF:89:55:FE:5D:2F:74:07:C2:7F:9D:1D:68:83:A6
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 0194F5209C24881B80BEA6D1051DECDE4774
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ZRG74paviVX-XS90B8J_nR1og6Y.roa
Signing time: Tue 11 Feb 2025 13:09:02 +0000
ROA not before: Tue 11 Feb 2025 13:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216275
IP address blocks: 91.226.144.0/23 maxlen: 23
91.229.203.0/24 maxlen: 24
2a13:e740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:20:9c:24:88:1b:80:be:a6:d1:05:1d:ec:de:47:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Feb 11 13:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6511bbe296af8955fe5d2f7407c27f9d1d6883a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:b2:b4:f1:d4:cd:68:a9:4f:c4:7c:74:f2:
51:81:cf:38:e2:a2:02:30:83:3f:d4:5a:33:b2:5d:
d2:8f:8a:e1:4f:83:a8:d1:4d:19:a2:7f:17:21:e7:
25:c9:df:86:9a:82:34:4b:35:41:8c:84:9d:de:d4:
5b:4b:65:1f:68:09:24:0b:ac:d9:0c:f6:a1:05:3c:
f3:af:c8:60:be:81:ae:50:54:31:23:14:44:81:5f:
a1:46:7e:84:6b:30:8d:6e:1a:e2:d2:71:d1:2c:a6:
95:9b:09:61:8c:21:91:23:90:32:c5:f8:67:aa:72:
51:f6:83:1d:61:3e:75:04:ef:90:bd:0c:f4:de:0f:
b3:38:33:04:82:65:56:e4:94:b2:09:48:19:21:94:
60:60:37:e3:9c:19:a8:05:ad:8a:a8:99:3d:7c:13:
97:61:10:09:68:36:27:fe:9e:93:38:45:21:72:bd:
d1:8e:89:24:50:03:f4:a5:0b:44:fa:10:65:35:d8:
b7:99:67:60:9e:65:67:01:2a:f1:ad:52:fd:8f:f8:
3f:a4:61:e4:fc:f9:e6:7a:ac:3f:65:f6:6a:99:e4:
62:14:e6:c2:83:d1:e1:7d:46:b6:cf:3d:dd:86:e5:
2a:bf:32:fa:9d:c0:37:e8:02:7e:ec:e8:42:b5:8c:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:BB:E2:96:AF:89:55:FE:5D:2F:74:07:C2:7F:9D:1D:68:83:A6
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ZRG74paviVX-XS90B8J_nR1og6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.144.0/23
91.229.203.0/24
IPv6:
2a13:e740::/29
Signature Algorithm: sha256WithRSAEncryption
7f:77:73:28:e4:6e:5a:d1:32:e6:c4:3b:cb:4c:93:14:d4:2b:
0f:d1:93:1a:d1:12:b4:52:44:60:6e:38:30:d8:7c:f6:da:7b:
28:ef:b3:d3:00:cf:32:0d:d5:08:0b:19:05:47:5a:7a:d1:cc:
b5:31:09:a0:23:77:06:ca:a9:9b:db:71:52:27:22:64:9a:07:
b7:ef:ef:4d:cd:ee:f5:19:94:19:f6:41:32:90:bc:8a:fa:6d:
8a:47:72:1f:3a:26:7c:f3:ad:17:68:1e:e6:c6:ee:80:b1:8b:
dd:60:5c:bd:9d:56:d8:ec:8c:2d:2c:7b:d1:fb:54:f8:8a:67:
e3:22:75:38:35:28:d3:fa:f1:f8:ba:6a:c3:e8:5a:44:a5:eb:
ae:e7:49:59:9d:e7:c6:6a:b7:80:d0:65:b6:bd:0f:e7:15:03:
ff:7d:f8:a5:63:0a:98:35:d0:1a:2b:3f:f2:92:c2:12:2a:68:
c6:62:1e:8f:52:ea:44:2f:39:71:4f:62:24:b5:b6:de:dc:41:
88:39:b4:ac:90:a2:11:d4:ef:16:a7:6d:40:97:47:86:c4:a6:
9e:b7:29:1f:af:0f:6e:bc:e1:50:00:5a:46:11:25:75:07:30:
2f:c7:4c:a3:3c:42:ba:66:c6:89:06:2c:9a:bf:c5:62:cf:b7:
df:56:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net