Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa
File: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (raw, json)
Hash identifier: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=
Subject key identifier: 64:2A:5C:CF:4E:DB:7E:8C:6A:66:62:E9:39:F8:90:DB:16:68:95:76
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0195CC0AA57D349926D9B6EA833D253BD652
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa
Signing time: Tue 25 Mar 2025 06:43:24 +0000
ROA not before: Tue 25 Mar 2025 06:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44244
IP address blocks: 2.144.0.0/16 maxlen: 24
2.145.0.0/16 maxlen: 24
2.146.0.0/16 maxlen: 24
2.147.0.0/16 maxlen: 24
5.112.0.0/16 maxlen: 24
5.113.0.0/16 maxlen: 24
5.114.0.0/16 maxlen: 24
5.115.0.0/16 maxlen: 24
5.116.0.0/16 maxlen: 24
5.117.0.0/16 maxlen: 24
5.119.0.0/16 maxlen: 24
5.120.0.0/16 maxlen: 24
5.121.0.0/16 maxlen: 24
5.122.0.0/16 maxlen: 24
5.123.0.0/16 maxlen: 24
5.124.0.0/16 maxlen: 24
5.125.0.0/16 maxlen: 24
5.126.0.0/16 maxlen: 24
5.127.0.0/16 maxlen: 24
92.42.48.0/21 maxlen: 24
2a01:5ec0::/36 maxlen: 37
2a01:5ec0:1000::/36 maxlen: 37
2a01:5ec0:2000::/36 maxlen: 37
2a01:5ec0:3000::/36 maxlen: 37
2a01:5ec0:4000::/36 maxlen: 37
2a01:5ec0:5000::/36 maxlen: 37
2a01:5ec0:6000::/36 maxlen: 37
2a01:5ec0:7000::/36 maxlen: 37
2a01:5ec0:8000::/36 maxlen: 37
2a01:5ec0:9000::/36 maxlen: 37
2a01:5ec0:a000::/36 maxlen: 37
2a01:5ec0:b000::/36 maxlen: 37
2a01:5ec0:c000::/36 maxlen: 37
2a01:5ec0:d000::/36 maxlen: 37
2a01:5ec0:e000::/36 maxlen: 37
2a01:5ec1::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:0a:a5:7d:34:99:26:d9:b6:ea:83:3d:25:3b:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 25 06:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=642a5ccf4edb7e8c6a6662e939f890db16689576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:08:10:44:d9:37:7a:67:ee:e4:e7:5a:07:
0c:71:8c:52:1b:2d:aa:4d:21:3d:e9:7a:66:96:9f:
7d:50:8f:53:df:c2:b0:e6:c6:e0:b0:83:0e:2c:f9:
c3:82:2a:5a:28:eb:b6:52:5e:af:e7:3b:40:c3:cd:
92:24:35:4f:2e:2f:14:5a:23:f0:e1:58:a3:9e:38:
54:95:59:14:4b:32:60:55:47:1c:2b:e7:29:9f:8b:
ae:0b:63:0f:05:70:88:99:1e:8d:bc:62:98:92:5d:
be:f5:1c:cf:60:33:95:4d:7f:2d:97:4d:a3:10:c8:
e0:93:02:f1:cb:37:7a:34:35:43:49:46:1b:eb:02:
4c:ad:d1:7e:c1:3f:4e:84:09:0d:3a:0f:1e:d0:a6:
d9:ef:29:72:cb:3c:ce:af:00:0d:b4:a1:0c:0e:da:
cf:6b:91:66:74:5d:2c:47:11:13:a1:b0:0c:88:a2:
5d:ae:40:90:f1:2f:09:ea:42:53:b3:5c:f2:1f:b0:
b8:c6:41:2d:2c:11:51:8e:87:2c:73:d3:93:cd:94:
34:13:f0:3d:43:1d:2f:22:39:55:c6:eb:30:86:b8:
fe:0e:bd:7c:2f:91:e2:6f:6d:b2:7e:0b:61:19:c9:
ec:e5:16:80:5c:5f:a8:ae:cf:a8:8d:1f:59:63:d5:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2A:5C:CF:4E:DB:7E:8C:6A:66:62:E9:39:F8:90:DB:16:68:95:76
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.144.0.0/14
5.112.0.0-5.117.255.255
5.119.0.0-5.127.255.255
92.42.48.0/21
IPv6:
2a01:5ec0::-2a01:5ec0:efff:ffff:ffff:ffff:ffff:ffff
2a01:5ec1::/36
Signature Algorithm: sha256WithRSAEncryption
29:f4:a1:85:25:6e:99:f2:3c:6f:3b:92:a2:0c:a2:11:1b:0d:
e8:b0:5d:82:b5:f1:6e:51:fa:3d:02:6d:b0:3c:5e:44:dc:53:
49:e7:70:63:19:71:d9:dc:bb:5e:1d:f6:be:a2:ec:c0:9f:4e:
c5:ec:3f:b1:7e:14:45:6a:35:6c:4d:f1:df:eb:59:a6:d0:de:
e3:ef:3c:57:aa:57:3f:d8:15:52:6f:48:e0:6c:d7:ae:49:01:
86:19:f6:47:0f:4e:b5:d4:34:d9:bf:cd:0c:4b:ec:89:cf:4a:
cd:b0:b6:7d:f4:27:c4:16:4b:6c:34:55:30:95:0b:8d:64:17:
fe:26:10:d2:e1:59:4c:10:bf:9b:28:5b:72:79:89:0a:1c:fe:
f3:19:d6:72:96:e5:3c:dc:4d:e5:75:f0:26:2b:4d:e1:3a:ec:
66:27:83:cd:29:63:3e:8e:45:02:e3:5c:6e:b1:65:36:8c:d7:
db:12:b2:66:8f:85:65:44:6c:dd:ad:1b:04:47:ff:e1:6c:da:
e9:5d:15:a9:16:03:83:ec:43:00:27:83:a2:aa:28:d9:4e:c0:
8a:b6:3d:23:d9:0a:24:ff:fa:ef:3e:d8:74:44:6f:da:a2:24:
1a:47:bc:0d:8a:ca:d7:50:14:4a:87:e3:78:06:85:36:f2:a6:
11:11:7f:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net