Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/zR4VCepGwzjWvZZ7s_QPwCRLuXQ.roa
File: zR4VCepGwzjWvZZ7s_QPwCRLuXQ.roa (raw, json)
Hash identifier: I/vylIp0wmKTYGLVF3RkbAls7GMsIEUykJvxklzddzk=
Subject key identifier: CD:1E:15:09:EA:46:C3:38:D6:BD:96:7B:B3:F4:0F:C0:24:4B:B9:74
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019427B53877B1099F0555D3D8E2C91C0CE3
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/zR4VCepGwzjWvZZ7s_QPwCRLuXQ.roa
Signing time: Thu 02 Jan 2025 15:49:35 +0000
ROA not before: Thu 02 Jan 2025 15:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
147.189.216.0/24 maxlen: 24
193.5.16.0/22 maxlen: 22
193.5.19.0/24 maxlen: 24
2a0d:3dc0::/29 maxlen: 29
2a0d:3dc2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:38:77:b1:09:9f:05:55:d3:d8:e2:c9:1c:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jan 2 15:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1e1509ea46c338d6bd967bb3f40fc0244bb974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:15:f9:43:f5:ba:d3:a8:b2:6e:27:6f:07:
45:98:ae:9e:db:fd:5c:89:cb:e2:4e:f6:ee:c2:d6:
95:fc:ab:c7:f8:de:8e:f0:bb:4f:9f:09:64:40:49:
36:cd:da:0d:a8:9c:33:31:b7:25:26:75:ed:b3:03:
95:55:f3:99:60:4c:bc:29:d1:ce:7b:76:1d:c3:67:
b4:44:7e:29:51:66:9b:aa:59:d7:c9:32:68:31:f3:
f5:eb:3b:8b:78:90:af:03:cf:f2:12:6c:61:3b:28:
ec:83:4a:ae:03:d6:ea:71:62:bb:b9:e1:25:f6:6e:
bd:b3:ac:b5:49:00:f8:22:17:d3:81:79:36:d3:d7:
b5:3d:a7:72:df:5b:9e:ab:2c:ee:5b:2c:c5:1c:c0:
80:03:98:fb:fe:4a:11:ec:32:ca:6a:08:ed:f4:0a:
d7:8b:05:26:ef:7e:37:f9:5f:68:e5:0d:6a:35:fd:
44:74:0f:3a:30:cb:b8:aa:a2:9e:b2:36:c0:cc:10:
d4:f1:05:58:0e:15:1a:4e:12:ff:74:21:d5:02:e6:
ba:3d:8c:62:d2:a0:f1:86:49:87:a8:6a:38:82:c1:
d0:77:41:3a:71:69:98:12:32:8b:d8:6a:8c:b3:84:
b8:bb:e1:c1:5c:ec:50:25:80:e9:65:ea:a3:da:a1:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:15:09:EA:46:C3:38:D6:BD:96:7B:B3:F4:0F:C0:24:4B:B9:74
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/zR4VCepGwzjWvZZ7s_QPwCRLuXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:30:71:29:d0:a2:f4:d0:53:37:53:47:09:0f:f2:5e:42:5e:
2f:8e:1f:da:7a:20:0d:1e:9b:df:9a:b2:09:30:cd:13:98:f5:
6a:5a:4d:85:ab:ea:21:8e:d8:d7:bc:dc:7a:57:93:a3:76:aa:
19:2c:b4:6e:f2:eb:f5:c0:ba:82:61:5f:b0:a1:8a:dc:89:e1:
30:43:6e:73:5c:4f:dd:c1:51:35:a9:d4:6a:ad:e4:17:a4:fe:
be:c4:39:d9:e6:90:05:c0:69:9a:42:63:43:70:95:a2:64:1c:
ad:b0:dc:c5:78:49:97:39:56:ec:eb:63:c3:37:fd:94:85:c7:
1b:a0:3f:3b:5e:da:c7:67:49:a1:ba:90:75:5c:9a:2e:d7:ac:
df:ff:c0:08:90:52:e5:86:76:7f:7b:9d:fb:3f:39:4d:73:c5:
70:59:3a:29:56:c1:74:24:dd:68:44:f7:cb:8e:f6:0f:dc:a9:
8e:d3:2c:d8:e1:7a:22:cb:48:c9:1f:df:f7:7c:ef:71:e5:56:
da:3b:f7:44:f3:30:ad:8f:6b:da:1a:9b:f2:1d:19:b2:b3:ee:
1f:33:de:a6:b7:1d:80:98:dd:f3:9a:ac:bc:46:95:63:0b:28:
50:2e:3a:23:cb:5f:fb:0d:f6:74:55:39:ab:2e:cb:37:36:ed:
45:76:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net